META EARTH
BUG BOUNTY
PROGRAM
Prize pool up to
$300,000 in MEC
Up to
$5,000 in MEC
per individual
Program Timeline
- Bug Bounty Phase ILIVE NOWPrize Pool: $100,000 in MECDate: 2026.05.27 07:00 - 2026.06.17 07:00 UTCBug Scope:ME HUB
- Bug Bounty Phase IIComing SoonPrize Pool: TBDDate: TBDBug Scope:ME Wasm
- Bug Bounty Phase IIIComing SoonPrize Pool: TBDDate: TBDBug Scope:MBC Cross-Chain ProtocolSDK/APIFrontend / BrowserOfficial Documentation
How to get rewards
Once you successfully identify and submit a vulnerability that meets our requirements, our team will assess it based on severity and issue a corresponding reward.
Reward Breakdown
- Bug SeverityReward Range($MEC)
- Critical$2,000 - $5,000
- High$1,000 – $2,000
- Medium$100 – $1,000
- Low$50 – $100
Scope of implementation
Implementation phase
Module
Coverage content
Phase I
ME Hub
(Settlement Layer)
Sequencer registration mechanism, consensus mechanism (CometBFT), validator voting and block production, AppHash consistency issues, wstaking module staking business, wgov module proposal governance, Gravity module cross-chain bridge fund security, wmint module token minting logic, wdistri module national/regional reward distribution mechanism, Gas fee charging mechanism, RollApp module state submission, DID module identity management, KYC module identity authentication, megroup module group-joining rewards
Phase II
ME Wasm
(Execution Layer)
Wasm virtual machine environment, CosmWasm contracts, memory safety, Rust runtime, smart contract interactions
Phase III
MBC Cross-Chain Protocol
Modular Blockchain connectivity, cross-chain asset transfer, and inter-Rollup interoperability
SDK/API
JS SDK, REST API, GRPC Interface, Swagger Documentation
Frontend / Explorer
Block Explorer, wallet extension, Vue frontend application, wallet integration, transaction query interface
Official Documentation
Developer documentation, API documentation, deployment guides, technical white paper, README
Note: Since the relayers and contract code for the Meta Earth Bridge are not open source, developers are unable to test the Meta Earth Bridge and can only review the code for the Gravity, BSC, and TRON modules.
Program Guidelines
1
If multiple participants submit the same bug, the earliest submission timestamp takes precedence; other valid submitters will receive an additional official reward.
2
All submissions must include the testnet block height or transaction hash (Tx Hash). The technical team will reproduce and verify the issue on the public testnet.
3
Low-severity vulnerabilities are capped at 3 rewarded submissions per participant per week; there is no submission limit for medium-severity vulnerabilities and above.
4
Approved bug submission links will be published across X, the full blog post, and the official website, ensuring full traceability throughout.
5
Please submit your $MEC address (generated via ME Pass) to receive rewards. All earned $MEC can be freely exchanged to USDT and withdrawn anytime. Download ME Pass from our official website or App Store.
6
Rewards for the event will be distributed in $MEC of equivalent value, with the conversion rate based on the real-time price on the day of distribution.
7
MetaEarth Devs reserves the right of final interpretation for this program.
