Prediction market platform Polymarket has introduced a bug bounty program on the Cantina platform, offering rewards up to $5 million. According to Foresight News, the program encompasses the entire technology stack, including 18 smart contracts on Polygon, such as V1/V2 CTFExchange, NegRisk versions, fee modules, conditional token frameworks, and the pUSD collateral wrapping/unwrapping system, as well as the UMA oracle adapter. It also covers web applications and related infrastructure, targeting critical web vulnerabilities like remote code execution, sensitive data leaks, subdomain takeovers involving wallet interactions, and malicious transaction injections. The maximum reward for smart contract-related vulnerabilities is $5 million, while web application-related vulnerabilities can earn up to $250,000. The program is now open for submissions.
