Market briefAU-2026-0255
Bug bounties still price below the exploit
When the payout is a fraction of what the bug is worth, disclosure is a donation.
SeverityModerate
5 minSmart Contract Audits
Caps are set against security budgets rather than against value at risk. For a protocol holding hundreds of millions, a six-figure ceiling asks a finder to accept a small fraction of what the finding is worth on the other side.
Programmes that scale the payout to funds at risk report better inbound quality. They are still a minority.