logo
    • Buy Crypto
    • Markets
    • Futures
    • Spot
    • Earn
    • Affiliates & AI
    • More
    1. WEEX
    2. Crypto News
    3. Solana’s Alpenglow bug hunt charges researchers 0.5 SOL to report flaws

    Solana’s Alpenglow bug hunt charges researchers 0.5 SOL to report flaws

    By: cryptoslate.com|2026/08/18 20:10:16
    0
    Share
    copy
    Prefer us on GooglePrefer us on Google
    solanasolana
    00.00%--
    EngineEngine
    EngineEngine
    GATEGATE
     

    Anza is charging security researchers a non-refundable 0.5 SOL to file each Alpenglow finding before the competition closes at 16:00 UTC on Aug. 19.

    The rules require every finding to pass through a designated portal, which burns the fee and creates one confidential GitHub Security Advisory. Reports sent through another channel are ineligible.

    The target is consequential. SIMD-0326 proposes Alpenglow as a backwards-incompatible replacement for Solana's current Proof-of-History and TowerBFT consensus protocol. Anza has put the new consensus components, their validator integrations and the migration path inside the bounty's temporary scope.

    Researchers pay the filing cost before Anza determines validity, severity, duplication or reward. They also work against a moving version of Agave master. Each report must identify the commit where the flaw appeared, reproduce the issue there and arrive while the bug remains unfixed on master.

    A proof-of-concept requirement and the filing burn can reduce placeholder submissions. They can also price out a valid finding whose impact or priority is uncertain. The published rules contain no measure of participation or report quality that would settle the tradeoff.

    The competition overview says Alpenglow was excluded from Agave's standing bounty during development, monorepo migration and internal-audit phases. The two-week competition opens an enumerated set of Alpenglow code that includes the Votor voting engine, vote and certificate messages, BLS signature and certificate verification, the TowerBFT migration path and specified validator integration surfaces.

    Several boundaries remain. Public or previously disclosed issues do not qualify. Known issues, test code, third-party cryptography dependencies and ordinary TowerBFT-only paths are also excluded. Researchers must demonstrate findings on a local fork, multi-node harness or simulation; mainnet and public-testnet attacks are unauthorized.

    Priority depends on evidence, not a timestamp alone. The earliest report that meets the proof-of-concept bar at Anza's assessed severity receives the award for that root cause. A placeholder reserves nothing. Later duplicates receive nothing unless one substantiates a strictly higher assessed severity.

    Eligibility ends when a fix reaches Agave master. A report can therefore lose its chance of payment during the competition even when the researcher reproduced the flaw against an earlier in-window commit.

    Under the Alpenglow rules, the advertised 50,000 SOL is the largest aggregate pool, unlocked only by the highest severity:

    Highest valid findingUnlocked pool
    DoS or Other10,000 SOL
    Liveness or loss of availability20,000 SOL
    Consensus or safety violation30,000 SOL
    Loss of funds50,000 SOL

    Individual awards use smaller ranges. Loss-of-funds findings receive 6,250 to 25,000 SOL, consensus or safety violations 3,125 to 12,500 SOL, liveness findings 1,250 to 5,000 SOL, and DoS findings 315 to 1,250 SOL.

    Anza reduces awards proportionally if the combined awards exceed the unlocked pool. Fewer or smaller findings can leave part of the pool unpaid. Even a loss-of-funds result unlocks the budget without raising any single award above 25,000 SOL.

    Payment comes after the Sept. 2 adjudication close and KYC. Awards are lump sums in SOL locked for 12 months under the standing Agave bounty terms. The filing burn is immediate; compensation depends on later adjudication and remains illiquid for a year.

    The Alpenglow bounty covers a consensus migration.

    Alpenglow's Votor components use BLS-based vote and certificate aggregation and verification. Notarization, skip, finalization, and notar-fallback certificates require 60% of stake, while fast finalization requires 80%. The initial design keeps Turbine for data dissemination.

    The proposal defines a 20+20 security model with 40% crash-failure resilience. It labels implementation risk as the main drawback, calls migration challenging, and states that the new voting logic is incompatible with its predecessor.

    Anza included both core consensus crates and validator code that processes certificates, rewards and finalization state. The TowerBFT handoff is eligible too, putting the joins between old and new logic under review alongside Votor itself.

    The official rules and overview still listed Aug. 19 as the cutoff when checked on Aug. 18, with no extension notice on either page. The submission window's close does not activate Alpenglow or complete the migration.

    Confidentiality also separates the deadline from any public result. A finding stays private until its fix ships. Code awaiting mainnet activation can remain under embargo until the fix is merged and the relevant feature gate activates.

    An empty public record after Aug. 19 would reveal nothing about the number of advisories. Before adjudication, the disclosed economics tell the story: 0.5 SOL leaves a researcher's wallet first, evidence determines priority, and only a substantiated loss-of-funds flaw opens the full pool.

    -- Price

    --

    This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.

    You may also like

    CFTC seeks feedback on CPO and CTA rule changes

    CFTC seeks feedback on CPO and CTA rule changes

    Arthur Hayes Launches Flop, a Network for AI Agents with the Promise of an Airdrop

    Arthur Hayes Launches Flop, a Network for AI Agents with the Promise of an Airdrop

    Web3: Foreign Media Reports Need for Safer Liquidity Tools in Crypto Collateralized Lending

    Web3: Foreign Media Reports Need for Safer Liquidity Tools in Crypto Collateralized Lending

    Ripple CLO says Sept. 15 will be a 'bellwether' for Clarity Act market structure bill

    Ripple CLO says Sept. 15 will be a 'bellwether' for Clarity Act market structure bill

    US Bonds Plummet and Rates Hit Record Levels: Why Nervousness in the Market Spiked

    US Bonds Plummet and Rates Hit Record Levels: Why Nervousness in the Market Spiked

    A set of structural and cyclical factors triggered a massive sell-off of "Treasuries" that then spilled over into the sovereign debt of the world's major economies.
    Digital wealth needs safer paths to liquidity, XPlace CEO says

    Digital wealth needs safer paths to liquidity, XPlace CEO says

    Home Mining Banned in Moscow and the Moscow Region

    Home Mining Banned in Moscow and the Moscow Region

    Home mining in Moscow, the Moscow region, and certain municipal districts of the Kursk region has been completely banned since August 15: now it is prohibited to mine cryptocurrency in these areas even on small setups in apartments, garages, or summer houses.
    Country Risk Reaches 500 Basis Points: Three Causes Behind the Upsurge

    Country Risk Reaches 500 Basis Points: Three Causes Behind the Upsurge

    The index measured by J.P. Morgan has reached this key level again, according to analysts, due to a combination of local and international factors.
    Reddit Joins the S&P 500, Two Years After Selling All Its Bitcoin

    Reddit Joins the S&P 500, Two Years After Selling All Its Bitcoin

    Reddit joins the S&P 500 on August 18, two years after selling all its Bitcoin and Ethereum. A look back at the index effect, already seen with Coinbase in 2025.
    The Coldcard Hack Exposes a Perception Problem for Bitcoin

    The Coldcard Hack Exposes a Perception Problem for Bitcoin

    US Treasury Yields and Chip Stocks Weigh on S&P 500

    US Treasury Yields and Chip Stocks Weigh on S&P 500

    Disney's ABC Sues FCC Over License Renewal and Censorship Amid Criticism of Trump

    Disney's ABC Sues FCC Over License Renewal and Censorship Amid Criticism of Trump

    ABC, owned by Disney, filed a First Amendment lawsuit against the FCC, accusing the regulator of retaliation for its programming critical of Trump. The conflict escalated following the early review of broadcast licenses due to DEI practices.
    Pennsylvania Sets Power and Water Conditions for Data Center Support

    Pennsylvania Sets Power and Water Conditions for Data Center Support

    Pennsylvania has established criteria for data centers to receive state support and tax incentives, requiring developers to meet conditions related to power costs, water usage, community procedures, and employment.
    0G Private Computer tops 250B tokens, adds USD payments

    0G Private Computer tops 250B tokens, adds USD payments

    web3: pump.fun Turns Repurchase Position Profitable, $PUMP Ends 9-Month Loss

    web3: pump.fun Turns Repurchase Position Profitable, $PUMP Ends 9-Month Loss

    Bitcoin As Digital Real Estate: An Excerpt From Leon Wankum's Digital Real Estate

    Bitcoin As Digital Real Estate: An Excerpt From Leon Wankum's Digital Real Estate

    Explore how Bitcoin can be understood as digital real estate, combining absolute scarcity, global portability, and a growing economic network to create a new framework for storing and transferring value.
    Linux 7.3 Fixes FAT System Bug That Silently Truncated File Names

    Linux 7.3 Fixes FAT System Bug That Silently Truncated File Names

    The Linux 7.3 kernel includes a fix for the FAT file system driver that for years accepted longer file names than allowed, truncating them silently and causing unexpected behaviors. The bug, discovered by a Huawei engineer, affected data integrity and generated kernel alerts when using functions lik...
    U.S. Pending Home Sales Decrease by 2.3% in July Amidst 6.7% Mortgage Rates

    U.S. Pending Home Sales Decrease by 2.3% in July Amidst 6.7% Mortgage Rates

    SpaceX Reaches Its 100th Launch Milestone in 2026: Falcon 9 Launches with 24 Starlink Satellites

    SpaceX Reaches Its 100th Launch Milestone in 2026: Falcon 9 Launches with 24 Starlink Satellites

    SpaceX is about to achieve its 100th mission of the year for the third consecutive year. A Falcon 9 rocket, carrying 24 Starlink satellites, will launch from Vandenberg Space Force Base in California, as the company moves towards an era of mass launches with Starship, which could bring annual totals...
    Agency Patent Research: Clerq Compresses Weeks of Work into 10 Minutes

    Agency Patent Research: Clerq Compresses Weeks of Work into 10 Minutes

    Chinese Companies Imitate Strategy Despite Bitcoin Restrictions

    Chinese Companies Imitate Strategy Despite Bitcoin Restrictions

    web3: Strive Acquires 79 More Bitcoins, Total Holdings Rise to 20,246

    web3: Strive Acquires 79 More Bitcoins, Total Holdings Rise to 20,246

    web3: Aave's XAUT Deposits Rise to $76.7 Million

    web3: Aave's XAUT Deposits Rise to $76.7 Million

    Crypto regulation alone cannot solve the institutional settlement gap, says Lynq CEO

    Crypto regulation alone cannot solve the institutional settlement gap, says Lynq CEO

    Porto Alegre Gathers for BitDevs and Invites Interested Parties to Participate in Bitcoin Discussions

    Porto Alegre Gathers for BitDevs and Invites Interested Parties to Participate in Bitcoin Discussions

    The community interested in Bitcoin gathers for another high-level debate edition in the capital of Rio Grande do Sul; see how to participate.
    Bitcoin's Return to $126,000: Will It Reverse the Pure Mining Model?

    Bitcoin's Return to $126,000: Will It Reverse the Pure Mining Model?

    BitMine Approaches 5% of Total Ethereum Supply with 5.82 Million ETH

    BitMine Approaches 5% of Total Ethereum Supply with 5.82 Million ETH

    web3: Nasdaq to Introduce Night Trading Hours to Compete in Crypto Market

    web3: Nasdaq to Introduce Night Trading Hours to Compete in Crypto Market

    Crypto card spending jumps 2.5x to $759m in July

    Crypto card spending jumps 2.5x to $759m in July

    Hunting Down The Coldcard Hacker. Wave 1 Thief May Be Known To FBI

    Hunting Down The Coldcard Hacker. Wave 1 Thief May Be Known To FBI

    Clay Garrett’s investigation matched the 1,082.65 BTC sweeps to a major data provider’s internal logs with “extraordinary specificity.” The coins remain unmoved.

    CFTC seeks feedback on CPO and CTA rule changes

    Arthur Hayes Launches Flop, a Network for AI Agents with the Promise of an Airdrop

    Web3: Foreign Media Reports Need for Safer Liquidity Tools in Crypto Collateralized Lending

    Ripple CLO says Sept. 15 will be a 'bellwether' for Clarity Act market structure bill

    US Bonds Plummet and Rates Hit Record Levels: Why Nervousness in the Market Spiked

    A set of structural and cyclical factors triggered a massive sell-off of "Treasuries" that then spilled over into the sovereign debt of the world's major economies.

    Digital wealth needs safer paths to liquidity, XPlace CEO says

    ...
    Invite friends, get rewards
    Invite to get up to $160 + 40% commission
    Invite friends, get rewardsInvite

    Contents

    solana

    Latest articles

    08/18/2026

    Solana’s Alpenglow bug hunt charges researchers 0.5 SOL to report flaws

    Anza’s Alpenglow bug bounty burns 0.5 SOL per report; severity unlocks up to 50,000 SOL, with payouts adjudicated and locked for 12 months.
    solanasolana
    00.00%--
    07/13/2026

    Over 2 Billion Yen May Have Flowed Out from Early Solana Whales, Awakening After 5 Years

    sentientsentient
    00.00%--
    thenathena
    00.00%--
    solanasolana
    00.00%--
    05/27/2026

    DeFi has reached its most dangerous moment: the real vulnerabilities are not in the code

    April 2026 is not just a security crisis; it is the moment when the industry's mental model completely collapses, and it is also the moment when the protocols that can survive are distinguished from those that cannot.
    05/22/2026

    IOSG Founder: Please tell Vitalik the truth, let the OGs who have enjoyed the industry's dividends enlighten the young people

    The wage earners freeze to death on the road, the sellers of goods die of thirst on the way. The weavers of brocade wear coarse cloth, and the grain growers do not have enough to eat.
    ethereumethereum
    00.00%--
    bitcoinbitcoin
    00.00%--
    solanasolana
    00.00%--
    05/21/2026

    Morning Report | Deloitte acquires crypto infrastructure company Blocknative; stablecoin company Checker completes $8 million financing; a16z may have become the largest external institutional holder of HYPE

    Overview of Important Market Events on May 20
    ethereumethereum
    00.00%--
    gasgas
    00.00%--
    bitcoinbitcoin
    00.00%--
    solanasolana
    00.00%--
    More

    Latest coin listings on WEEX

    logoCommunity
    iconiconiconiconiconiconicon
    Customer Support:@weikecs
    Business Cooperation:@weikecs
    Quant Trading & MM:bd@weex.com
    VIP Program:support@weex.com
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • Customer Support Bot
    • VIP Services
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • Proof of Reserves
    • Invite Friends
    • OTC
    • Download
    • Affiliate
    • VIP Program
    • API
    • Broker
    • Listing Application
    • Affiliate T&C
    • Sitemap
    • Futures
    • Spot
    • Copy Trade
    • Markets
    • WEEX Store
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • Customer Support Bot
    • VIP Services
    • Futures
    • Spot
    • Copy Trade
    • Markets
    • WEEX Store
    • Proof of Reserves
    • Invite Friends
    • OTC
    • Download
    • Affiliate
    • VIP Program
    • API
    • Broker
    • Listing Application
    • Affiliate T&C
    • Sitemap
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE

    Where new wealth is made

    Download app

    Sign Up
    h5 logo
    Download