Bounty platforms
Immunefi
The main crypto bug bounty platform. Protocols post scopes, you submit, they pay in stablecoins.
up to millionsCantina
Competitive audits plus open bounties. Strong on new protocol launches.
per findHackerOne
Exchange and infrastructure programs outside the pure-crypto platforms.
per findBugcrowd
Same idea, different programs. Worth an account for the odd crypto scope.
per findAudit contests — enter this week
Code4rena
Everyone audits the same repo for a fixed window. Your share of the pot is by findings.
pool splitSherlock
Contests plus a judging layer. Good payouts for high-severity work.
pool splitCodehawks
Beginner-friendly contests. Best place to build a public track record from zero.
pool splitCyfrin
Audit firm that hires from its own contest pool. Contests double as a job interview.
contract workSecurity jobs at crypto companies
Coinbase
Product security, blockchain security, incident response.
full timeKraken
Security engineering, remote-first.
full timeChainalysis
On-chain investigations and threat intel — your RE and tracing skills fit directly.
full timeTrail of Bits
Elite security research firm, heavy blockchain practice. Hard to get into, worth trying.
full timeFireblocks
Custody infrastructure — key management and secure enclaves.
full timeLedger
Hardware and firmware security.
full timeGrants for research
Ethereum Grants
Funding for tooling, research, and security work on Ethereum.
grantGitcoin
Public-goods funding rounds. Security tooling does well here.
grant