In brief. OpenSea Managed Bug Bounty Program is a bug bounty program on Bugcrowd. Bounties range from $125 to $3,000,000. 11 assets are listed in scope, 10 of them bounty-eligible.
OpenSea Managed Bug Bounty Program
Work at OpenSea Managed Bug Bounty Program? Claim it to respond to reviews as the verified owner.
Found a vulnerability?
If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.
Ask BugRater to submit itReports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.
Reviews
0 publishedNo reviews yet.
Bugcrowd published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade. Last checked 6 Nov 2026.
OpenSea is building the most trusted and inclusive NFT marketplace with the best selection. Trust, safety and security are core areas of focus, which means that finding and eliminating vulnerabilities is a top priority. We value our partnership with the vulnerability hunting community, and as such we ensure all reports are reviewed by security experts and acted upon appropriately. Ratings/Rewards: For the initial prioritization/rating of findings, this program will use the Bugcrowd Vulnerability Rating Taxonomy. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.
Scope
11 assets| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| Agent SDKs | other | ✓ bounty | not set |
| http://wallet.opensea.io/ | website | ✓ bounty | not set |
| https://etherscan.io/address/0x00005EA00Ac477B1030CE78506496e8C2dE24bf5 | other | ✓ bounty | not set |
| https://etherscan.io/address/0x0000a26b00c1F0DF003000390027140000fAa719 | other | ✓ bounty | not set |
| https://github.com/ProjectOpenSea/seaport#deployments | other | ✓ bounty | not set |
Show all 11 assets
| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| io.opensea - Android App | android | ✓ bounty | not set |
| io.opensea - iOS App | ios | ✓ bounty | not set |
| OpenSea MCP | other | ✓ bounty | not set |
| OpenSea Solana Marketplace Program | other | ✓ bounty | not set |
| opensea.io | website | ✓ bounty | not set |
| Broken Link | website | submit only | not set |