Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

In brief. Concrete is a bug bounty program on Cantina. 3 assets are listed in scope, 3 of them bounty-eligible. As of Oct 18, 2026. Markdown for agents

NR Unrated

Concrete

Concrete Cantina
3 more reviews needed for a grade
Write a review Claim this company profile

Work at Concrete? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.

Ask BugRater to submit it

Reports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.

Reviews

0 published

No reviews yet.

Be the first to review

Program profile Cantina, imported

Cantina published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade.

Submissions
Open
Launched
Nov 2025

Scope

3 assets
AssetTypeEligibilityMax severity
https://app.concrete.xyz/earn URL ✓ bounty Critical
https://github.com/Blueprint-Finance/concrete-earn-v2-bug-bounty SOURCE CODE ✓ bounty Critical
Other In-Scope Assets OTHER ✓ bounty Critical