Polymarket Launches $5 Million Bug Bounty Program On Cantina

@Polymarket has opened a bug bounty program on @cantinasecurity worth up to $5 million per critical finding, targeting the full stack of the prediction market giant's infrastructure.

The scope covers 18 smart contracts deployed on Polygon, including the V1 and V2 exchange contracts, NegRisk variants, the conditional token framework, the pUSD collateral wrapping system, and the UMA oracle adapters that resolve markets. The Polymarket web application and supporting infrastructure are also in scope.

Critical smart contract bugs pay between $50,000 and $5 million, with high-severity findings ranging from $10,000 to $500,000. Critical web vulnerabilities, including remote code execution, data exfiltration, and malicious transaction injection, pay up to $250,000.