Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

In brief. pump-fun is a bug bounty program on Cantina. 5 assets are listed in scope, 5 of them bounty-eligible. As of Oct 18, 2026. Markdown for agents

NR Unrated

pump-fun

pump-fun Cantina
3 more reviews needed for a grade
Write a review Claim this company profile

Work at pump-fun? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.

Ask BugRater to submit it

Reports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.

Reviews

0 published

No reviews yet.

Be the first to review

Program profile Cantina, imported

Cantina published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade.

Submissions
Open
Launched
Mar 2025

Scope

5 assets
AssetTypeEligibilityMax severity
*.pump.fun WILDCARD ✓ bounty Critical
https://apps.apple.com/fr/app/pump-fun/id6717572591 URL ✓ bounty Critical
https://github.com/pump-fun/pump-public-docs SOURCE CODE ✓ bounty Critical
https://play.google.com/store/apps/details?id=com.batonresearch.pump URL ✓ bounty Critical
pump.fun URL ✓ bounty Critical