Today, BitGo is excited to announce the launch of its Web3 Bug Bounty Program in partnership with Cantina, a network of world-class security researchers protecting financial and blockchain infrastructure.

This bug bounty program extends coverage to the Web3 security research community to surface vulnerabilities beyond traditional Web2 scope

Program Overview

The program initially covers BitGo's Ethereum multisig smart contracts, leveraging Cantina's researcher network for specialized smart contract security expertise.

Reward Tiers

The are structured reward tiers that reflect the severity and potential impact of each finding:

  • Critical: $75,000

  • High: $37,500

  • Medium: $2,500

  • Low: $1,000 – $1,500 (discretionary)

Reward amounts are reviewed periodically and subject to change. BItGo is committed to recognizing the true value of critical-impact research with each submission.

How to Participate

The Web3 Bug Bounty program is open to researchers registered within the Cantina network. Anyone outside of BitGo may register as a participating researcher to report vulnerabilities. Request access through the program page.

The digital asset infrastructure company.

About BitGo

BitGo is the digital asset infrastructure company, delivering custody, wallets, staking, trading, financing, and settlement services from regulated cold storage. Since our founding in 2013, we have been focused on accelerating the transition of the financial system to a digital asset economy. With a global presence and multiple regulated entities, BitGo serves thousands of institutions, including many of the industry's top brands, exchanges, and platforms, and millions of retail investors worldwide.