What HackenProof does

HackenProof is a Web3-native bug bounty and crowdsourced security platform that connects crypto projects with a global community of ethical hackers for continuous vulnerability discovery. The platform operates two core offerings: a self-serve Bug Bounty Platform that hosts programs from Layer 1/Layer 2 protocols, centralized exchanges, wallets, and DeFi dApps, and a Crowdsourced Audit service for pre-mainnet code review across 12+ smart contract languages including Solidity, Rust, Cairo, Move, Vyper, Clarity, Motoko, Tact, and Michelson. The company pairs human-mediated testing with productized AI tooling, including an MCP Server for AI-powered report triage (launched March 2026) and Security AI Agents for Web3 vulnerability analysis.

The business is structured around a two-sided marketplace of 82,000+ registered ethical hackers and 400+ active programs, supported by flagship ecosystem partnerships with the Sui Foundation, NEAR, BNBChain, TON, and MantaNetwork that position HackenProof as the preferred security partner within major blockchain ecosystems. Notable enterprise customers include the Ethereum Foundation, MetaMask, OKX, Gate.io, HTX, Avalanche, and KuCoin. Revenue is generated via transaction fees on bug bounty program facilitation and professional services fees for crowdsourced audits, with outcome-based pricing where critical-severity rewards can reach up to $500,000 per verified report.

HackenProof is a private company headquartered in Tallinn, Estonia, operating through HackenProof, Inc. in the United States. The company has 11–50 employees, has scaled largely without external venture capital (only a $50,000 Ukrainian Startup Fund grant in 2020 is on record), and has processed $26M+ in researcher payouts and 85,000+ submitted reports to date. Distribution combines a self-serve dashboard, Calendly-driven enterprise sales, and ecosystem co-marketing, with thought-leadership content (Web3 Security Report 2025) and capture-the-flag competitions (National CTF) supporting community and pipeline development.

Name

HackenProof

Legal name

HackenProof, Inc.

Website

https://hackenproof.com

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

HackenProof is a Web3 bug bounty and crowdsourced audit platform that connects crypto projects with 82,000+ ethical hackers for continuous vulnerability discovery and pre-mainnet smart contract security audits.

Ownership category

akta.pro rank

Product category

Web3 Bug Bounty and Crowdsourced Security Platform

NAICS

Investigation and Security Services (5616), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Computer Programming Services (7371)

akta.pro primary industry

Bug Bounty, Vulnerability Disclosure & Security Services (FSAPAJAL)

akta.pro secondary industries

Smart Contract Auditing & Formal Verification (FSAPAJAA), Smart Contract Security Tooling (static/dynamic analysis, formal verification) (FSAPABAI), Digital Asset Risk, Security & Audit Tooling (Smart Contract Audit, Threat Monitoring) (FSAGAMAJ), Security Testing Tooling (SAST/DAST for smart contracts, fuzzing) (FSAPAJAK)

Keywords

• Web3 bug bounty
• Crowdsourced security audit
• Blockchain vulnerability testing
• Smart contract security
• Ethical hacking platform

Headquarters

HQ city

Tallinn

HQ country

Estonia

HQ region

Europe

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Bug Bounty Program Management: HackenProof hosts bug bounty programs for crypto projects, taking a commission or fee for facilitating the connection between projects seeking security testing and ethical hackers finding vulnerabilities.
2. Crowdsourced Audits: Conducts comprehensive crowdsourced security audits before mainnet deployment, with predictable custom budgets divided by severity finding ratios and validity checks.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels7 records

Core offering

HackenProof operates a Web3-focused bug bounty platform and crowdsourced audit service that connects cryptocurrency and blockchain projects with a community of 82,000+ ethical hackers. Companies register programs on the platform, set reward tiers by severity, and receive vulnerability reports that are triaged and verified before payout, with rewards reaching up to $500,000 per critical finding. The company also delivers pre-mainnet crowdsourced audits and the DualDefense combined offering for comprehensive Web3 security coverage.

Product overview

HackenProof is a Web3-focused security platform consisting of a core Bug Bounty Platform and Crowdsourced Audit service, supplemented by specialized programs like the Sui Security Expansion Program and DualDefense. The platform serves both businesses seeking security testing (Bug Bounty Platform, Crowdsourced Audit, DualDefense) and ethical hackers (Leaderboard, National CTF, HProof Bazaar). Additional offerings include Security AI Agents for AI-powered assessments, External Bounties for public program access, and Blockchain Auditors team. The platform focuses exclusively on blockchain and Web3 projects, supporting multiple smart contract languages including Solidity, Rust, Cairo, Vyper, Move, Clarity, Motoko, C++, Tact, and Michelson.

Differentiator

Problem solved

Functional benefit

Products and services

• Bug Bounty Platform Core SaaS platform that lets crypto and Web3 projects register, configure, and manage bug bounty programs, set severity-based rewards, receive vulnerability submissions from 82,000+ ethical hackers, and pay only for valid, verified findings (rewards up to $500,000 per critical report).
• Crowdsourced Audit Pre-mainnet crowdsourced security audit service delivered by the Web3 security researcher community with predictable custom budgets divided by severity ratios and validity checks, covering Solidity, Rust, Cairo, Vyper, Move, Clarity, Motoko, C++, Tact, and Michelson smart contracts.
• DualDefense Combined bug bounty and crowdsourced audit service delivering layered, end-to-end security coverage for Web3 projects by pairing pre-deployment audit work with continuous post-deployment bounty testing.
• Sui Security Expansion Program Specialized bug bounty and security program designed for projects building on the Sui blockchain, delivered with the Sui Foundation to provide enhanced visibility, dedicated support, and exclusive program placement for Sui-related vulnerability research.
• National CTF Capture The Flag cybersecurity competition product for ethical hackers to test and demonstrate security skills while competing for recognition on the HackenProof platform.
• Security AI Agents AI-powered agents built for Web3 security assessments and vulnerability analysis, assisting security teams and researchers with automated review, classification, and prioritization of findings.
• HProof Bazaar Marketplace feature aggregating eligible external bug bounty opportunities for HackenProof security researchers, exposing high-severity reward programs offering up to $500,000 per critical report.
• External Bounties Public bug bounty list connecting third-party external programs with the HackenProof hacker community, enabling researchers to discover and submit reports against additional bug bounty opportunities.
• Blockchain Auditors Team Professional blockchain and smart contract audit service delivered by HackenProof's in-house auditors team for projects that require expert manual review beyond the self-serve bounty and crowdsourced audit offerings.

Quantifiable outcome

• $26M+ paid to ethical hackers
• +3 more outcomes

Named customers14 records

Segments5 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

AI capability3 records

Feature6 records

Partnerships

Seven partnerships are on record, tiered flagship, core and minor.

• Sui FoundationflagshipStrategic or Co-development PartnerStrategic partnership through the Sui Security Expansion Program. HackenProof serves as the exclusive or preferred bug bounty platform for Sui ecosystem projects, with dedicated support and enhanced visibility for security researchers working on Sui-related vulnerabilities.
• TONcoreStrategic or Co-development PartnerEcosystem partner for The Open Network blockchain. TON Society bug bounty program hosted on HackenProof with rewards up to $5,000.
• BNBChaincoreStrategic or Co-development PartnerEcosystem partner providing bug bounty programs for BNB Chain projects and developers.
• NEAR ProtocolcoreStrategic or Co-development PartnerNEAR Protocol ecosystem partner with dedicated bug bounty program offering rewards up to $1,000,000.
• Manta NetworkcoreStrategic or Co-development PartnerEcosystem partner for Manta Network's modular blockchain ecosystem.
• RadixminorStrategic or Co-development PartnerEcosystem partner for Radix distributed ledger technology platform.
• SweedminorStrategic or Co-development PartnerCannabis industry company launched its first bug bounty program on HackenProof to test customer data security against hackers.

Scale indicators7 records

Recent moves6 records

Expansion highlights6 records

Emerging players

• Certora: Certora provides formal verification tooling for smart contracts. Adjacent technology competitor to HackenProof's smart contract security and auditing capabilities, with focus on formal verification.
• Zellic: Zellic is a Web3 security firm focused on smart contract audits and formal verification for protocols. Emerging competitor to HackenProof's professional audit services.

Broad incumbents

• Trail of Bits: Trail of Bits is a well-known security firm offering smart contract audits and security tooling. Established incumbent that competes for high-end Web3 audit engagements alongside HackenProof's Blockchain Auditors team.
• OpenZeppelin: OpenZeppelin is a leading smart contract security and audit firm with broader developer tooling. Larger, broader incumbent that competes for the same Web3 audit budget as HackenProof.

Direct peers

• Hacken: Hacken is a closely related Web3 security firm offering smart contract audits, bug bounties, and security consulting. Highly comparable service portfolio to HackenProof and likely the closest peer given the shared Hacken brand lineage.
• Immunefi: Immunefi is the largest Web3 bug bounty platform, connecting whitehat hackers with crypto protocols and exchanges for vulnerability disclosure. Direct competitor to HackenProof's core bug bounty offering with broader program coverage and larger payouts.
• Code4rena: Code4rena runs competitive audit contests for Web3 smart contracts, with a large warden community. Closely overlaps with HackenProof's Crowdsourced Audit product on the audit side.
• Spearbit: Spearbit is a Web3 security firm running audit competitions and engaging curated security researchers. Competes with HackenProof's professional Blockchain Auditors team and crowdsourced audits.
• Cantina: Cantina runs Web3 audit competitions and security reviews for protocols. Overlaps with HackenProof's crowdsourced audit service and competes for protocol security budgets.
• Sherlock: Sherlock combines audit competitions with a coverage/warranty layer for DeFi protocols. Competes directly with HackenProof's pre-mainnet crowdsourced audits and bug bounty programs.

Market position

Strengths4 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/hackenproof
• YouTubeyoutube.com/@hackenproof
• LinkedInlinkedin.com/company/hackenproof
• Facebookfacebook.com/hackenproof

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about HackenProof