Web3 security has changed dramatically over the past few years.
As protocols become more sophisticated and billions of dollars in value move on-chain every day, traditional bug bounty programs are increasingly struggling to keep pace. Security teams face growing volumes of spam, low-quality submissions, and operational overhead, while experienced security researchers often spend weeks waiting for responses, dealing with unclear processes, or wondering whether valid findings will ultimately be rewarded.
Today, we're introducing CertiK Hunt, our next-generation security research platform built to address these challenges.
CertiK Hunt connects high-quality security researchers with trusted Web3 projects through invite-only security programs designed to identify and remediate vulnerabilities before they can be exploited.
CertiK Hunt brings together bug bounty programs, audit competitions, and AI-powered security challenges in one curated ecosystem focused on quality over quantity.
Why We Built CertiK Hunt
CertiK has been deeply embedded in the Web3 space for years, working with hundreds of projects across the ecosystem. Through this experience, we've identified significant gaps in the current bug bounty and audit competition landscape, making it clear that Web3 projects need a more continuous and comprehensive security solution to effectively protect themselves.
We've closely monitored how other platforms operate and have noticed that projects often receive overwhelming numbers of duplicate, AI-generated, or out-of-scope reports that consume valuable engineering time without improving security.
At the same time, talented researchers frequently encounter slow response times, inconsistent communication, unclear reward processes, and platforms where signal is buried beneath noise.
The result is frustration on both sides.
CertiK Hunt was designed to change that.
Built Around Quality
Unlike open platforms that allow anyone to submit reports, CertiK Hunt is intentionally invite-only.
Security researchers are selected based on their technical expertise, previous findings, contributions to the security community, and overall reputation. By maintaining a curated researcher network, projects can spend less time filtering submissions and more time fixing real vulnerabilities.
Projects also undergo a review process before launching programs. This helps ensure that participating teams are committed to running professional security programs and treating researchers fairly throughout the disclosure process.
Our goal is simple: create an environment where high-quality researchers and serious projects can work together efficiently.
CertiK Hunt is designed to support multiple ways of improving protocol security.
Bug Bounty Programs
Continuous security testing is conducted by experienced researchers who are rewarded for responsibly disclosing valid vulnerabilities. Bug bounty programs are one of the most effective and necessary crowdsourced defenses, relying on multiple sets of eyes to uncover issues that might otherwise go unnoticed. This approach has already proven its value by helping companies save billions of dollars through responsibly disclosed vulnerabilities, making it an essential component for any Web3 project that takes security seriously.
Audit Competitions
Have you made an upgrade to your code? Did you add a fresh batch of smart contracts that require immediate attention? Do you have a timeframe for when you need your code to be checked? Then run an audit competition—a unique and efficient way to get all security researchers’ eyes on your code as they compete to find bugs.
AI Security Challenges
As AI becomes an increasingly important tool for security research, CertiK Hunt will also host AI-focused challenges that encourage new approaches to vulnerability discovery and analysis. These challenges will help researchers explore innovative techniques and push the boundaries of automated security testing.
Designed for Researchers
Researchers deserve more than a submission form.
CertiK Hunt provides a dedicated portal where participants can:
- Track the status of their submissions
- Communicate directly throughout the review process
- Participate in exclusive security programs
Our objective is to create a platform where researchers can focus on what they do best: finding impactful vulnerabilities.
A quick preview: you can expect a leaderboard, exclusive rewards, and plenty of exciting features ahead!
Designed for Projects
For projects, CertiK Hunt provides access to an experienced network of security researchers without the operational burden that often comes with public programs. By limiting participation to approved researchers, projects receive higher-quality submissions, reduce time spent triaging spam, and can work more closely with trusted security professionals.
For your convenience, we offer a range of flexible triaging tiers designed to accommodate projects of all sizes and needs. Whether you're looking for basic support or a more comprehensive, hands-on approach, you can choose the level of service that best aligns with your project's goals, complexity, and available resources.
Whether launching a bug bounty after an audit, running a competitive code review before a major release, or continuously strengthening protocol security, CertiK Hunt provides a flexible platform tailored to modern Web3 development.
The Next Chapter of Web3 Security
CertiK Hunt builds on years of experience protecting the Web3 ecosystem while introducing a new approach centered around quality, collaboration, and trust.
As the platform evolves, we plan to continue expanding its capabilities with additional program types, new researcher tools, deeper analytics, and features that improve collaboration between projects and security researchers.
Our mission remains the same: help make Web3 more secure by connecting exceptional researchers with the projects building the future of blockchain.
Join CertiK Hunt
If you're an experienced security researcher interested in joining our invite-only community, request an invitation today.
If you're building in Web3 and want to launch a bug bounty program, audit competition, or AI security challenge, connect with our team to learn how CertiK Hunt can help secure your protocol.
