Golem Network bug bounty on Sherlock: up to 10,000 USDC
Golem Network pays up to 10,000 USDC on Sherlock for bugs in three public repositories. The program has been live since 1 October 2026.
The Golem Network bug bounty runs on Sherlock. The program page lists a maximum reward of 10,000 USDC. It has been live since 1 October 2026 at 12:18 p.m., and the same timestamp is shown as the last update. The page does not give an end date.
The scope in the page data covers three public repositories: golemfactory/ya-runtime-vm, golemfactory/yagna, and golemfactory/golem-certificate. The severity list on the page names critical. Reports go through the Report a bug link on the same Sherlock page.
The page does not publish a longer eligibility list, a payout table by severity, or a written set of testing rules beyond that scope and the maximum reward.