#What is Paradex's New Bug Bounty Program?
Paradex, a decentralized perpetual futures exchange operating on Starknet’s first appchain, has introduced a significant bug bounty initiative via Sherlock. The program went live on June 8, 2026, and is currently open for submissions. It offers security researchers rewards of up to $500,000 USDC for identifying critical vulnerabilities within its platform.
The scale of this new program marks a notable shift from Paradex's previous bounty approach, which was hosted by Immunefi and featured a total reward pool of $45,000. The new program exceeds that amount by more than ten times, underscoring Paradex's commitment to security and reliability in the rapidly evolving decentralized finance space.
#How Will Rewards Be Structured?
The bug bounty program employs a tiered reward system. Critical vulnerabilities are defined as issues that could lead to a direct theft of $100,000 or more in user assets, or might trigger the insolvency of the protocol. Researchers who identify such critical faults can receive the maximum payout of $500,000 USDC. The payout is set at 10% of the funds at risk, with a minimum guaranteed reward of $25,000 for any qualifying finding.
It is essential to note that certain types of vulnerabilities, including oracle-related issues, previously identified problems from earlier audits, and known bugs in third-party dependencies, are not covered under this bounty program. Additionally, findings that duplicate efforts from other active bounty programs are excluded.
#What Does Paradex Offer?
Paradex positions itself as a self-custodial trading platform designed to merge the rapid execution of centralized exchanges with the transparency inherent in public blockchain settlement. Officially launching for public use around 2023, it operates on Starknet’s appchain infrastructure, which provides a dedicated execution environment distinct from Starknet's main network.
The primary product offered by Paradex is perpetual futures. These derivatives allow traders to engage in leveraged positions—either long or short—on various crypto assets without an expiry date. Perpetual futures typically generate high trading volumes within the decentralized finance ecosystem, making them a preferred product among investors.
#What Does This Shift in Funding Mean for Security?
The increase in Paradex's bounty funding from $45,000 to $500,000 represents a maturation in its approach toward security economics. Bug bounty programs rely on incentive theory; the rewards must surpass what a malicious actor could gain from exploiting the vulnerability. At the prior level of $45,000, this incentive was becoming less favorable. However, with the new reward structure, security researchers now have significant financial motivation to discover and responsibly disclose issues rather than exploit them.