Paxos strengthens security stack with cantina-powered bounty program. * C. Monasterio * Published: March 27, 2026 * 7:11 pm * Updated: March 27, 2026 * 7:11 pm Home > companies > Paxos strengthens security stack with cantina-powered bounty program. Table of Contents * Paxos offers up to $1,000,000 in the USDG stablecoin for researchers who detect critical vulnerabilities in its Web2 and Web3 infrastructure. * The program is launched in collaboration with Cantina, a leading audit platform, fulfilling previous commitments to the Aave and LlamaRisk communities. * The initiative will cover core assets such as PYUSD, PAXG, and USDG, including smart contracts and cross-chain movements. Paxos and Cantina join forces to bring a public Bug Bounty program to the market. This initiative seeks to attract researchers capable of identifying security flaws within the Paxos ecosystem, aiming to guarantee the integrity of its digital financial services. This program was created due to the increasing complexity of threats in the crypto sector, where the capitalization of assets like Pax Gold (PAXG) and PayPal USD (PYUSD) requires a robust defense. With a seven-figure reward, economic incentives are aligned with the Total Value Locked (TVL) in their contracts, strengthening trust in their interoperability bridges and public APIs. Since its inception, the company has maintained rigorous standards through third-party audits and constant penetration testing. However, the formalization of this bounty program adds an extra layer of external vigilance to detect "edge cases" or extreme use cases. Through the alliance with Cantina, access to native Web3 communication with specialized technical expertise will be possible. This synergy is fundamental for holistically evaluating both traditional services and the firm's decentralized innovations. Expansion of surveillance in digital assets and smart contracts. During the first few months, the program will operate under an "invitation" basis, specifically for researchers active within the Cantina network. However, its scope is broad, covering everything from web domains and API services to the underlying infrastructure that allows the movement of assets between different blockchain networks. The bounty payment will be made in the USDG stablecoin, underscoring the brand's commitment to its own ecosystem of regulated assets. Not only will those who discover bugs be rewarded, but this strategy also promotes the adoption and liquidity of its new market launches. With this launch, Paxos consolidates itself as a leader in compliance and security, inviting the global community to audit its systems to build a more resilient and transparent financial environment for all its users.

Cantina and OKX Labs launch $1M Onchain Bug Bounty to strengthen production DEX security. Cantina and OKX Labs have launched a $1 million onchain bug bounty program to continuously secure and strengthen production smart contracts powering OKX's decentralized exchange infrastructure. Web3 security provider Cantina has partnered with OKX Labs to launch the $1 million OKX DEX Onchain Bug Bounty Program, a targeted effort to harden live smart contracts that power OKX's decentralized exchange infrastructure on mainnet. The initiative concentrates solely on production deployments, establishing a continuous, structured security review process intended to bring rigorous, repeatable standards to the upkeep of real-world onchain systems. By framing the program around production-grade contracts rather than testnet code or prototypes, the partnership aims to align security incentives with the operational realities that matter most to users and liquidity providers. The program invites independent security researchers to responsibly disclose vulnerabilities affecting OKX Labs' DEX routing stack and associated onchain components, including multi-ecosystem router implementations that operate across several chains. Scope definitions, authoritative repositories, and deployment references have been published on the official bounty page to provide clarity and reduce ambiguity for submitters, while ensuring that reported issues map directly to production risk. Cantina will manage submissions and triage, applying a disciplined workflow intended to preserve high-signal reporting and fast remediation. Establishing structured, production-focused security framework for onchain DEX systems. Designed as an operating practice rather than a one-off event, the bounty sets out clear eligibility criteria, responsible disclosure expectations, and rules of engagement that reflect the unique demands of critical financial infrastructure. Rewards are structured by severity and real-world impact, with explicit ranges tied to production exposure; the program documentation details how findings are assessed and prioritized so that fixes can be coordinated with minimal disruption to live services. This transparent approach aims to create aligned incentives for researchers and the OKX Labs security team while reducing the window of exposure for discovered vulnerabilities. Beyond immediate vulnerability discovery and patching, the program is positioned to improve long-term operational resilience by normalizing continuous third-party review, accelerating time-to-fix, and feeding security intelligence back into development and deployment practices. By combining Cantina's managed bounty operations with OKX Labs' production onchain footprint, the initiative seeks to raise the bar for how complex DEX systems are defended in the open, incentivizing proactive research and measurable improvements to user fund protections across the onchain trading stack. Disclaimer. In line with the Trust Project guidelines, please note that the information provided on this page is not intended to be and should not be interpreted as legal, tax, investment, financial, or any other form of advice. It is important to only invest what you can afford to lose and to seek independent financial advice if you have any doubts. For further information, Mpost Media Group suggest referring to the terms and conditions as well as the help and support pages provided by the issuer or advertiser. MetaversePost is committed to accurate, unbiased reporting, but market conditions are subject to change without notice. Alisa, a dedicated journalist at the MPost, specializes in cryptocurrency, zero-knowledge proofs, investments, and the expansive realm of Web3. With a keen eye for emerging trends and technologies, she delivers comprehensive coverage to inform and engage readers in the ever-evolving landscape of digital finance.

Automata's monthly update: issue 81. * Release of the SGX attestation quote API for verification * Rework of UI with components from shadcdn * Support for DCAP v1.1 and new testnets and mainnets (including HyperEVM) on the indexer * Set up of infrastructure on bare-metal servers * Fullnode upgrade and deployment * ERC-8004 standardizes how agents earn trust, so they can prove correct execution and that the intended code and model ran on genuine secure hardware with TEE attestations. Automata's suite of production-ready TEE verifier stacks for Intel SGX/TDX, AMD SEV-SNP, and AWS Nitro makes the continuous verification of hardware-attested agents practical onchain. * Automata releases DCAP Attestation v1.1, which adds Pico zkVM + Quote V5 support, configurable TCB Recovery trust controls, and major cost/UX upgrades (EIP-7951 readiness and an improved Attestation Explorer) to verify agent integrity at scale * Automata resolves prover privacy for zkVMs like Brevis's Pico Prism by running proof generation inside verifiable TEEs, so private witness inputs stay encrypted from the operator and only the proof leaves the enclave. * Its DCAP Attestation library was featured in whitepapers of t1 Protocol and Jovay Network (by Ant Digital). * Automata announces its collaboration with Cantina to strengthen the hardware-verifiable agent stack with security tooling and bug bounty support. * Check out its new, refreshed landing page for 1RPC.io, the TEE-attested relay for agents and Web3 * 1RPC.ai adds support for the latest models, including GPT5.1, Claude Opus 4.5, and Gemini 3.0 Pro Preview * Its Research Lead, Yaoxin, was in Buenos Aires for Devconnect and shared more about how Automata is building canonical layer for hardware-attested agents. Check out a snippet of his talk at SpaceComputer's Frontier Forum here. About Automata Network. Automata Network is a machine attestation layer that integrates TEEs into AI systems and decentralized networks. This includes verifiable AI infrastructure with 1RPC, Multi-Provers for Stage 2 rollups like Scroll and Linea, and TEE-capable GPUs with World (formerly Worldcoin) Foundation. Get Automata Network's stories in your inbox. Join Medium for free to get updates from this writer.