Blockchain security firm CertiK launched CertiK Hunt on July 1, 2026, an invite-only platform connecting vetted security researchers with Web3 projects. The platform enables blockchain projects to conduct bug bounty programs, audit competitions, and AI-based security challenges. CertiK developed the platform to reduce the low-quality submissions that have hindered traditional bug bounty initiatives. The launch addresses ongoing Web3 security challenges as the industry continues to face significant financial losses from cyberattacks and exploits. CertiK's invitation-only model restricts participation to researchers meeting predefined standards based on technical expertise, vulnerability discoveries, professional track records, and cybersecurity community standing.
CertiK Hunt Adopts Invitation-Only Access Model
The platform allows participation only from researchers who meet predefined standards. Projects seeking to launch programs on the platform undergo a review process before acceptance, creating a curated environment for both researchers and participating organizations. CertiK said the restricted access model aims to help projects receive fewer but more meaningful vulnerability reports, reducing time and resources spent filtering irrelevant submissions.
Accepted vulnerabilities qualify for rewards under responsible disclosure practices after completing the independent verification process. Margarita Kadochnikova, Head of Communications at CertiK, said the company had observed numerous cases across the cybersecurity industry in which legitimate security researchers encountered disagreements or payment delays despite reporting valid vulnerabilities. She stated that CertiK Hunt was created to establish a trusted environment where researchers could focus on identifying critical security issues while projects received reliable security intelligence under transparent and consistently applied rules.
CertiK Implements Independent Vulnerability Verification Process
Every vulnerability submitted through CertiK Hunt is independently reproduced, verified, and assigned a severity rating before it reaches the project's security team. The company said this neutral review process is intended to reduce disputes over vulnerability severity and bounty payouts by ensuring that assessments are conducted independently rather than by the protocol offering the reward. The independent assessment model seeks to eliminate incentives for projects to reduce the reported severity of vulnerabilities in order to lower bounty payments.
Hudson Jameson, Head of Ecosystem at CertiK, said the launch represented the next stage of the company's effort to improve Web3 security. He indicated that the platform was designed to prioritize quality over submission volume, enabling leading researchers to identify impactful vulnerabilities while giving blockchain projects greater confidence in the security of their software. CertiK said the platform represents a shift from one-time security audits toward continuous, researcher-driven security testing throughout a project's lifecycle, combining formal audits with bug bounty programs, audit competitions, and AI-powered security initiatives.
Web3 Industry Records 76% Infrastructure-Related Losses in 2025
CertiK's 2026 Skynet stablecoin threat report identified wallet compromises as the leading attack vector, surpassing software code vulnerabilities. Another regulatory-focused study found that infrastructure-related compromises accounted for 76% of on-chain losses by value during 2025. The company believes ongoing assessments are increasingly necessary because vulnerabilities may emerge after deployment through software updates or newly discovered attack techniques that were not present during initial audits.
The introduction of CertiK Hunt expands the company's security portfolio beyond conventional auditing services. Alongside recent offerings such as Skill Scanner for AI agents, the platform reflects CertiK's strategy of providing security solutions that support blockchain applications throughout their operational lifecycle, rather than limiting protection to initial code reviews.
FAQ
What did CertiK launch on July 1, 2026?
CertiK launched CertiK Hunt on July 1, 2026, an invite-only platform connecting vetted security researchers with Web3 projects for bug bounty programs, audit competitions, and AI-based security challenges.
How does CertiK Hunt verify submitted vulnerabilities?
Every vulnerability submitted through CertiK Hunt is independently reproduced, verified, and assigned a severity rating before it reaches the project's security team, with assessments conducted independently rather than by the protocol offering the reward.
What percentage of on-chain losses in 2025 were infrastructure-related?
Infrastructure-related compromises accounted for 76% of on-chain losses by value during 2025, according to CertiK's regulatory-focused study.
