Near Protocol
Intents Bug Bounties
active
08 Sep, 25 - TBA
NEAR Intents is a cross-chain trading and settlement protocol built on the NEAR blockchain, facilitating atomic peer-to-peer swaps and intent-based executions. To secure its multi-chain infrastructure, the team has launched a suite of ongoing bug bounty programs hosted on HackenProof. Security researchers are invited to hunt for vulnerabilities across the protocol's core components, including smart contracts, bridges, and SDKs. The program incentivizes responsible disclosure following a recent $3.8 million exploit, offering substantial rewards for critical findings.
Near Protocol - Intents Bug Bounties Overview
How to join Near Protocol - Intents Bug Bounties?
The NEAR Intents suite operates three distinct, rolling bug bounty tracks hosted on the HackenProof platform. The Smart Contracts program covers the core Verifier contract with rewards ranging from $100 for low-level bugs up to $300,000 for critical vulnerabilities. Similarly, the Bridges track focuses on the Omni Bridge and decentralized threshold signatures, offering identical payouts up to $300,000 per critical issue. A dedicated SDK track is also available, providing up to $20,000 for critical infrastructure flaws.
For High and Critical severity submissions, the maximum payout is strictly capped at 10% of the funds that are practically affected by the discovered vulnerability. Researchers must submit their findings exclusively through the official platform within 24 hours of discovery and maintain strict confidentiality. All payouts are distributed in native NEAR tokens following a comprehensive validation process, which typically includes a 3 to 7 business day triage period.
Step-by-step Guide
Register an account on the HackenProof platform and complete any required preliminary KYC.
Review the specific program scopes for Smart Contracts, Bridges, and the SDK to identify eligible repositories and out-of-scope assets.
Test the infrastructure on a private testnet to locate vulnerabilities related to unauthorized transactions, fund loss, or cryptographic flaws.
Submit a detailed vulnerability report via the HackenProof portal within 24 hours of discovery, including clear reproduction steps and proof-of-concept screenshots.
Maintain strict confidentiality and await triage validation to receive payouts in native NEAR tokens.