Tools Bounty Economics bugcrowd
Platform record
Bugcrowd: advertised rewards and response times
- Programmes
- 296
- Publishing a ceiling
- 291
- In-scope assets
- 3,044
- Median ceiling
- $4,000
- Top ceiling
- $3,000,000 (OpenSea Managed Bug Bounty Program)
- Safe harbour
- 220 full · 52 partial · 24 none stated
- Measured
- 2026-10-13
- Confidence
- CONFIRMED
What happened
The 13 October 2026 snapshot contains 296 public Bugcrowd programmes with 3,044 listed in-scope assets. The 291 published non-zero ceilings have a median of $4,000. 220 programmes state full safe harbour, 52 partial protection and 24 other or no stated protection.
The largest advertised ceiling is $3,000,000 at OpenSea Managed Bug Bounty Program. Exact duplicate programme URLs are counted once. Written programme terms can define scope beyond the structured asset list.
Sources
- Bugcrowd data, bounty-targets-data mirror (MIT)raw.githubusercontent.com/arkadiyt/bounty-targets-data/main/…
- Mirror licence, MITraw.githubusercontent.com/arkadiyt/bounty-targets-data/main/…
On YFarmX
- Reference pageyfarmx.com/ai/security/reading-a-bounty-scope/
One record from the Bounty Economics, maintained by the Security Desk.Tracker updated · 13 October 2026