Find bugs on bandtogether.io — $100 USDC bounty budget
Find real bugs on bandtogether.io. Accepted bugs are paid by severity from a shared $100 USDC budget until it runs out.
bandtogether.io helps fans request their favorite bands in any city. Hunt for real bugs: broken buttons and flows, wrong data, pages that don't load, auth problems, anything that stops the app working right. To claim: report the bug with steps to reproduce, screenshots, and your browser and device. Each accepted bug is paid from a shared $100 USDC budget, with the amount set by severity when the claim is approved. Several bugs can be paid — but once the $100 budget is fully paid out, the program is done. Bugs that are already known or reported don't qualify — find something new.
Reward scales with severity
Our AI rates every report when you submit it and the team confirms the rating before paying.
Critical
Direct loss of funds or full access to private data or admin controls
100 USDC
High
Exposes sensitive user data or lets an attacker take over accounts or actions
70 USDC
Medium
A real weakness that needs specific conditions or user interaction to abuse
40 USDC
Low
Minor weakness with limited impact or hardening gaps
20 USDC
Informational
Best-practice suggestions with no practical exploit
0 USDC
Report the bug with steps to reproduce, screenshots, and your browser and device. Submit the Stellar wallet where you'd like to receive your USDC. Payouts come from a shared $100 USDC budget; once it is fully paid out, the program ends. Bugs that are already known or reported don't qualify.
USDC on Stellar to the wallet you submit, sent after our team reviews and approves your claim. The amount is set by severity and paid from the shared $100 USDC budget.
Submit your proof
5 of 5 claims leftProvide the details below. Your reward depends on severity, up to 100 USDC.