Bug bounty program
CH
Chainlink
Most upvoted reports2
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| No Valid SPF Records.Analysed#629087 | Authentication | 2019-07-18 | – | 52 |
| Testnet address being sent in cleartext as http://rinkeby.chain.link/ is missing SSL certificate#576288 | Cryptography | 2019-07-17 | – | 19 |
Subdomains420
| Name | Scope | First seen |
|---|---|---|
| team.chain.link | Not in the scope | 2026-11-14 |
| telemetry.chain.link | Not in the scope | 2026-11-14 |
| chip.telemetry.chain.link | Not in the scope | 2026-11-14 |
| prod.telemetry.chain.link | Not in the scope | 2026-11-14 |
| canary.prod.telemetry.chain.linkstaging | Not in the scope | 2026-11-14 |
| staging.telemetry.chain.linkstaging | Not in the scope | 2026-11-14 |
| canary.staging.telemetry.chain.linkstaging | Not in the scope | 2026-11-14 |
| grpc.staging.telemetry.chain.linkapi, staging | Not in the scope | 2026-11-14 |
| http.staging.telemetry.chain.linkstaging | Not in the scope | 2026-11-14 |
| testnet.chain.link | Not in the scope | 2026-11-14 |
| testnet-dataengine.chain.link | Not in the scope | 2026-11-14 |
| api.testnet-dataengine.chain.linkapi | Not in the scope | 2026-11-14 |
| priceapi.testnet-dataengine.chain.link | Not in the scope | 2026-11-14 |
| telemetry.testnet-dataengine.chain.link | Not in the scope | 2026-11-14 |
| ws.testnet-dataengine.chain.link | Not in the scope | 2026-11-14 |
| cre-gateway.testnet.chain.link | Not in the scope | 2026-11-14 |
| functions-gateway.testnet.chain.link | Not in the scope | 2026-11-14 |
| tokenmanager.chain.link | Not in the scope | 2026-11-14 |
| expert.tokenmanager.chain.link | Not in the scope | 2026-11-14 |
| test.expert.tokenmanager.chain.linktest | Not in the scope | 2026-11-14 |
| test.tokenmanager.chain.linktest | Not in the scope | 2026-11-14 |
| vrf.chain.link | Not in the scope | 2026-11-14 |
| wanchain-testnet-node.chain.link | Not in the scope | 2026-11-14 |
| www.chain.link | Not in the scope | 2026-11-14 |
| xpn-test.chain.linktest | Not in the scope | 2026-11-14 |
| zh.chain.link | Not in the scope | 2026-11-14 |
| zone-c-test-gateway.chain.linktest | Not in the scope | 2026-11-14 |
| aa-creditor.smartcontract.com | In scope | 2026-11-14 |
| aa-debtor.smartcontract.com | In scope | 2026-11-14 |
| ab.smartcontract.com | In scope | 2026-11-14 |
| about.smartcontract.com | In scope | 2026-11-14 |
| agent-bond.smartcontract.com | In scope | 2026-11-14 |
| api.smartcontract.comapi | In scope | 2026-11-14 |
| aviculturist.smartcontract.com | In scope | 2026-11-14 |
| awh.smartcontract.com | In scope | 2026-11-14 |
| careers.smartcontract.com | In scope | 2026-11-14 |
| www.careers.smartcontract.com | In scope | 2026-11-14 |
| chainlink-dev.smartcontract.comdev | In scope | 2026-11-14 |
| chainlink-docs.smartcontract.com | In scope | 2026-11-14 |
| clfaq.smartcontract.com | In scope | 2026-11-14 |
| clickable-json.smartcontract.com | In scope | 2026-11-14 |
| cmemonitor.smartcontract.com | In scope | 2026-11-14 |
| complink.smartcontract.com | In scope | 2026-11-14 |
| complink-ext.smartcontract.com | In scope | 2026-11-14 |
| staging.complink-ext.smartcontract.comstaging | In scope | 2026-11-14 |
| uat.complink-ext.smartcontract.comtest | In scope | 2026-11-14 |
| staging.complink.smartcontract.comstaging | In scope | 2026-11-14 |
| uat.complink.smartcontract.comtest | In scope | 2026-11-14 |
| contractscontractscontracts.smartcontract.com | In scope | 2026-11-14 |
| create.smartcontract.com | Listed out of scope | 2026-11-14 |
| creditor-oracle.smartcontract.com | In scope | 2026-11-14 |
| ct.smartcontract.com | In scope | 2026-11-14 |
| ct-adm.smartcontract.comadmin | In scope | 2026-11-14 |
| ct-api.smartcontract.comapi | In scope | 2026-11-14 |
| da.smartcontract.com | In scope | 2026-11-14 |
| dev.astro.da.smartcontract.comdev | In scope | 2026-11-14 |
| prod.astro.da.smartcontract.com | In scope | 2026-11-14 |
| bchain.da.smartcontract.com | In scope | 2026-11-14 |
| alertmanager.bchain.da.smartcontract.commonitoring | In scope | 2026-11-14 |
| alertmanager2.bchain.da.smartcontract.commonitoring | In scope | 2026-11-14 |
| arbitrum.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| arbitrum1.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| avalanche.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| avalanche1.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| avalanche2.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| bsc.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| bsc1.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| bsc2.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| bsc5.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| bsc6.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| ethereum.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| ethereum1.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| ethereum2.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| fantom.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| fantom1.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| grafana.bchain.da.smartcontract.commonitoring | In scope | 2026-11-14 |
| grafana2.bchain.da.smartcontract.commonitoring | In scope | 2026-11-14 |
| harmony.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| harmony1.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| harmony2.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| heco.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| heco1.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| heco2.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| moonriver.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| moonriver1.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| moonriver2.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| optimism.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| optimism1.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| optimism2.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| polygon.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| polygon1.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| polygon2.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| prometheus.bchain.da.smartcontract.commonitoring | In scope | 2026-11-14 |
| prometheus2.bchain.da.smartcontract.commonitoring | In scope | 2026-11-14 |
| terra.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| terra1.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| terrarpc1.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| xdai.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| xdai1.bchain.da.smartcontract.com | In scope | 2026-11-14 |
| xdai2.bchain.da.smartcontract.com | In scope | 2026-11-14 |
192 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.