Ventuals · Vulnerability Disclosure

Ventuals Vulnerability Disclosure

Vulnerability disclosure

Ventuals publishes a vulnerability disclosure policy for reporting security issues.

CompanyCrypto DefiPerpetual FuturesPre-IPODerivativesTradingHyperliquid

Program:

Disclosure Policy

Policy

https://cantina.xyz/bounties/d1c3592e-f335-4235-94ac-c6bf6cdb50a3

Security Contact

Source

Vulnerability Disclosure

generated: '2026-07-21'
method: searched
probe: true
source: >-
  https://docs.ventuals.com/vhype/bug-bounty,
  https://docs.ventuals.com/vhype/audits
policy:
  - https://cantina.xyz/bounties/d1c3592e-f335-4235-94ac-c6bf6cdb50a3
contact: []
bug_bounty:
  platform: Cantina
  url: https://cantina.xyz/bounties/d1c3592e-f335-4235-94ac-c6bf6cdb50a3
  incentives: $1,000,000
  scope: vHYPE smart contracts
audits:
  - firm: Nethermind
    reports: https://github.com/ventuals/ventuals-contracts/tree/main/docs/audits
  - firm: Zenith
    reports: https://github.com/ventuals/ventuals-contracts/tree/main/docs/audits
evidence:
  - source: https://docs.ventuals.com/vhype/bug-bounty
    kind: docs bug-bounty page ($1M public bug bounty hosted on Cantina)
  - source: https://docs.ventuals.com/vhype/audits
    kind: docs audits page (Nethermind + Zenith audits, reports in GitHub repo)
notes: >-
  No security.txt on any Ventuals host (all /.well-known/security.txt probes
  returned 404; see well-known/ventuals-well-known.yml). The disclosure
  program is scoped to the vHYPE smart contracts and hosted on Cantina.
  Platform announced sunset June 15, 2026; bounty status may change as the
  wind-down completes.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/ventuals-vulnerability-disclosure"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.