Paxos Bug Bounty
Maximum reward
1,000,000 USDG
Severity
Max. Reward
Critical1,000,000 USDG
High250,000 USDG
Medium25,000 USDG
Low5,000 USDG
Deposit required
$20
Findings submitted
2
Start date
27 Mar 2026
Please sign in as a researcher to join the bounty.
Log inIn scope
Severity
Min and Max Reward
CriticalUp to 1,000,000 USDG
High
Up to 250,000 USDG
Medium
Up to 25,000 USDG
Low
Up to 5,000 USDG
InformationalDiscretionary
In-scope smart contracts
Name | Description | Asset |
|---|---|---|
| paxos-token-contracts | Base repo for token contracts — ERC20, SupplyControl | |
| pyusd-contract | PYUSD token contract, links to base repo | |
| usdg-contract | USDG token contract, links to base repo | |
| usdp-contracts | USDP token contract, links to base repo | |
| paxos-gold-contract | PAXG contract — legacy, does not use base repo | |
| cross-chain-contracts | LayerZero OFT wrapper contracts for EVM and Solana | |
| solana-programs | Minter controller program for SPL tokens |
Out of scope
• Any repo, site, service, product, API, or resource not explicitly listed in the in-scope targets.
• All items listed at https://docs.cantina.xyz/evaluations-and-standards/severity-classifications/bug-bounty-finding-severity#out-of-scope