I just learned about a pretty high-profile story involving white-hat hacker f4lc0n, who found a serious vulnerability in Injective. And it’s not just for nothing — we're talking about half a billion dollars that could theoretically have been at risk.



The core issue is that the vulnerability allowed anyone to delete accounts in the network without any privileges. Sounds pretty scary, right? The guy quickly reported everything through Immunefi, and they even launched a vote to update the mainnet.

But here’s where it gets interesting — the Injective team offered $50K for such a find. Meanwhile, the maximum reward for similar services in their bug bounty program can reach up to $500K. A tenfold difference. Naturally, f4lc0n is not thrilled.

What’s even more amusing — the guy says that the value of bug bounty services in the crypto community is considered much higher, and the Injective team hasn’t responded for three months now. No money, no explanations.

In response to this attitude, f4lc0n decided to go all-in — promising to donate 10% of all future bug bounty rewards to raise awareness about this situation. Of course, he hasn’t received the full amount yet.

This story clearly shows how important hacker services are for blockchain security and how sometimes even serious projects treat them casually. When you find a critical vulnerability, you expect a fair assessment of your work, not this kind of neglect. Hacker services for protocol security are no joke — they are a real value for the ecosystem.
INJ-2.42%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin