Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

In brief. Celestia is a bug bounty program on HackenProof. 10 assets are listed in scope, 10 of them bounty-eligible. As of Oct 19, 2026. Markdown for agents

NR Unrated

Celestia

Celestia HackenProof
3 more reviews needed for a grade
Write a review Claim this company profile

Work at Celestia? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.

Ask BugRater to submit it

Reports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.

Reviews

0 published

No reviews yet.

Be the first to review

Program profile HackenProof, imported

HackenProof published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade.

Submissions
Open
Launched
Mar 2025

Scope

10 assets
AssetTypeEligibilityMax severity
https://github.com/celestiaorg/celestia-app SOURCE CODE ✓ bounty Critical
https://github.com/celestiaorg/celestia-core SOURCE CODE ✓ bounty Critical
https://github.com/celestiaorg/celestia-node SOURCE CODE ✓ bounty Critical
https://github.com/celestiaorg/go-fraud SOURCE CODE ✓ bounty Critical
https://github.com/celestiaorg/go-header SOURCE CODE ✓ bounty Critical
Show all 10 assets
AssetTypeEligibilityMax severity
https://github.com/celestiaorg/go-square SOURCE CODE ✓ bounty Critical
https://github.com/celestiaorg/nmt SOURCE CODE ✓ bounty Critical
https://github.com/celestiaorg/rsmt2d SOURCE CODE ✓ bounty Critical
https://github.com/klauspost/reedsolomon SOURCE CODE ✓ bounty Critical
https://github.com/succinctlabs/sp1-blobstream SOURCE CODE ✓ bounty Critical