# Injective: bug bounty program on Cantina

> Injective is a bug bounty program on Cantina. 9 assets are listed in scope, 9 of them bounty-eligible.

- **Company:** Injective
- **Platform:** Cantina
- **Program page:** https://cantina.xyz/bounties/79042c5c-2331-4100-9bc7-249a540cd013
- **Pays bounties:** yes
- **Submissions:** open
- **Launched:** June 3, 2026
- **BugRater grade:** not graded yet (fewer than three reviewers)
- **BugRater page:** https://bugrater.com/programs/injective

## Scope

As imported from Cantina on October 23, 2026: 9 assets in scope (9 bounty-eligible), 0 out of scope. The policy page is the authority.

- `https://etherscan.io/address/0xf955c57f9ea9dc8781965feae0b6a2ace2bad6f3` (SMART_CONTRACT): in scope, bounty-eligible, max severity critical
- `https://github.com/InjectiveFoundation/injective-core` (SOURCE_CODE): in scope, bounty-eligible, max severity critical
- `https://github.com/InjectiveLabs/swap-contract` (SOURCE_CODE): in scope, bounty-eligible, max severity critical
- `https://helixapp.com/` (URL): in scope, bounty-eligible, max severity critical
- `https://injective.com/` (URL): in scope, bounty-eligible, max severity critical
- `https://injhub.com/` (URL): in scope, bounty-eligible, max severity critical
- `https://mito.fi/` (URL): in scope, bounty-eligible, max severity critical
- `Out of Scope` (OTHER): in scope, bounty-eligible, max severity critical
- `RFQ Contract` (OTHER): in scope, bounty-eligible, max severity critical

---

Generated October 23, 2026 from BugRater data. Platform figures are the platform's own; grades and reviews are BugRater's. Agents can check targets against this scope with the check_scope tool at https://bugrater.com/mcp.