Announcing the Worldcoin project bug bounty program

Worldcoin and its contributors are building the world's largest human network to improve trust online and access to the global economy. Central to this mission is an ongoing commitment to security, including transparent collaboration with the global security community.

To this end, Worldcoin has launched a bug bounty program to further reinforce security at every level of the project. The program will be managed by project contributor Tools for Humanity (TFH). 

The Worldcoin project bug bounty program provides a way for experts to report and be rewarded for their efforts to keep all parts of the Worldcoin protocol secure. This includes mobile apps, smart contracts, hardware, web applications, APIs and more.

Bugs and other potential vulnerabilities can be shared via HackerOne, which offers native support for public disclosure of resolved reports in line with the Worldcoin project’s commitment to transparency.

For each applicable security issue submitted, TFH, in collaboration with the Worldcoin Foundation, will offer rewards based on its severity. These rewards will be calculated using the Common Vulnerability Scoring System (CVSS) as a guide and will vary from $200 for low severity findings up to $5,000 for critical ones. 

You can follow this link to learn more about the program and participate.

The public launch of Worldcoin’s first bug bounty programs is an important step towards building and maintaining a protocol that’s robust, secure and available to every human. 

Learn more about security at Worldcoin by visiting the privacy page or reading the Technical Implementation section of the Worldcoin protocol whitepaper. You can also stay informed by joining the daily conversations on Twitter/X, Telegram, Discord and LinkedIn or signing up for the blog newsletter at the bottom of this page.