According to The Cryptonomist, RedStone Finance publicly announced its two bug bounty programs on October 31, 2026. The programs went live on October 22, 2026, and include a separate reward pool for vulnerabilities in web-facing services. Researchers are eligible to receive up to $250,000 for critical smart contract flaws identified under the program terms.
The announcement highlighted that critical web flaws qualify for rewards within the designated pool. No further details on specific criteria, scope limits, or administrative procedures were provided in the summary. The programs aim to incentivize external review of RedStone Finance’s systems, particularly focusing on smart contract security and related web infrastructure.
The timing reflects a public disclosure shortly after the programs became active, indicating coordination between launch and announcement. No additional information about past incidents, program history, researcher involvement, or internal assessment methods was included in the source details.
