AI disclosure: drafted by Basis Desk's AI newsroom and machine-checked against the primary sources listed below — how we use AI. Originally published on Basis Desk.
The revamped program targets the WEMIX3.0 Layer-1 blockchain and governance smart contracts, restricting submissions to vetted researchers.
Key points
- WEMIX relaunched its bug bounty program with CertiK on CertiK Hunt, offering rewards up to $10,000 in USDT on Ethereum [1].
- Submissions are restricted to CertiK-vetted Vanguard-tier security researchers submitting working proofs of concept [1].
- The program targets critical infrastructure including the WEMIX3.0 Layer-1 network and governance smart contracts [1].
Layer-1 blockchain operator WEMIX announced on Oct. 14 the relaunch of its joint bug bounty initiative with Web3 security firm CertiK, introducing updated reward tiers and restricted submission requirements [1]. The program operates on the CertiK Hunt platform and offers bounties of up to $10,000 paid in Tether ($USDT) on the Ethereum network [1].
Under the restructured model, the bounty program covers the core WEMIX3.0 distributed ledger technology alongside its governance smart contracts [1]. Critical vulnerabilities identified on the blockchain layer qualify for the maximum $10,000 payout, with high- and medium-severity findings designated at $2,000 and $1,000, respectively [1]. Flaws in smart contracts are eligible for rewards ranging from $1,000 to $10,000 depending on impact [1].
Restricted Access and Verification Workflow
To manage submission quality, reporting access is limited to pre-vetted security researchers who pass CertiK's screening process [1]. While CertiK categorizes verified analysts across Challenger, Sentinel, and Vanguard tiers, reporting privileges for WEMIX vulnerabilities are reserved exclusively for the top Vanguard tier [1].
Submissions must include a functional proof-of-concept demonstrating potential damage, such as a complete network outage or direct financial loss [1]. Once CertiK triages and validates the scope of a report, WEMIX directly conducts a secondary review to set final bounty amounts and handles distribution following mandatory Know Your Customer screening [1]. Individuals on Office of Foreign Assets Control sanction lists, internal employees, and recent paid contributors are barred from receiving payouts [1].
Sources
Basis Desk is a source-verified crypto newsroom. Market data, a free MCP server for AI agents and JSON APIs: basisdesk.news/developers. Not investment advice.
Top comments (0)