$16 million bounty<\/a> makes Usual the new frontrunner in the blockchain security race, eclipsing all previously recorded bug bounty rewards in the decentralised finance (DeFi) ecosystem.<\/p>\nPrior to this, the largest bounty was offered by Uniswap Labs in November 2024, totalling $15.5 million.<\/p>\n
Usual\u2019s bounty sets a new precedent and comes at a time when Total Value Locked (TVL) on its platform has crossed $880 million, increasing the need for robust defence mechanisms.<\/p>\n
Unlike standard bug bounties, the Usual-Sherlock initiative focuses on vulnerabilities with the potential to cause irreversible damage.<\/p>\n
Only bugs that result in definite fund loss or indefinite freezing, lasting a year or more without reliance on external conditions, will qualify for rewards.<\/p>\n
This selective approach aims to prioritise threats with the highest real-world impact.<\/p>\n
20 security audits complete, no flaws found so far<\/h2>\n
The launch of this $16 million programme follows a string of security checks on Usual\u2019s codebase.<\/p>\n
According to Sherlock, the protocol has already undergone 20 audits, including a recent Sherlock-hosted audit contest that featured a $209,000 prize pool.<\/p>\n
None of the audits identified any critical issues in the code, increasing industry confidence in the protocol\u2019s architecture.<\/p>\n
This latest bounty campaign is hosted entirely on Sherlock\u2019s platform, which serves as a hub for vetting blockchain applications through community-led vulnerability hunts.<\/p>\n
Sherlock\u2019s role ensures that the bounty process is transparent, competitive, and efficiently managed, giving ethical hackers clear guidelines on what qualifies for a payout.<\/p>\n
Threat detection becomes priority<\/h2>\n
As DeFi platforms grow in complexity and capitalisation, the scale and stringency of bug bounties have become key differentiators.<\/p>\n
For Usual, this initiative signals a strategic move to reassure users and institutional partners about the integrity of its operations.<\/p>\n
The push toward larger and more targeted bug bounty programmes underscores a maturing industry grappling with escalating threats.<\/p>\n
In a space where vulnerabilities can be exploited in seconds, pre-launch security assurances are becoming just as critical as post-launch performance metrics.<\/p>\n
\n
\n
Share this article<\/h6>\n
\nCategories<\/h6>\n
\nTags<\/h6>\n<\/p><\/div>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"
Largest crypto bug bounty to date, surpassing Uniswap\u2019s $15.5 million. Usual has undergone 20 security audits, all finding no major flaws. Other protocols lag behind, with max bounties at $2 million so far. Stablecoin protocol Usual has unveiled a record-setting $16 million bug bounty programme in partnership with blockchain security firm Sherlock. The initiative, now […]<\/p>\n","protected":false},"author":2,"featured_media":390098,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[188,183,185,186,187,184,189,150,182,190],"class_list":["post-390097","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","tag-blockchain-tech","tag-blockchain-technology","tag-crypto-technology","tag-cryptocurrency-technology","tag-metaverse-technology","tag-nft-technology","tag-soul-bound-token","tag-tech","tag-technology","tag-token-technology"],"_links":{"self":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/390097","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/comments?post=390097"}],"version-history":[{"count":1,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/390097\/revisions"}],"predecessor-version":[{"id":390099,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/390097\/revisions\/390099"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media\/390098"}],"wp:attachment":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media?parent=390097"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/categories?post=390097"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/tags?post=390097"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}