Largest crypto bug bounty to date, surpassing Uniswap\u2019s $15.5 million.
\nUsual has undergone 20 security audits, all finding no major flaws.
\nOther protocols lag behind, with max bounties at $2 million so far.<\/p>\n
Stablecoin protocol Usual has unveiled a record-setting $16 million bug bounty programme in partnership with blockchain security firm Sherlock.<\/p>\n
The initiative, now the largest in the crypto sector, targets critical codebase flaws that could lead to the loss or freezing of funds.<\/p>\n
Hosted on Sherlock\u2019s platform, the bounty will only award findings that highlight confirmed and long-term security risks, with an emphasis on realistic exploit scenarios.<\/p>\n
The launch marks a significant escalation in the industry\u2019s approach to on-chain safety, overtaking Uniswap\u2019s $15.5 million bounty announced in late 2024.<\/p>\n
The $16 million bounty<\/a> makes Usual the new frontrunner in the blockchain security race, eclipsing all previously recorded bug bounty rewards in the decentralised finance (DeFi) ecosystem.<\/p>\n Prior to this, the largest bounty was offered by Uniswap Labs in November 2024, totalling $15.5 million.<\/p>\n Usual\u2019s bounty sets a new precedent and comes at a time when Total Value Locked (TVL) on its platform has crossed $880 million, increasing the need for robust defence mechanisms.<\/p>\n Unlike standard bug bounties, the Usual-Sherlock initiative focuses on vulnerabilities with the potential to cause irreversible damage.<\/p>\n Only bugs that result in definite fund loss or indefinite freezing, lasting a year or more without reliance on external conditions, will qualify for rewards.<\/p>\n This selective approach aims to prioritise threats with the highest real-world impact.<\/p>\n The launch of this $16 million programme follows a string of security checks on Usual\u2019s codebase.<\/p>\n According to Sherlock, the protocol has already undergone 20 audits, including a recent Sherlock-hosted audit contest that featured a $209,000 prize pool.<\/p>\n None of the audits identified any critical issues in the code, increasing industry confidence in the protocol\u2019s architecture.<\/p>\n This latest bounty campaign is hosted entirely on Sherlock\u2019s platform, which serves as a hub for vetting blockchain applications through community-led vulnerability hunts.<\/p>\n Sherlock\u2019s role ensures that the bounty process is transparent, competitive, and efficiently managed, giving ethical hackers clear guidelines on what qualifies for a payout.<\/p>\n As DeFi platforms grow in complexity and capitalisation, the scale and stringency of bug bounties have become key differentiators.<\/p>\n For Usual, this initiative signals a strategic move to reassure users and institutional partners about the integrity of its operations.<\/p>\n The push toward larger and more targeted bug bounty programmes underscores a maturing industry grappling with escalating threats.<\/p>\n In a space where vulnerabilities can be exploited in seconds, pre-launch security assurances are becoming just as critical as post-launch performance metrics.<\/p>\n The post Usual launches $16 million bug bounty, setting a new benchmark in crypto security<\/a> appeared first on CoinJournal<\/a>.<\/p>","protected":false},"excerpt":{"rendered":" Largest crypto bug bounty to date, surpassing Uniswap\u2019s $15.5 million. Usual has undergone 20 security audits, all finding no major flaws. Other protocols lag behind, with max bounties at $2 million so far. Stablecoin protocol Usual has unveiled a record-setting $16 million bug bounty programme in partnership with blockchain security firm Sherlock. The initiative, now […]<\/p>\n","protected":false},"author":0,"featured_media":2841,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[101],"tags":[],"class_list":{"0":"post-2840","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-blockchain"},"acf":[],"_links":{"self":[{"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/posts\/2840","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/comments?post=2840"}],"version-history":[{"count":0,"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/posts\/2840\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/media\/2841"}],"wp:attachment":[{"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/media?parent=2840"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/categories?post=2840"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/tags?post=2840"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}20 security audits complete, no flaws found so far<\/h2>\n
Threat detection becomes priority<\/h2>\n