Pyth Network reduced its bug bounty program maximum reward by 50% across all tiers, cutting total available rewards by $189K.
Tech & Launches ·
Pyth Network has reduced its bug bounty program maximum reward from $250,000 to $125,000, representing a 50% cut across all severity tiers. The reduction affects the critical reward tier, which previously capped at $250,000 and now stands at $125,000. In total, the adjustments across six tiers eliminate $189,000 from the program's available rewards pool.
Under the revised structure, critical smart contract vulnerabilities are now rewarded at 10% of directly affected funds up to the new $125,000 maximum, down from the prior ceiling. High-severity reports remain capped at $50,000 for smart contract impacts and $20,000 for web and application issues. The program maintains a $10,000 minimum reward floor for all critical findings and requires proof-of-concept submissions and identity verification from security researchers.
The change marks a significant reduction in financial incentives for vulnerability disclosure to Pyth's bug bounty program. Researchers have not publicly explained the rationale for the cuts, and it remains unclear whether the adjustment reflects changes in risk assessment, budget constraints, or other operational considerations.