What types of vulnerabilities qualify for bug bounties?

Bug bounties reward people for finding security vulnerabilities in cryptocurrency platforms and smart contracts. Common qualifying issues include: smart contract code flaws that could drain funds, authentication weaknesses allowing unauthorized access, API exploits exposing user data, and wallet security gaps. Platforms typically exclude low-risk issues like typos or theoretical vulnerabilities without proof. Rewards range from hundreds to millions of dollars depending on severity. For example, finding a critical flaw in a DeFi protocol might earn $100,000+, while a minor bug earns less. Bounty hunters must report responsibly without exploiting vulnerabilities. Major crypto platforms like Ethereum, Uniswap, and major exchanges all run active bug bounty programs. This system incentivizes security researchers to help strengthen the ecosystem before malicious actors exploit weaknesses.