Documentation
Docs
Short answers. No fluff.
Platform
What is Descrimen?
A platform where researchers find bugs in web3 projects and get paid for valid reports. Programs run bug bounties. Researchers submit findings. Programs validate and pay out on-chain.
How much does it cost?
Entry is completely free. Triage by our Agentic AI is free. You only pay a 4% fee when a real finding is confirmed. No upfront cost, no monthly fee, no listing fee. Terms.
What is the Agentic AI triage?
Every submission runs through an AI agent that checks severity, scope, and validity of the proof of concept. It cuts junk reports and saves your team time. Free for both sides.
What chains are supported?
EVM chains first: Ethereum, Arbitrum, Optimism, Base, Polygon, BSC. Solana and Move chains are on the roadmap.
For researchers
How do I join as a researcher?
Sign up on the login page, connect a wallet, pick a bug bounty, submit your finding.
Do I need KYC?
Yes for personal cashout. KYC is required when you want to withdraw your earnings to a personal bank account or personal wallet above $1,000 cumulative per year. KYC policy.
Can I cash out without KYC?
Yes, by donating your earnings to a registered charity. The charity donation path is no-KYC. You pick from a list of vetted charities. Funds go directly. No personal payout to you.
How are payouts handled?
On-chain to your wallet after the program validates your report. The program releases the funds. Descrimen does not hold funds. The 4% fee is deducted at payout.
Where are reports stored?
Encrypted. Only you and the program can read them until the bug is patched or disclosed. Read the privacy policy.
What are the rules?
Read the bug bounty policy and the acceptable use policy. Short version: only test in scope, do not exploit before payout, do not sell findings, no multi-accounting.
For programs
How do I launch a bug bounty?
Submit your scope and bounty pool through the contact page. We review manually. We reply within 48 hours. No automated onboarding.
What happens after approval?
You get an account. You sign in to the program dashboard. You can configure your bounty, edit scope, triage submissions, message researchers, and trigger payouts.
How does triage work?
Every submission runs through our Agentic AI first. It checks severity, scope, and PoC validity. It cuts obvious junk. You see only what passes the filter. You make the final call.
How do I pay a researcher?
You validate the finding. You set the reward based on your severity table. You trigger the on-chain payout from your dashboard. The 4% fee is deducted from the reward.
Can I pause my bounty?
Yes. From your dashboard, click pause. New submissions stop immediately. Existing submissions stay open. You can resume anytime.
Legal
Where are the legal documents?
How do I contact you?
Use the contact page. We reply to program applications within 48 hours. For everything else, security@descrimen.xyz (link active once the platform is live).