Ventuals Vulnerability Disclosure

generated: '2026-07-21'
method: searched
probe: true
source: >-
  https://docs.ventuals.com/vhype/bug-bounty,
  https://docs.ventuals.com/vhype/audits
policy:
  - https://cantina.xyz/bounties/d1c3592e-f335-4235-94ac-c6bf6cdb50a3
contact: []
bug_bounty:
  platform: Cantina
  url: https://cantina.xyz/bounties/d1c3592e-f335-4235-94ac-c6bf6cdb50a3
  incentives: $1,000,000
  scope: vHYPE smart contracts
audits:
  - firm: Nethermind
    reports: https://github.com/ventuals/ventuals-contracts/tree/main/docs/audits
  - firm: Zenith
    reports: https://github.com/ventuals/ventuals-contracts/tree/main/docs/audits
evidence:
  - source: https://docs.ventuals.com/vhype/bug-bounty
    kind: docs bug-bounty page ($1M public bug bounty hosted on Cantina)
  - source: https://docs.ventuals.com/vhype/audits
    kind: docs audits page (Nethermind + Zenith audits, reports in GitHub repo)
notes: >-
  No security.txt on any Ventuals host (all /.well-known/security.txt probes
  returned 404; see well-known/ventuals-well-known.yml). The disclosure
  program is scoped to the vHYPE smart contracts and hosted on Cantina.
  Platform announced sunset June 15, 2026; bounty status may change as the
  wind-down completes.