How to claim a 1inch bug bounty?

1inch runs several bug bounty programs that reward researchers for finding vulnerabilities and helping make 1inch products more secure.

Are you a whitehat hacker or crypto enthusiast keen on dissecting smart contracts? We at 1inch value support in discovering vulnerabilities and other issues across our products. Audit our smart contracts, find bugs and earn rewards for eligible reports.

These are the bug bounty programs we’re currently running - the same programs are mirrored on HackenProof and Immunefi, though platform requirements differ. Choose the platform you prefer. The process is simple. You discover a bug, submit it on one of the two platforms and, if it’s approved, you get rewarded there.

1inch Business

This bug bounty program is focused on 1inch Business, a platform for enterprise-grade DeFi APIs. The program offers rewards of up to $100,000.

Details: Hackenproof Immunefi

1inch Aqua

1inch Aqua is a self-custodial shared liquidity layer. It enables your liquidity to stay active across many positions, while your tokens stay in your wallet. This bug bounty program offers rewards of up to $100,000.

Details: Hackenproof Immunefi

1inch Smart Contract

The 1inch ecosystem relies on interconnected smart contracts that aggregate liquidity from multiple decentralized exchanges to execute optimal token swaps. This bounty program focuses on potential vulnerabilities in 1inch smart contracts and offers rewards of up to $500,000.

Details: Hackenproof Immunefi

1inch Wallet

This bug bounty program focuses on potential vulnerabilities in 1inch Wallet, a multi-chain non-custodial DeFi crypto wallet with a simple interface for storage and transactions. The program offers rewards of up to $100,000.

Details: Hackenproof Immunefi

1inch Web

The 1inch dApp is a major DeFi aggregator, providing access to the deepest liquidity and the best token swap rates across various DEXes. Its distinctive features include partial fill and the ability to identify the best swap paths across multiple liquidity sources. This bounty program focuses on uncovering potential vulnerabilities in the 1inch dApp and offers rewards of up to $50,000.

Details: Hackenproof Immunefi

1inch Infrastructure

This program focuses on finding vulnerabilities that affect the overall infrastructure of the 1inch platform, complementing the product-specific programs listed above. The program offers rewards of up to $20,000.

Details: Hackenproof Immunefi

Be aware of platform requirements. On HackenProof, the current 1inch programs require at least 100 reputation points to submit a report, and a proof of concept (PoC) is required. Some programs may also have additional requirements, such as KYC.

On Immunefi, the current 1inch programs require a PoC for all severity levels and KYC for payout processing, but the Pay to Submit doesn’t apply to 1inch’s programs.

Requirements can change, so always review the rules, eligibility criteria, scope and submission terms on the relevant HackenProof or Immunefi program page before starting your research or submitting a report. Reward eligibility and payouts are subject to the applicable platform’s terms, including identity verification and applicable sanctions requirements.

Join 1inch bug bounty programs, discover vulnerabilities and earn rewards for eligible findings.

Disclaimer: Bug bounty programs are governed by the terms, scope and eligibility criteria published on the relevant HackenProof or Immunefi program pages and may be modified or discontinued at any time. This article is for informational purposes only and does not constitute an offer or a guarantee of payment.