RedStone launches bug bounty programs offering up to $250K rewards

The modular oracle provider is paying researchers to find smart contract and web vulnerabilities before attackers do RedStone Finance is putting a price on its own weak spots. The modular oracle provider has rolled out two bug bounty programs, with the top reward reaching $250,000 for critical smart contract vulnerabilities. A second program covers web-facing issues and pays up to $10,000. The programs went live on October 22, 2026, but RedStone announced them publicly on October 31, branding the launch as “treats for bugs.” How the RedStone bounties are structured The smart contract program is the headline act. Rewards scale with severity. Here is the breakdown for smart contract findings: Critical: up to $250,000High: up to $50,000Medium: up to $10,000Low: up to $1,000 The web bounty tops out at $10,000 for critical issues affecting several RedStone domains. RedStone isn’t running the programs in-house. The bounties are hosted on HackenProof and Cantina, two platforms that handle vulnerability submissions and triage. By late October 2026, more than 201 submissions had already been logged on HackenProof. Why oracle security carries extra weight Smart contracts can’t look outside t...