Bug Bounties.
Escrowed on
XRPL.

// Escrow · Encrypt · Pay

Submit a finding, the org locks XRP in escrow before reading it. No middleman, no invoicing, no chasing payments. Settled in 3-5 seconds, anywhere in the world.

How it works

Four steps.
No trust required.

Org creates a bounty program

Set payout amounts per severity level and a total budget. No funds leave your wallet until you accept a finding.

Hunter submits an encrypted finding

The report is AES-256 encrypted client-side. A SHA-256 hash proves it exists. The org can't read the content until XRP is locked in escrow.

Org accepts โ†’ escrow locks the XRP

A crypto-condition is generated. The org signs an EscrowCreate on XRPL. The reward is locked on-chain before the report is decrypted.

Report revealed, XRP released

The escrow confirms on-chain, the report is decrypted. The hunter gets the fulfillment key and claims the XRP. If the org doesn't respond within 24h, auto-release kicks in.

How it works under the hood

No trust assumptions.
Just mechanisms

๐Ÿ”’

XRPL Native Escrow

Rewards use EscrowCreate, a protocol-level primitive. Once locked, the org can't pull the funds back. The hunter can't claim without the fulfillment key.

๐ŸŒ

No Bank Required

Payments settle in XRP โ€” 3-5 seconds, any country, no intermediary. All you need is a wallet. No SWIFT, no PayPal, no invoicing.

๐Ÿ›ก๏ธ

Encrypt-then-Escrow

Reports are AES-256 encrypted before submission. The org only reads the content after locking XRP in escrow. 24h timeout auto-releases if no response.

โšก

Reputation Scores

Computed from submission history โ€” acceptance rate, dispute ratio, response time. Orgs that ghost hunters lose points. Hunters that spam lose points.

๐Ÿ”

Proof of Existence

Every submission generates a SHA-256 hash before encryption. Proves the finding existed at submission time โ€” no disputes about who found it first.

๐Ÿ“Š

Severity Grid

Orgs set fixed XRP amounts per severity: Critical, High, Medium, Low, Info. Hunters see the payouts before they start. Budget auto-depletes as findings are accepted.

Why XRP

Payments without friction

Bug bounty platforms typically pay via bank transfer or PayPal โ€” slow, expensive, and unavailable in many countries. XRP settles in seconds with near-zero fees. No bank account needed, no currency conversion, no waiting.

A researcher in Lagos gets paid the same way as one in Berlin. The only requirement is an XRPL wallet.

3-5s Settlement
~$0.0002 Per transaction
24h Auto-release timeout

Active programs

Browse open bounties