MetaMask will give up to $50,000 to anyone who discovers vulnerabilities in the wallet

MetaMask, one of the most popular digital asset wallets on the market, has announced its HackerOne rewards program. The program will award prizes to anyone who discovers vulnerabilities in the wallet.

Participants can win prizes between $1,000 and $50,000. The value will depend on the importance of the detected fault.

“As part of our ongoing efforts to make our users as safe as possible, we are excited to partner with HackerOne — a leading Attack Resistance Management (ARM) company — for our security rewards program,” said the company in an ad.

HackerOne with MetaMask

Per the announcement, HackerOne combines the security expertise of ethical hackers with asset discovery.

In addition, the company works with continuous evaluation and process improvement. Thus, it can find and close gaps and prevent digital attacks.

According to the company, this gives ethical hackers a chance to publicize wallet flaws and get rewarded for doing so.

The announcement comes the same month that the United Global Whitehat Security Team (UGWST) received $120,000 from MetaMask. The value was a reward for finding a flaw that could result in the loss of digital currencies.

The company also reported that malicious actors did not exploit the flaw. Furthermore, the team said that it has already fixed the issue for its users.

“We are aware of the numerous scams and phishing attempts that occur in Web 3.0. And this is one of many recent improvements our team has made to combat the nefarious activities that continue to plague the industry,” the company said.

Everyone can get $50,000

If a user believes they have found a possible security flaw, they first need to create a HackerOne account.

Then, you must send a report through the platform. The report should include a detailed description of the finding with reproducible steps, in a clear and concise manner. Or, you can submit a working proof of concept.

Furthermore, the user must not disclose the flaw publicly, on social networks, as it is a private program.

“We will do our best to resolve all vulnerabilities as quickly as possible and coordinate the disclosure of the discovery with the researcher,” he said.

The company also said that decisions on the value of rewards are at its discretion.

Also in order to help users, MetaMask launched a few days ago a partnership with Asset Reality, a company focused on recovering digital assets.

The objective is to help victims of scams to rescue their stolen assets. The services are free for wallet users, but do not include expenses to cover the legal part. But if those costs are too high, the company said it will help victims join forces and seek collective action.