logo
    • Buy Crypto
    • Markets
    • Futures
    • Spot
    • Earn
    • Affiliates & AI
    • More
    1. WEEX
    2. Crypto News
    3. Solana’s Alpenglow bug hunt charges researchers 0.5 SOL to report flaws

    Solana’s Alpenglow bug hunt charges researchers 0.5 SOL to report flaws

    By: cryptoslate.com|2026/08/18 20:10:16
    0
    Share
    copy
    Prefer us on GooglePrefer us on Google
    SOLSOL
    00.00%--
    EngineEngine
    EngineEngine
    GATEGATE
     

    Anza is charging security researchers a non-refundable 0.5 SOL to file each Alpenglow finding before the competition closes at 16:00 UTC on Aug. 19.

    The rules require every finding to pass through a designated portal, which burns the fee and creates one confidential GitHub Security Advisory. Reports sent through another channel are ineligible.

    The target is consequential. SIMD-0326 proposes Alpenglow as a backwards-incompatible replacement for Solana's current Proof-of-History and TowerBFT consensus protocol. Anza has put the new consensus components, their validator integrations and the migration path inside the bounty's temporary scope.

    Researchers pay the filing cost before Anza determines validity, severity, duplication or reward. They also work against a moving version of Agave master. Each report must identify the commit where the flaw appeared, reproduce the issue there and arrive while the bug remains unfixed on master.

    A proof-of-concept requirement and the filing burn can reduce placeholder submissions. They can also price out a valid finding whose impact or priority is uncertain. The published rules contain no measure of participation or report quality that would settle the tradeoff.

    The competition overview says Alpenglow was excluded from Agave's standing bounty during development, monorepo migration and internal-audit phases. The two-week competition opens an enumerated set of Alpenglow code that includes the Votor voting engine, vote and certificate messages, BLS signature and certificate verification, the TowerBFT migration path and specified validator integration surfaces.

    Several boundaries remain. Public or previously disclosed issues do not qualify. Known issues, test code, third-party cryptography dependencies and ordinary TowerBFT-only paths are also excluded. Researchers must demonstrate findings on a local fork, multi-node harness or simulation; mainnet and public-testnet attacks are unauthorized.

    Priority depends on evidence, not a timestamp alone. The earliest report that meets the proof-of-concept bar at Anza's assessed severity receives the award for that root cause. A placeholder reserves nothing. Later duplicates receive nothing unless one substantiates a strictly higher assessed severity.

    Eligibility ends when a fix reaches Agave master. A report can therefore lose its chance of payment during the competition even when the researcher reproduced the flaw against an earlier in-window commit.

    Under the Alpenglow rules, the advertised 50,000 SOL is the largest aggregate pool, unlocked only by the highest severity:

    Highest valid findingUnlocked pool
    DoS or Other10,000 SOL
    Liveness or loss of availability20,000 SOL
    Consensus or safety violation30,000 SOL
    Loss of funds50,000 SOL

    Individual awards use smaller ranges. Loss-of-funds findings receive 6,250 to 25,000 SOL, consensus or safety violations 3,125 to 12,500 SOL, liveness findings 1,250 to 5,000 SOL, and DoS findings 315 to 1,250 SOL.

    Anza reduces awards proportionally if the combined awards exceed the unlocked pool. Fewer or smaller findings can leave part of the pool unpaid. Even a loss-of-funds result unlocks the budget without raising any single award above 25,000 SOL.

    Payment comes after the Sept. 2 adjudication close and KYC. Awards are lump sums in SOL locked for 12 months under the standing Agave bounty terms. The filing burn is immediate; compensation depends on later adjudication and remains illiquid for a year.

    The Alpenglow bounty covers a consensus migration.

    Alpenglow's Votor components use BLS-based vote and certificate aggregation and verification. Notarization, skip, finalization, and notar-fallback certificates require 60% of stake, while fast finalization requires 80%. The initial design keeps Turbine for data dissemination.

    The proposal defines a 20+20 security model with 40% crash-failure resilience. It labels implementation risk as the main drawback, calls migration challenging, and states that the new voting logic is incompatible with its predecessor.

    Anza included both core consensus crates and validator code that processes certificates, rewards and finalization state. The TowerBFT handoff is eligible too, putting the joins between old and new logic under review alongside Votor itself.

    The official rules and overview still listed Aug. 19 as the cutoff when checked on Aug. 18, with no extension notice on either page. The submission window's close does not activate Alpenglow or complete the migration.

    Confidentiality also separates the deadline from any public result. A finding stays private until its fix ships. Code awaiting mainnet activation can remain under embargo until the fix is merged and the relevant feature gate activates.

    An empty public record after Aug. 19 would reveal nothing about the number of advisories. Before adjudication, the disclosed economics tell the story: 0.5 SOL leaves a researcher's wallet first, evidence determines priority, and only a substantiated loss-of-funds flaw opens the full pool.

    -- Price

    --
    --
    --

    This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.

    You may also like

    Yakovenko proposes expanding SOL supply for company acquisition

    Yakovenko proposes expanding SOL supply for company acquisition

    Yakovenko’s Solana-funded acquisition idea leaves the legal buyer, ownership structure and control of company revenue unresolved.
    Jurassic Finance Advances Dinosaur Fossil Tokenization on Solana

    Jurassic Finance Advances Dinosaur Fossil Tokenization on Solana

    Scale AI Launches RSI Bench to Test AI's Self-Improvement Capabilities

    Scale AI Launches RSI Bench to Test AI's Self-Improvement Capabilities

    Solana activates Agave 4.2, reducing block time to 200 ms and storage costs by 90%

    Solana activates Agave 4.2, reducing block time to 200 ms and storage costs by 90%

    Solana activates Agave 4.2 this week: blocks at 200 milliseconds, on-chain rent reduced by tenfold, expanded transactions, ahead of Alpenglow in October 2026.
    SOL Spot ETF Sees Net Inflow of $10.26 Million Last Week

    SOL Spot ETF Sees Net Inflow of $10.26 Million Last Week

    Multicoin Completes Stake Liquidation in Forward Industries

    Multicoin Completes Stake Liquidation in Forward Industries

    Multicoin Capital, an early key investor in Forward Industries ($FWDI), has liquidated its stake in the company. Forward is expanding its Solana (SOL) holdings and borrowing, with share buybacks and investments planned.
    Solana Company Reports $2.5 Million Revenue and $30.3 Million Net Loss in Q2

    Solana Company Reports $2.5 Million Revenue and $30.3 Million Net Loss in Q2

    Solana Aims to Reduce Final Transaction Confirmation Time to 150 Milliseconds

    Solana Aims to Reduce Final Transaction Confirmation Time to 150 Milliseconds

    Solana (SOL) is preparing a consensus upgrade called Alpenglow, which aims to reduce the final transaction confirmation time from the current approximately 12.8 seconds to 150 milliseconds. The upgrade is expected to improve processing speed.
    Forward Industries Reports Q2 Net Loss of $69 Million Due to SOL Price Decline

    Forward Industries Reports Q2 Net Loss of $69 Million Due to SOL Price Decline

    Eco Launches Any-to-Any Token Swap Feature

    Eco Launches Any-to-Any Token Swap Feature

    The stablecoin infrastructure project Eco has introduced a feature that allows for the exchange of tokens across different chains with a single quote call. Initial support includes all EVM chains supported by Eco...
    Wise Integrates 66,000 SOL into Its Own Validator Node

    Wise Integrates 66,000 SOL into Its Own Validator Node

    Japanese listed company Wise has connected approximately 66,000 Solana (SOL) held by SBI VC Trade to its own validator node operations. Maintaining the exchange's custody system while...
    Solana Network Nearly Halts, Losing Approximately 333 SOL Staking Rewards

    Solana Network Nearly Halts, Losing Approximately 333 SOL Staking Rewards

    Solana Records 171.9 Million Non-Voting Transactions in a Day

    Solana Records 171.9 Million Non-Voting Transactions in a Day

    67% of Crypto Card Payments Processed by Optimism, Solana, and Base

    67% of Crypto Card Payments Processed by Optimism, Solana, and Base

    More than two-thirds of the amount paid with crypto cards is settled on the three networks: Optimism (OP), Solana (SOL), and Base.
    Passport Prime Releases KeyOS 1.3.1 with New Mnemonic Last Word Generation Feature

    Passport Prime Releases KeyOS 1.3.1 with New Mnemonic Last Word Generation Feature

    Hugging Face Recovers 17,600 Breach Attacks

    Hugging Face Recovers 17,600 Breach Attacks

    An AI agent from OpenAI involved in an internal cyber assessment accessed the Hugging Face infrastructure outside of a controlled environment. Hugging Face recovered attack activities amounting to about 17,600.
    SOL Spot ETF Sees Net Inflow of $2.82 Million Last Week

    SOL Spot ETF Sees Net Inflow of $2.82 Million Last Week

    Kimi Releases Open Source PerceptionBench, GPT-5.6-Sol Achieves Top Accuracy of 59.7%

    Kimi Releases Open Source PerceptionBench, GPT-5.6-Sol Achieves Top Accuracy of 59.7%

    Claude Opus 5 Tops Vending Machine AI Evaluation, Controversy Arises Over Frequent Collusion Threats

    Claude Opus 5 Tops Vending Machine AI Evaluation, Controversy Arises Over Frequent Collusion Threats

    Running Costs Decrease by 20% After Launch of GPT-5.6

    Running Costs Decrease by 20% After Launch of GPT-5.6

    Kimi Releases Open Source PerceptionBench, GPT-5.6-Sol Achieves Top Accuracy of 59.7%

    Kimi Releases Open Source PerceptionBench, GPT-5.6-Sol Achieves Top Accuracy of 59.7%

    Kimi K3 Scores Close to Fable 5, Costs Rise to 10 Times Previous Generation

    Kimi K3 Scores Close to Fable 5, Costs Rise to 10 Times Previous Generation

    Kimi K3 Ranks 4th, User Confirmation Success Metric First

    Kimi K3 Ranks 4th, User Confirmation Success Metric First

    Suspected FTX/Alameda address transfers 201000 SOL to BitGo Custody

    Suspected FTX/Alameda address transfers 201000 SOL to BitGo Custody

    Over 2 Billion Yen May Have Flowed Out from Early Solana Whales, Awakening After 5 Years

    Over 2 Billion Yen May Have Flowed Out from Early Solana Whales, Awakening After 5 Years

    Codex Users Reach 6 Million as OpenAI Lifts 5-Hour Usage Limit

    Codex Users Reach 6 Million as OpenAI Lifts 5-Hour Usage Limit

    OpenAI CEO Altman Launches GPT-5.6 Sol Creation Challenge

    OpenAI CEO Altman Launches GPT-5.6 Sol Creation Challenge

    SOL Spot ETF Sees Daily Net Inflow of $150,500

    SOL Spot ETF Sees Daily Net Inflow of $150,500

    Solana Whale Suspected of Attack, Approximately 180,900 SOL Transferred

    Solana Whale Suspected of Attack, Approximately 180,900 SOL Transferred

    OpenAI Releases GPT-5.6, Sol Model Leads Claude Fable by 13.1 Points

    OpenAI Releases GPT-5.6, Sol Model Leads Claude Fable by 13.1 Points

    Yakovenko proposes expanding SOL supply for company acquisition

    Yakovenko’s Solana-funded acquisition idea leaves the legal buyer, ownership structure and control of company revenue unresolved.

    Jurassic Finance Advances Dinosaur Fossil Tokenization on Solana

    Scale AI Launches RSI Bench to Test AI's Self-Improvement Capabilities

    Solana activates Agave 4.2, reducing block time to 200 ms and storage costs by 90%

    Solana activates Agave 4.2 this week: blocks at 200 milliseconds, on-chain rent reduced by tenfold, expanded transactions, ahead of Alpenglow in October 2026.

    SOL Spot ETF Sees Net Inflow of $10.26 Million Last Week

    Multicoin Completes Stake Liquidation in Forward Industries

    Multicoin Capital, an early key investor in Forward Industries ($FWDI), has liquidated its stake in the company. Forward is expanding its Solana (SOL) holdings and borrowing, with share buybacks and investments planned.
    ...
    Invite friends, get rewards
    Invite to get up to $160 + 40% commission
    Invite friends, get rewardsInvite

    Contents

    solana

    Latest articles

    08/18/2026

    Solana’s Alpenglow bug hunt charges researchers 0.5 SOL to report flaws

    Anza’s Alpenglow bug bounty burns 0.5 SOL per report; severity unlocks up to 50,000 SOL, with payouts adjudicated and locked for 12 months.
    SOLSOL
    00.00%--
    07/13/2026

    Over 2 Billion Yen May Have Flowed Out from Early Solana Whales, Awakening After 5 Years

    SENTSENT
    00.00%--
    THETHE
    00.00%--
    SOLSOL
    00.00%--
    05/27/2026

    DeFi has reached its most dangerous moment: the real vulnerabilities are not in the code

    April 2026 is not just a security crisis; it is the moment when the industry's mental model completely collapses, and it is also the moment when the protocols that can survive are distinguished from those that cannot.
    05/22/2026

    IOSG Founder: Please tell Vitalik the truth, let the OGs who have enjoyed the industry's dividends enlighten the young people

    The wage earners freeze to death on the road, the sellers of goods die of thirst on the way. The weavers of brocade wear coarse cloth, and the grain growers do not have enough to eat.
    ETHETH
    00.00%--
    BTCBTC
    00.00%--
    SOLSOL
    00.00%--
    05/21/2026

    Morning Report | Deloitte acquires crypto infrastructure company Blocknative; stablecoin company Checker completes $8 million financing; a16z may have become the largest external institutional holder of HYPE

    Overview of Important Market Events on May 20
    ETHETH
    00.00%--
    GASGAS
    00.00%--
    BTCBTC
    00.00%--
    SOLSOL
    00.00%--
    More

    Latest coin listings on WEEX

    logoCommunity
    iconiconiconiconiconiconicon
    Customer Support:@weikecs
    Business Cooperation:@weikecs
    Quant Trading & MM:bd@weex.com
    VIP Program:support@weex.com
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • Customer Support Bot
    • VIP Services
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • Proof of Reserves
    • Invite Friends
    • OTC
    • Download
    • Affiliate
    • VIP Program
    • API
    • Broker
    • Listing Application
    • Affiliate T&C
    • Sitemap
    • Futures
    • Spot
    • Copy Trade
    • Markets
    • WEEX Store
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • Customer Support Bot
    • VIP Services
    • Futures
    • Spot
    • Copy Trade
    • Markets
    • WEEX Store
    • Proof of Reserves
    • Invite Friends
    • OTC
    • Download
    • Affiliate
    • VIP Program
    • API
    • Broker
    • Listing Application
    • Affiliate T&C
    • Sitemap
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE

    Where new wealth is made

    Download app

    Sign Up
    h5 logo
    Download