generated: '2026-07-19'
method: searched
source: https://docs.hubbleprotocol.io/faq/security/bug-bounty-program
probe: false
policy:
- https://docs.hubbleprotocol.io/faq/security/bug-bounty-program
- https://github.com/hubbleprotocol/audits/blob/master/docs/SECURITY.md
contact:
- security@hubble.markets
bug_bounty:
  type: self-hosted
  submit_to: security@hubble.markets
  instructions: Email a report to security@hubble.markets including your GitHub username.
  rewards:
    smart_contracts:
      critical: Up to USD $500,000
      high: USD $100,000
      medium: USD $10,000
      low: USD $2,500
    websites_and_applications:
      critical: Up to USD $50,000
      high: USD $10,000
      medium: USD $5,000
      low: USD $500
audits:
- name: The Arcadia Group Security Audit
  date: '2021-12'
  url: https://github.com/hubbleprotocol/audits/blob/master/Arcadia%20report%20hubble.pdf
- name: Smart State Smart Contract Audit
  date: '2021-12'
  url: https://github.com/hubbleprotocol/audits/blob/master/Smart%20state%20hubble.pdf
- name: Kudelski Security
  date: '2022-03'
  url: https://github.com/hubbleprotocol/audits/blob/master/kudelski-1.pdf
- name: Kudelski Security
  date: '2022-04'
  url: https://github.com/hubbleprotocol/audits/blob/master/Audit%20btblocks%20kudelski%20-%202cb2eb21-4b1d-4e3f-a593-c6bd23405b0f.pdf
- name: Sec3 (formerly Soteria)
  cadence: continuous
  url: https://www.sec3.dev/
evidence:
- source: https://docs.hubbleprotocol.io/faq/security/bug-bounty-program
  kind: bug-bounty-page
- source: https://docs.hubbleprotocol.io/faq/security/security-audits
  kind: audit-index