DexScreener

Crypto/DeFi

Real-time DEX analytics platform tracking trading data across 90+ blockchains, processing 41M+ daily transactions with $400B+ in daily volume.

Max Reward

$15,000

Total Paid

$127,500

Resolved

156

Avg Response

2 days

Full pentest — all assets, services, APIs, and infrastructure are in scope

None — everything is in scope.

Critical

RCE, authentication bypass, privilege escalation, fund extraction

High

Stored XSS, CSRF with impact, API abuse, data manipulation

Medium

Reflected XSS, data leakage, logic flaws, information disclosure

Low

Verbose errors, minor config issues, low-impact info disclosure

ID	Title	Severity	Status	Reward	Submissions
DS-001	XSS via token name rendering on pair page	Critical	Open	$5,000–$15,000	0
DS-002	CSRF on watchlist API endpoint	High	In Review	$2,000–$5,000	3
DS-003	API rate-limit bypass on /tokens/v1 endpoint	High	Open	$2,000–$5,000	1
DS-004	Fake price display via manipulated LP data	Critical	Resolved	$5,000–$15,000	5
DS-005	WebSocket feed injection causing stale chart data	Medium	Open	$500–$2,000	0

• Do not access, modify, or delete data belonging to other users.

• Do not perform denial-of-service attacks or automated scanning at high volume.

• Report vulnerabilities promptly and provide sufficient detail to reproduce.

• Allow reasonable time for fix before public disclosure (90 days).

• Safe harbor: We will not pursue legal action against researchers acting in good faith within these rules.