Bug bounty presence & max payout

dYdX v4 (dYdX Chain)'s assessment for RD-F-007 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Active Cantina bug bounty launched 2026-05-08: Critical up to $1,000,000, High $150,000, Medium $50,000, Low $5,000. Covers protocol layer (v4-chain), indexer, web client, and client SDKs. Prior direct program via bugbounty@dydx.exchange had up to $5M max. Program is well-funded (>$500K critical threshold met).

Sources #

URL
dYdX Cantina Bug Bounty — Critical up to $1M, launched May 2026Cantina dYdX bug bounty programretrieved 2026-05-17
URL
dYdX Security PolicydYdX security docsretrieved 2026-05-17

Methodology #

Check whether a public bug bounty program is active for this protocol and record the maximum payout in USD.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol dydx-v4 factor RD-F-007 score green collected_at 2026-05-17 09:58:47