Coinbase Logo

Language and region

Consumer Protection Tuesday: Coinbase launches a new $5M bug bounty program exclusively focused on onchain vulnerabilities

Tl;dr: With rewards of up to 5M USDC, we are launching a new bug bounty program exclusively focused on onchain vulnerabilities today. This will help us connect with the broader onchain security research community and further strengthen our security posture.

By Coinbase

, July 8, 2025

, 3min read time

Screenshot_2024-11-12_at_12.09.28_PM.avif

Security at Coinbase

At Coinbase, security isn't just a priority — it’s the foundation of everything we do. Security is deeply integrated into every stage of the product development lifecycle, from initial conception to deployment in production to continued safe operation. We also strongly believe in building strong relationships with the broader security research community. Through our bug bounty program, hundreds of researchers have engaged with our products and received over $2.3M in bounties. It is rated as a top response efficiency program on HackerOne.

New Bug Bounty Program

As the pace of onchain development accelerates at Coinbase, we are launching a new bug bounty program to connect with the broader onchain security research community and to further strengthen our security posture. The new program exclusively focuses on onchain vulnerabilities and all smart contracts deployed by Coinbase in connection with any product are in scope. With rewards of up to $5M, Coinbase’s new bounty is one of the largest on Cantina, who will host our program.

We invite security researchers and the broader onchain community to identify and responsibly disclose vulnerabilities in any of our deployed smart contracts in accordance with our terms. By participating, researchers help safeguard user funds and contribute directly to the resilience of the decentralized products we are building.

Hosted on Cantina

Cantina has been a great partner for us in the onchain security space. Their smart contract audits have complemented our internal audits over the last couple of years. With the launch of this bug bounty program on Cantina, we further solidify this strong relationship and open up our onchain products to a wider pool of researchers spread all across the world.

Get Going

Why wait? Head over to the bounty page to learn more about the program. Help us secure a diverse suite of products that will bring a billion people onchain. 

Coinbase logo