Tools Bounty Economics bugcrowd
Platform record
Bugcrowd: advertised rewards and response times
- Programmes
- 297
- Publishing a ceiling
- 292
- In-scope assets
- 3,058
- Median ceiling
- $3,625
- Top ceiling
- $3,000,000 (OpenSea Managed Bug Bounty Program)
- Safe harbour
- 222 full · 51 partial · 24 none stated
- Measured
- 2026-10-28
- Confidence
- CONFIRMED
What happened
The 28 October 2026 snapshot contains 297 public Bugcrowd programmes with 3,058 listed in-scope assets. The 292 published non-zero ceilings have a median of $3,625. 222 programmes state full safe harbour, 51 partial protection and 24 other or no stated protection.
The largest advertised ceiling is $3,000,000 at OpenSea Managed Bug Bounty Program. Exact duplicate programme URLs are counted once. Written programme terms can define scope beyond the structured asset list.
Sources
- Bugcrowd data, bounty-targets-data mirror (MIT)raw.githubusercontent.com/arkadiyt/bounty-targets-data/main/…
- Mirror licence, MITraw.githubusercontent.com/arkadiyt/bounty-targets-data/main/…
On YFarmX
- Reference pageyfarmx.com/ai/security/reading-a-bounty-scope/
One record from the Bounty Economics, maintained by the Security Desk.Tracker updated · 28 October 2026