Paxos Bug Bounty

Paxos Bug Bounty

@paxos
Live

Maximum reward

1,000,000 USDG

Severity

Max. Reward

Critical

1,000,000 USDG

High

250,000 USDG

Medium

25,000 USDG

Low

5,000 USDG

Deposit required

$20

Findings submitted

2

Start date

27 Mar 2026

Please sign in as a researcher to join the bounty.

Log in

In scope

Severity

Min and Max Reward

Critical

Up to 1,000,000 USDG


High

Up to 250,000 USDG


Medium

Up to 25,000 USDG


Low

Up to 5,000 USDG


Informational
Discretionary

In-scope smart contracts

Name
Description
Asset
paxos-token-contracts

Base repo for token contracts — ERC20, SupplyControl

pyusd-contract

PYUSD token contract, links to base repo

usdg-contract

USDG token contract, links to base repo

usdp-contracts

USDP token contract, links to base repo

paxos-gold-contract

PAXG contract — legacy, does not use base repo

cross-chain-contracts

LayerZero OFT wrapper contracts for EVM and Solana

solana-programs

Minter controller program for SPL tokens

Out of scope

• Any repo, site, service, product, API, or resource not explicitly listed in the in-scope targets.

• All items listed at https://docs.cantina.xyz/evaluations-and-standards/severity-classifications/bug-bounty-finding-severity#out-of-scope