Paxos Bug Bounty

Cantina live git_repoweb

Bug bounty program on Cantina. Official listing: https://cantina.xyz/bounties/6a6ef71c-383d-4357-85c1-a0d1dbb6659b. Scope and rules are controlled by the program — always verify against the official listing before testing.

Max bounty

$1M

Starts

2026-03-27

In-scope assets

Last updated

2026-06-24

In-scope assets

Type	Asset	Detail
repo	paxosglobal/cross-chain-contracts	cross-chain-contracts
repo	paxosglobal/paxos-gold-contract	paxos-gold-contract
repo	paxosglobal/paxos-token-contracts	paxos-token-contracts
repo	paxosglobal/pyusd-contract	pyusd-contract
repo	paxosglobal/solana-programs	solana-programs
repo	paxosglobal/usdg-contract	usdg-contract
repo	paxosglobal/usdp-contracts	usdp-contracts
web	gfix-service.gfix-exchange.prod.itbitprod.com	TLS verification host (checkHost / certificate CN)
web	gfix-service.gfix-exchange.sandbox.itbitprod.com	TLS verification host (checkHost / certificate CN)
web	https://account.paxos.com	Account UI (Prod)
web	https://account.sandbox.paxos.com	Account UI (Sandbox)
web	https://api.paxos.com	API (Prod)
web	https://api.sandbox.paxos.com	API (Sandbox)
web	https://auth-api.paxos.com	Auth API (Prod)
web	https://auth-api.sandbox.paxos.com	Auth API (Sandbox)
web	https://dashboard.paxos.com	Dashboard UI (Prod)
web	https://dashboard.sandbox.paxos.com	Dashboard UI (Sandbox)
web	https://oauth.paxos.com	OAuth (Prod)
web	https://oauth.sandbox.paxos.com	OAuth (Sandbox)
web	https://pax-admin.paxos.com	Admin UI (Prod)
web	https://pax-admin.sandbox.paxos.com	Admin UI (Sandbox)
web	https://paxos.com	Main domain
web	https://ws.paxos.com	WebSocket (Prod)
web	https://ws.sandbox.paxos.com	WebSocket (Sandbox)

Watching Paxos Bug Bounty? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.

Track this program