Work at OpenSea Managed Bug Bounty Program? Claim it to respond to reviews as the verified owner.
Found a vulnerability?
If you would rather not deal with the vendor yourself, a BugRater analyst will submit it upstream on your behalf, with your explicit permission, and tell you what came back.
Ask BugRater to submit itPrivate. The report body is encrypted at rest; BugRater holds the key, so the analyst working it can read it. Every read is logged.
Reviews
0 publishedNo reviews yet.
Facts published by Bugcrowd on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 19 Sep 2026.
OpenSea is building the most trusted and inclusive NFT marketplace with the best selection. Trust, safety and security are core areas of focus, which means that finding and eliminating vulnerabilities is a top priority. We value our partnership with the vulnerability hunting community, and as such we ensure all reports are reviewed by security experts and acted upon appropriately. Ratings/Rewards: For the initial prioritization/rating of findings, this program will use the Bugcrowd Vulnerability Rating Taxonomy. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.
Scope
11 assets| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| Agent SDKs | other | ✓ bounty | not set |
| http://wallet.opensea.io/ | website | ✓ bounty | not set |
| https://etherscan.io/address/0x00005EA00Ac477B1030CE78506496e8C2dE24bf5 | other | ✓ bounty | not set |
| https://etherscan.io/address/0x0000a26b00c1F0DF003000390027140000fAa719 | other | ✓ bounty | not set |
| https://github.com/ProjectOpenSea/seaport#deployments | other | ✓ bounty | not set |
Show all 11 assets
| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| io.opensea - Android App | android | ✓ bounty | not set |
| io.opensea - iOS App | ios | ✓ bounty | not set |
| OpenSea MCP | other | ✓ bounty | not set |
| OpenSea Solana Marketplace Program | other | ✓ bounty | not set |
| opensea.io | website | ✓ bounty | not set |
| Broken Link | website | submit only | not set |