Overview
Mixed Web2 and Web3 bounty platform. Useful diversification when HackerOne/Bugcrowd programs feel overcrowded or when hunting crypto-adjacent targets.
How to make the most of it
- · Filter for programs matching your stack—web app vs smart contract.
- · Read scope and severity tables carefully; project quality varies more than top-tier US platforms.
- · Treat early reports as portfolio builders while learning payout reliability per project.
- · Combine with Immunefi/HackerOne rather than using as your only platform.
- · Watch for newer projects with fresher attack surface.
Basic rules
- Stay in published scope.
- Follow HackenProof and project policies.
- No destructive or out-of-band abuse.
- Disclose only through the platform.
- Respect KYC/payout requirements.
Always read the live program policy — platform norms never override scope.
Best for
Hunters wanting Web2+Web3 mix and less crowded listings
Payout notes
Varies widely by project; check historical reputation per program
Learn on YouTube
Search results for explainers and walkthroughs. Verify freshness and prefer official channels when available.