Rain Bug Bounty
@rainxyzLiveCantina-Triaged
Maximum reward
$25,000
Severity
Max. Reward
Critical$25,000
High$10,000
Medium$5,000
Low$1,000
Deposit required
$30
Findings submitted
3
Start date
16 Oct 2026
KYC
Required to join
Please sign in as a researcher to join the bounty.
Log inIn scope
Severity
Min and Max Reward
Critical$10,000 to $25,000
High
$5,000 to $10,000
Medium
$1,000 to $5,000
Low
$10 to $1,000
Rain websites, applications, APIs and dashboards on the domains below and their subdomains.
Name | Description | Asset |
|---|---|---|
| rain.xyz | rain.xyz and all subdomains ( | |
| raincards.xyz | raincards.xyz and all subdomains ( | |
| raincards.com | raincards.com and all subdomains ( |
Out of scope
Out of Scope
The following issues are out of scope and not eligible for rewards.
- Testnet, sandbox and development deployments
- Deprecated or test tenant deployments
Websites & APIs
- Subdomains, new products, or standalone applications that do not affect live customer funds may be downgraded in severity or not eligible for a reward.
For generic exclusions, see the Cantina Bug Bounty Out-of-Scope Policy.
Default Out of Scope
Standard out-of-scope items per the Cantina Bug Bounty Out-of-Scope Policy.