Singapore-based Crypto.com is providing $2 million to someone who can to find and record vulnerabilities as an indication of its self belief in its trendy and up to date safety machine. The bounty program is the largest but for the web page and HackerOne, providing an open scope, speedy fee, and entirely compliant with platform requirements.
Crypto.com introduced its partnership with HackerOne and the $2 million bounty program via a Twitter/X put up and corporate replace closing December 2d. The initiative is a part of the corporate’s dedication to selling safety and compliance and is subsidized by way of other certifications, together with ISO 27001, ISO 27017, ISO 27019, ISO 22301, ISO 27701, SOC2 Kind 2, and PCI DSS 4.0.
Along with those global certifications, Crypto.com boasts regional certifications, like Singapore’s Cyber Believe Mark and Knowledge Coverage Believe Mark.
Crypto.com Upgrades Safety, Bounty Program
Crypto.com continues its safety partnership with HackerOne, and this month, they collectively issued a remark upgrading its current trojan horse bounty program, which now gives as much as $2 million in rewards. That is the primary time the corporate’s bounty program has reached this quantity, and it’s now the largest trojan horse bounty program with HackerOne in crypto and past.
Lately we release a groundbreaking $2 million trojan horse bounty program with @Hacker0x01.
Security and safety are of paramount significance at https://t.co/vCNztATkNg – we’re proud to toughen the most important trojan horse bounty program to be had via HackerOne.
Be informed extra 👉 https://t.co/qFNWLLtoGN percent.twitter.com/DRdEk9Zex0
— Crypto.com (@cryptocom) December 2, 2024
The corporate’s rewards program gives tiered rewards for various kinds of vulnerabilities in line with severity. For instance, the Low (0.1-3.9), representing 41.67% of submissions, supplies a praise any place from $200 to $500. Medium (4.0-6.9) will get $500 to $5,000, Prime (7.0-8.9) boasts $5,000 to $40,000 in rewards, and in any case, Crucial/Excessive vulnerabilities (9.0+) rewards $40,000 as much as $2 million.
Crypto.com invitations its customers to spot any vulnerabilities and unravel those doable dangers earlier than dangerous actors exploit them. The crypto corporate joined different tech firms in operating trojan horse bounties to handle on-line threats.
Discovering Crucial Safety Gaps An important For Firms
As one of the vital leaders within the crypto house, Crypto.com serves over 100 million customers from 90 international locations. Alternatively, its reputation additionally places it vulnerable to safety threats. The corporate understands those threats, and it’s the main reason why it companions with HackerOne.
Crypto.com believes that believe is the corporate’s basis, constructed round privateness and safety. In a remark, the corporate boasts “zero-trust and protection intensive safety” methods and regularly invests in privateness and safety coaching.
In line with Kara Sprague, HackerOne’s CEO, discovering essential safety gaps is the most important for an organization like Crypto.com. She discussed that the document bounty quantity displays Crypto.com’s dedication to person coverage and toughen for moral hacking.
Different Internet 3.0 Firms Additionally Run Bounty Systems
With the exception of Crypto.com, different main Internet 3.0 have run bounty techniques to spot and cope with safety weak point. Fb, Atomic Pockets, Uniswap, and Fb are best tech firms that depend on moral hacking.
For instance, Uniswap introduced the largest trojan horse bounty in DeFi, providing as much as $15.5 million for those who can determine safety threats on its v4 sensible contract. After saying the profitable bounty program, its UNI token has surged in worth.
Featured symbol from Pexels, chart from TradingView