Sui Protocol reduced bug bounty reward tiers by $800K total, with critical vulnerabilities capped at $250K instead of $1M.
Tech & Launches ·
Sui Protocol has reduced its bug bounty reward structure, cutting the maximum payout for critical vulnerabilities from $1 million to $250,000—a 75 percent decrease. The changes span three reward tiers and represent a total reduction of $800,000 across the program. Full details of the revised reward matrix are available on the program page.
The bug bounty program, managed through HackenProof, requires researchers to submit findings via the portal with a $20 antispam fee, complete KYC verification, and provide a working proof of concept. Critical-severity submissions target multiple components of the Sui network and ecosystem, including the core protocol, Move runtime, and bridge infrastructure. Payouts are denominated in USD, though Sui retains the option to distribute rewards in its native SUI token.
The rationale for the reward reduction has not been publicly disclosed. It remains unclear whether the cuts apply retroactively to pending submissions or only to future reports, and whether researcher feedback or market conditions prompted the restructuring.