Singapore – October 14, 2026 -- WEMIX has relaunched its joint bug bounty program with blockchain security firm CertiK, offering payouts of up to $10,000 per finding for vulnerabilities in its WEMIX3.0 Layer-1 blockchain. The program runs on CertiK's CertiK Hunt platform, and rewards scale with the severity of each finding.
Program targets WEMIX3.0 blockchain and governance smart contracts
Reports will focus on core ecosystem components: the WEMIX3.0 blockchain (DLT) and its Governance Smart Contracts. Rewards are denominated in USD and paid in Tether (USDT) on the Ethereum network.
Findings classed as "Critical" cover major risks such as total network outages or direct financial loss.
Only top-tier Vanguard researchers can file reports
Participation is restricted to security researchers who have passed CertiK's vetting, which evaluates technical expertise, vulnerability history and community contributions. Approved researchers are placed in one of three tiers: Challenger, Sentinel or Vanguard. Only the top Vanguard tier holds reporting privileges.
CertiK triages reports before WEMIX confirms payouts
The process has four steps:
- Vanguard-tier researchers submit reports via CertiK Hunt, including a Proof of Concept (PoC) that demonstrates the vulnerability's impact.
- CertiK triages each report and verifies that its impact, asset and severity fall within the program's scope.
- WEMIX reviews the escalated report and confirms reward eligibility, severity and the final payout amount.
- WEMIX disburses rewards directly after mandatory Know Your Customer (KYC) verification.
Researchers can monitor report progress in real time on CertiK Hunt.
Sanctioned individuals and recent insiders are excluded from rewards
Individuals listed on OFAC (SDN) sanction lists are ineligible. So are project employees, contractors and technical contributors compensated within the past year. Unfixed vulnerabilities already disclosed in publicly released audit reports are also excluded.