Cetus increased its smart contract bug bounty program maximum from $300K to $1M.
Tech & Launches ·
Cetus, a decentralized exchange on Sui, has increased the maximum bounty for critical vulnerabilities in its smart contract bug bounty program from $300,000 to $1,000,000—a 233% increase. The program, hosted on HackenProof, covers two in-scope targets: the CLMM repository and the main Cetus contracts repository, both requiring KYC approval and proof of concept submissions.
Critical-severity findings are defined narrowly as directly exploitable vulnerabilities without additional conditions that could result in direct loss of user funds. Eligible issues include fund theft, unauthorized transactions, transaction manipulation, logic attacks, reentrancy, and overflow/underflow flaws. The bounty is capped at the higher of either 5% of the affected pool or contract's total value locked or $1,000,000.
Researchers must report findings exclusively through the HackenProof platform within 24 hours of discovery and cannot discuss vulnerabilities publicly without explicit authorization. The program is currently active and has received 197 submissions to date, though the timeline and specific factors driving the bounty increase are not detailed in available materials.