Babylon bug bounty on Sherlock: up to 500,000 USDC

Babylon Labs opened a bug bounty programme for the Babylon Bitcoin staking protocol on the Sherlock audit platform. The maximum reward is 500,000 USDC.

The protocol lets Bitcoin holders stake their coins for proof of stake systems while keeping self custody, so the scope covers both the chain side and the web and app side. On the chain side critical reports pay 20,000 USD to 500,000 USD, high reports pay 5,000 USD to 15,000 USD, medium reports pay 1,000 USD to 3,000 USD and low reports pay a flat 1,000 USD. On the web and app side critical reports pay 10,000 USD to 70,000 USD.

For a critical chain report the reward is 10 percent of the funds directly affected, capped at 500,000 USD, with a floor of 20,000 USD. Payouts are set in USD and paid in USDC on Ethereum, in BABY on Babylon Genesis, or in a mix.

Every report needs a coded proof of concept with instructions to run it. Babylon Labs decides the severity, whether a report is in scope and the reward inside the stated range.

The programme has been live since September 21, 2026 and has no closing date. Reports go through the Report a bug link on the Sherlock programme page.