BugRater
Early access: this site has moved to bugrater.com.
Programs / Oasis Protocol Foundation
NR Unrated
Oasis Protocol Foundation
Oasis Protocol Foundation HackerOne
3 more reviews needed for a grade
Write a review
Program page hackerone.com ↗
Claim this company profile

Work at Oasis Protocol Foundation? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you would rather not deal with the vendor yourself, a BugRater analyst will submit it upstream on your behalf, with your explicit permission, and tell you what came back.

Ask BugRater to submit it

Private. The report body is encrypted at rest; BugRater holds the key, so the analyst working it can read it. Every read is logged.

Program metrics HackerOne · published

HackerOne’s own figures for this program, read from its public page, not reported by researchers and not part of the BugRater grade. Captured 24 Sep 2026.

What it pays, by severity

Critical amount not published 2 reports
High amount not published 7 reports
Medium amount not published 6 reports
Low amount not published 11 reports

$15,400 paid to researchers in total. Lifetime figure as HackerOne prints it: evidence this program has paid, not a promise about any one report.

Intake & responsiveness · last 90 days

Reports received
0
in 90 days
Resolved
32
all time, last one 1 year ago
Participants
38
hunters engaged
Response efficiency
77%
meeting its targets, HackerOne’s figure
SLA misses
0
targets missed
Reports received · day by day, last 15 days 0–0
27 Aug 0 reports 24 Sep

Response targets it sets itself

First response
1 day
Triage
2 days
Bounty
5 days
Resolution
30 days

A target the program declared, not a measurement of it being met.

Getting in the door

submissions paused

Over 33 days (18 snapshots): no change on the figures worth watching.

See how this programme’s report load compares to others →

Reviews

0 published

No reviews yet.

Be the first to review

Who this program credits

39 credited

Researchers HackerOne shows on this program’s public thanks list, best position first. “Recognised” is how many of a hunter’s submissions the program accepted; the ratio is their signal here, not our judgement of them.

# Researcher Reputation Recognised / submitted
1 codermak 125 4 / 6 67%
2 nathand 89 2 / 2 100%
3 pat_ventuzelo 88 4 / 4 100%
4 m0chan 57 1 / 1 100%
4 zonduu 57 1 / 1 100%
6 milankatwal99 44 2 / 3 67%
7 kmotoko 34 1 / 1 100%
8 omer 32 1 / 1 100%
8 proabiral 32 1 / 1 100%
10 godiego 24 2 / 2 100%
11 anilbhatt 22 1 / 1 100%
11 bugyhun0x 22 1 / 1 100%
11 d0xing 22 1 / 1 100%
11 dazaiii 22 1 / 1 100%
11 kr1shna4garwal 22 1 / 1 100%
11 pwndb 22 1 / 1 100%
11 recreati 22 1 / 1 100%
11 talko 22 1 / 2 50%
11 walter_y 22 1 / 1 100%
20 ozairowais2t10 15 0 / 1 0%
20 rahulupadhyay7 15 0 / 1 0%
20 wayc0de 15 0 / 1 0%
23 jrastit 12 1 / 2 50%
24 bh3x 7 1 / 1 100%
24 hoaln 7 2 / 2 100%

Showing the top 25 of 39 credited on HackerOne.

Program profile HackerOne · imported

Facts published by HackerOne on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 24 Sep 2026.

Responsiveness
77% HackerOne’s figure
Swag
Offered
Currency
USD
Submissions
Paused
Launched
Nov 2019
Scope entries
27 HackerOne’s count

Scope

27 assets
AssetTypeEligibilityMax severity
*.testnet.oasiscloud.io WILDCARD ✓ bounty Critical
github.com/oasisprotocol/explorer SOURCE CODE ✓ bounty Critical
http://emerald.oasis.dev URL ✓ bounty Critical
http://github.com/oasislabs/bsaes.js URL ✓ bounty Critical
http://github.com/oasislabs/deoxysii URL ✓ bounty Critical
Show all 27 assets
AssetTypeEligibilityMax severity
http://github.com/oasislabs/deoxysii-rust URL ✓ bounty Critical
http://github.com/oasislabs/ed25519 URL ✓ bounty Critical
http://github.com/oasislabs/oasis-cli URL ✓ bounty Critical
http://github.com/oasislabs/oasis-core URL ✓ bounty Critical
http://github.com/oasislabs/oasis-rs URL ✓ bounty Critical
http://github.com/oasislabs/oasis-runtime URL ✓ bounty Critical
http://github.com/oasislabs/oasis.js URL ✓ bounty Critical
http://github.com/oasislabs/runtime-ethereum URL ✓ bounty Critical
http://grpc.oasis.dev URL ✓ bounty Critical
http://rosetta.oasis.dev/api/mainnet URL ✓ bounty Critical
http://sapphire.oasis.io URL ✓ bounty Critical
https://github.com/oasisprotocol/curve25519-voi SOURCE CODE ✓ bounty Critical
https://github.com/oasisprotocol/deoxysii SOURCE CODE ✓ bounty Critical
https://github.com/oasisprotocol/deoxysii-rust SOURCE CODE ✓ bounty Critical
https://github.com/oasisprotocol/ed25519 SOURCE CODE ✓ bounty Critical
https://github.com/oasisprotocol/oasis-core SOURCE CODE ✓ bounty Critical
https://github.com/oasisprotocol/oasis-sdk SOURCE CODE ✓ bounty Critical
https://github.com/oasisprotocol/oasis-wallet-ext SOURCE CODE ✓ bounty Critical
https://github.com/oasisprotocol/oasis-wallet-web SOURCE CODE ✓ bounty Critical
status.oasis.io URL ✓ bounty Critical
wallet.oasis.io URL ✓ bounty Critical
Not in Scope OTHER out None