ZKsync Era reduced its bug bounty reward tiers, cutting the high-tier fixed reward from $15K to $5K.
Tech & Launches ·
ZKsync Era has reduced the fixed reward amount for high-severity smart contract vulnerabilities in its bug bounty program from $15,000 to $5,000, representing a 67% decrease. The live bounty page now reflects the updated tier structure.
Under the revised framework, high-severity vulnerabilities carry a minimum reward of $20,000 and a maximum capped at 100% of affected funds or the program's high cap, whichever is lower. The change narrows the fixed baseline while preserving the minimum floor and scaling mechanics tied to direct impact, though the earlier high-tier fixed amount has been substantially compressed.
The timing and rationale for the reduction remain undisclosed. It is unclear whether the adjustment reflects a strategic reprioritization of bounty allocations, changes in the program's risk assessment model, or other operational considerations.