Solana client Firedancer introduces a vulnerability submission fee; each report must burn 1 tokens SOL

Article

Solana client Firedancer introduces a vulnerability submission fee; each report must burn 1 tokens SOL BlockBeats News,October 27, Jump Crypto's Solana client Firedancer has updated its bug bounty program rules, requiring researchers to permanently burn 1 tokens SOL, worth approximately 100 USD. The fee is non-refundable whether a report is invalid, out of scope, or duplicates an existing vulnerability; reports that do not burn SOL will not be eligible for rewards.

This measure is intended to address the surge in vulnerability reports generated by AI. In an audit competition held at April 9 to May 9, with a total prize pool of 1000000 USD, 162 researchers submitted a total of 809 reports, but only 127 distinct security issues were ultimately identified, with nearly half of valid reports being duplicates. Jump believes that AI agents were involved in discovering or drafting nearly all reports.

Jump Crypto's Ishan Bhatt previously stated that AI has reduced the cost of finding vulnerabilities, but reviewing them remains highly resource-intensive. A large number of duplicate or non-exploitable reports once caused the review queue to build up to 299 reports, forcing engineers to spend more time validating issues and affecting the investigation and remediation of genuine vulnerabilities.

Meanwhile, Jump has also increased bug bounties:November 20 before, rewards for eligible vulnerabilities will be increased to twice the standard amount; for vulnerabilities in the Solana new voting system Alpenglow, rewards can reach up to times, with critical-severity vulnerabilities eligible for up to 300000 USD.

Original link https://m.theblockbeats.info/flash/373921

Key points

Firedancer, Jump Crypto's Solana client, has updated the rules of its bug bounty program.
For each vulnerability report submitted, 1 tokens SOL must be permanently burned, worth approximately 100 USD; fees are non-refundable whether reports are invalid, out of scope, or duplicates.
Reports that do not burn SOL the required amount are ineligible for rewards.
In an audit competition with a total prize pool of 1000000 USD, 162 researchers submitted 809 reports, ultimately identifying 127 distinct security issues.
November 20 Previously, rewards for eligible vulnerabilities were increased to twice the standard amount; Alpenglow vulnerability rewards could reach up to three times, with critical-severity vulnerabilities receiving the highest 300000 USD。

AI-assisted interpretation

The following is analysis, separate from reported facts. Verify important claims independently.

This rule uses a non-refundable SOL burn fee to raise the submission threshold, while increasing certain bug bounties. The report attributes the rationale for the adjustment to an increase in duplicate or low-quality vulnerability reports generated by AI.

Why it matters to readers

For researchers, submitting a vulnerability entails a definite upfront cost; for the Firedancer security team, the rules aim to reduce duplicate or invalid reports and ease review pressure.

SOL is the crypto asset used by the Solana network; “burning” means permanently removing it from circulation, with no possibility of return.

Risks and unknowns

The current evidence comes from a BlockBeats media report, which does not provide an official Firedancer rules page or a direct announcement from Jump Crypto.
It remains unclear whether the number of reports, duplication rate, and pending review queue decreased after the rule adjustment.
It remains unclear whether any researchers withdrew because of the submission fee or raised objections to the rules.

Solana client Firedancer introduces a vulnerability submission fee; each report must burn 1 tokens SOL

Article

AI-assisted interpretation

Why it matters to readers

Risks and unknowns

Related Developments

Related concepts

Keep following

Security Center