CertiK's invite-only bug bounty targets web3 security gaps

Blockchain security provider CertiK launched CertiK Hunt, an invitation-only platform that connects web3 projects with vetted security researchers for ongoing vulnerability testing, the company said Wednesday.

The launch comes after years of high-profile exploits and rising institutional adoption of digital assets, pushing developers toward continuous security models rather than one-off audits, CertiK said. Crypto hacks hit $75.9 million in June alone, AlphaScala reported, underscoring the scale of the problem.

CertiK Hunt supports bug bounty programs, audit competitions, and AI-powered security challenges. The company said the invitation-only model would improve submission quality while minimizing spam and ensuring fair treatment for both researchers and projects.

“We’ve seen too many cases across the industry where security researchers submit valid vulnerabilities only to face disputes or delayed payouts,” Margarita Kadochnikova, Head of Communications at CertiK, stated. “CertiK Hunt is built to create a trusted environment where high-quality researchers can focus on finding impactful vulnerabilities, projects receive meaningful security insights, and both sides know the rules will be applied fairly.”

The company has supported more than 5,000 organizations, including Binance and the Ethereum Foundation. It believes the platform arrives at a critical time as billions of dollars continue to be lost to crypto exploits and the industry increasingly embraces continuous security models.

“CertiK Hunt is the next step in our mission to secure the web3 ecosystem,” Hudson Jameson, Head of Ecosystem at CertiK, stated. “By building a network defined by signal and quality rather than volume, we are creating a platform where the best researchers can do their most impactful work, while giving projects greater confidence in the security of their code.”

The platform is live for invited researchers and projects.