H1 HackerOne LIVE

Chainlink

pays bountiesTABLE ↗ Open on HackerOne ↗

8 targets in scope

asset	type	bounty	max sev	seen
`chain.link`	domain	no	medium	2026-09-20
`Faucets`	other	yes	high	2026-09-20
`https://github.com/smartcontractkit/chainlink-evm/tree/develop/contracts`	smart contract	yes	critical	2026-09-20
`https://github.com/smartcontractkit/chainlink-solana/tree/develop/contracts`	smart contract	yes	critical	2026-09-20
`https://github.com/smartcontractkit/staking-v0.1/tree/master/contracts`	smart contract	yes	critical	2026-09-20
`https://github.com/smartcontractkit/chainlink`	source code	yes	critical	2026-09-20
`https://github.com/smartcontractkit/external-adapters-js/`	source code	yes	high	2026-09-20
`*.smartcontract.com`	wildcard	no	none	2026-09-20

15 out of scope — black ICE, don't touch

blog.chain.link domain
chainlinklabs.com domain
create.smartcontract.com domain
docs.chain.link domain
Intercom other
https://github.com/smartcontractkit/chainlink smart contract
https://github.com/smartcontractkit/chainlink-evm/tree/develop/contracts/.../dev smart contract
https://github.com/smartcontractkit/chainlink-solana/tree/develop/contracts/.../dev smart contract
https://github.com/smartcontractkit/chainlink/tree/master/contracts smart contract
github.com/smartcontractkit/chainlink/contracts/src/*/dev source code
github.com/smartcontractkit/chainlink/examples source code
https://github.com/smartcontractkit/chainlink/tree/master/core/internal source code
https://github.com/smartcontractkit/chainlink/tree/master/core/sgx source code
https://github.com/smartcontractkit/chainlink/tree/master/integration source code
https://github.com/smartcontractkit/chainlink/tree/master/tools source code

No changes since we started tracking on 2026-09-20.