Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

hemi

BugcrowdView on Bugcrowd
RawAI Enhanced
23
In Scope
2
Out of Scope
In-Scope Assets (23)
AssetCategoryBountyQuick Links
*.hemi.networkURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
*.hemi.xyzURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
Third Party Provider VulnerabilityOTHERNo-
https://*.vetro.orgOTHERNo-
https://api.vetro.orgURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://app.hemi.xyz/URLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://beta.vetro.orgURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://bitcoin-kit.hemi.xyz/URLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://explorer.hemi.xyz/URLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://github.com/hemilabsOTHERNo-
https://github.com/hemilabs/heminetworkOTHERNo-
https://github.com/hemilabs/op-gethOTHERNo-
https://github.com/hemilabs/optimismOTHERNo-
https://github.com/hemilabs/ui-monorepoOTHERNo-
https://github.com/vetro-protocolOTHERNo-
https://hemi.xyz/URLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://rpc.hemi.network/noderpcURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://rpc.hemi.network/rpcURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://rpc.hemi.network/wsrpcURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://testnet.rpc.hemi.network/noderpcURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://testnet.rpc.hemi.network/rpcURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://testnet.rpc.hemi.network/wsrpcURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://vetro.orgURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
Out-of-Scope Assets (2)
AssetCategoryBounty
Any Atlassian Product/ServiceOTHERNo
https://news.hemi.xyz/URLNo
Scope Changes (202)
Aug 12, 2026
ChangeAssetCategoryScopeTime
Addedhttps://github.com/hemilabs/ui-monorepoURLIn Scope12:59
Addedhttps://github.com/hemilabs/optimismOTHERIn Scope12:59
Addedhttps://github.com/hemilabs/op-gethOTHERIn Scope12:59
Addedhttps://github.com/hemilabsOTHERIn Scope12:59
Added*.hemi.xyzURLIn Scope12:59
Added*.hemi.networkURLIn Scope12:59
Addedhttps://vetro.orgURLIn Scope12:59
Addedhttps://beta.vetro.orgURLIn Scope12:59
Addedhttps://api.vetro.orgURLIn Scope12:59
Added*.vetro.orgOTHERIn Scope12:59
Addedhttps://github.com/vetro-protocolOTHERIn Scope12:59
Addedthird party provider vulnerabilityOTHERIn Scope12:59
Addedhttps://news.hemi.xyz/URLOut of Scope12:59
Addedany atlassian product/serviceOTHEROut of Scope12:59
Addedhttps://github.com/hemilabs/ui-monorepoOTHERIn Scope12:59
Addedhttps://vetro.orgURLIn Scope12:59
Addedthird party provider vulnerabilityOTHERIn Scope12:59
Addedhttps://rpc.hemi.network/noderpcURLIn Scope12:59
Addedhttps://app.hemi.xyz/URLIn Scope12:59
Addedhttps://bitcoin-kit.hemi.xyz/URLIn Scope12:59
Addedhttps://github.com/hemilabs/heminetworkURLIn Scope12:59
Addedhttps://github.com/hemilabs/optimismURLIn Scope12:59
Addedhttps://github.com/hemilabsURLIn Scope12:59
Added*.hemi.networkWILDCARDIn Scope12:59
Addedhttps://beta.vetro.orgURLIn Scope12:59
Addedhttps://testnet.rpc.hemi.network/wsrpcURLIn Scope12:59
Addedhttps://hemi.xyz/URLIn Scope12:59
Addedhttps://github.com/hemilabs/op-gethURLIn Scope12:59
Addedhttps://rpc.hemi.network/rpcURLIn Scope12:59
Addedhttps://api.vetro.orgURLIn Scope12:59
Addedany atlassian product/serviceOTHEROut of Scope12:59
Addedhttps://rpc.hemi.network/wsrpcURLIn Scope12:59
Addedhttps://rpc.hemi.network/noderpcURLIn Scope12:59
Addedhttps://testnet.rpc.hemi.network/rpcURLIn Scope12:59
Addedhttps://testnet.rpc.hemi.network/wsrpcURLIn Scope12:59
Addedhttps://testnet.rpc.hemi.network/noderpcURLIn Scope12:59
Addedhttps://app.hemi.xyz/URLIn Scope12:59
Addedhttps://explorer.hemi.xyz/URLIn Scope12:59
Addedhttps://bitcoin-kit.hemi.xyz/URLIn Scope12:59
Addedhttps://hemi.xyz/URLIn Scope12:59
Addedhttps://github.com/hemilabs/heminetworkOTHERIn Scope12:59
Added*.vetro.orgWILDCARDIn Scope12:59
Addedhttps://github.com/vetro-protocolURLIn Scope12:59
Addedhttps://news.hemi.xyz/URLOut of Scope12:59
Addedhttps://rpc.hemi.network/rpcURLIn Scope12:59
Addedhttps://rpc.hemi.network/wsrpcURLIn Scope12:59
Addedhttps://testnet.rpc.hemi.network/rpcURLIn Scope12:59
Addedhttps://testnet.rpc.hemi.network/noderpcURLIn Scope12:59
Addedhttps://explorer.hemi.xyz/URLIn Scope12:59
Added*.hemi.xyzWILDCARDIn Scope12:59
Jun 26, 2026
ChangeAssetCategoryScopeTime
Program Removed———06:34
Jun 23, 2026
ChangeAssetCategoryScopeTime
Addedhttps://beta.vetro.orgURLIn Scope17:40
Addedhttps://api.vetro.orgURLIn Scope17:40
Added*.vetro.orgOTHERIn Scope17:40
Addedhttps://github.com/vetro-protocolOTHERIn Scope17:40
Addedhttps://vetro.orgURLIn Scope17:40
Addedhttps://api.vetro.orgURLIn Scope17:40
Added*.vetro.orgWILDCARDIn Scope17:40
Addedhttps://github.com/vetro-protocolURLIn Scope17:40
Addedhttps://vetro.orgURLIn Scope17:40
Addedhttps://beta.vetro.orgURLIn Scope17:40
Jun 17, 2026
ChangeAssetCategoryScopeTime
Addedhttps://rpc.hemi.network/rpcURLIn Scope11:38
Addedhttps://rpc.hemi.network/rpcURLIn Scope11:38
Addedhttps://rpc.hemi.network/wsrpcURLIn Scope11:38
Addedhttps://rpc.hemi.network/noderpcURLIn Scope11:38
Addedhttps://testnet.rpc.hemi.network/rpcURLIn Scope11:38
Addedhttps://testnet.rpc.hemi.network/wsrpcURLIn Scope11:38
Addedhttps://testnet.rpc.hemi.network/noderpcURLIn Scope11:38
Addedhttps://app.hemi.xyz/URLIn Scope11:38
Addedhttps://explorer.hemi.xyz/URLIn Scope11:38
Addedhttps://bitcoin-kit.hemi.xyz/URLIn Scope11:38
Addedhttps://hemi.xyz/URLIn Scope11:38
Addedhttps://github.com/hemilabs/heminetworkOTHERIn Scope11:38
Addedhttps://github.com/hemilabs/ui-monorepoOTHERIn Scope11:38
Addedhttps://github.com/hemilabs/optimismOTHERIn Scope11:38
Addedhttps://github.com/hemilabs/op-gethOTHERIn Scope11:38
Addedhttps://github.com/hemilabsOTHERIn Scope11:38
Added*.hemi.xyzURLIn Scope11:38
Added*.hemi.networkURLIn Scope11:38
Addedthird party provider vulnerabilityOTHERIn Scope11:38
Addedhttps://news.hemi.xyz/URLOut of Scope11:38
Addedany atlassian product/serviceOTHEROut of Scope11:38
Addedhttps://github.com/hemilabs/heminetworkURLIn Scope11:38
Addedhttps://github.com/hemilabs/op-gethURLIn Scope11:38
Addedhttps://rpc.hemi.network/wsrpcURLIn Scope11:38
Addedhttps://app.hemi.xyz/URLIn Scope11:38
Addedhttps://github.com/hemilabs/ui-monorepoURLIn Scope11:38
Addedany atlassian product/serviceOTHEROut of Scope11:38
Addedhttps://testnet.rpc.hemi.network/rpcURLIn Scope11:38
Addedhttps://testnet.rpc.hemi.network/wsrpcURLIn Scope11:38
Added*.hemi.xyzWILDCARDIn Scope11:38
Added*.hemi.networkWILDCARDIn Scope11:38
Addedthird party provider vulnerabilityOTHERIn Scope11:38
Addedhttps://rpc.hemi.network/noderpcURLIn Scope11:38
Addedhttps://testnet.rpc.hemi.network/noderpcURLIn Scope11:38
Addedhttps://explorer.hemi.xyz/URLIn Scope11:38
Addedhttps://bitcoin-kit.hemi.xyz/URLIn Scope11:38
Addedhttps://github.com/hemilabs/optimismURLIn Scope11:38
Addedhttps://github.com/hemilabsURLIn Scope11:38
Addedhttps://news.hemi.xyz/URLOut of Scope11:38
Addedhttps://hemi.xyz/URLIn Scope11:38
Program Removed———10:34
Mar 5, 2026
ChangeAssetCategoryScopeTime
Addedhttps://github.com/hemilabs/op-gethURLIn Scope22:36
Addedhttps://rpc.hemi.network/rpcURLIn Scope22:36
Addedhttps://rpc.hemi.network/wsrpcURLIn Scope22:36
Addedhttps://rpc.hemi.network/noderpcURLIn Scope22:36
Addedhttps://testnet.rpc.hemi.network/rpcURLIn Scope22:36
Addedhttps://testnet.rpc.hemi.network/wsrpcURLIn Scope22:36
Addedhttps://testnet.rpc.hemi.network/noderpcURLIn Scope22:36
Addedhttps://app.hemi.xyz/URLIn Scope22:36
Addedhttps://explorer.hemi.xyz/URLIn Scope22:36
Addedhttps://bitcoin-kit.hemi.xyz/URLIn Scope22:36
Addedhttps://hemi.xyz/URLIn Scope22:36
Addedhttps://github.com/hemilabs/heminetworkOTHERIn Scope22:36
Addedhttps://github.com/hemilabs/ui-monorepoOTHERIn Scope22:36
Addedhttps://github.com/hemilabs/optimismOTHERIn Scope22:36
Addedhttps://github.com/hemilabs/op-gethOTHERIn Scope22:36
Addedhttps://github.com/hemilabsOTHERIn Scope22:36
Added*.hemi.xyzURLIn Scope22:36
Added*.hemi.networkURLIn Scope22:36
Addedthird party provider vulnerabilityOTHERIn Scope22:36
Addedhttps://news.hemi.xyz/URLOut of Scope22:36
Addedany atlassian product/serviceOTHEROut of Scope22:36
Addedhttps://rpc.hemi.network/rpcURLIn Scope22:36
Addedhttps://testnet.rpc.hemi.network/noderpcURLIn Scope22:36
Addedhttps://app.hemi.xyz/URLIn Scope22:36
Addedhttps://news.hemi.xyz/URLOut of Scope22:36
Addedhttps://testnet.rpc.hemi.network/wsrpcURLIn Scope22:36
Addedhttps://bitcoin-kit.hemi.xyz/URLIn Scope22:36
Addedhttps://hemi.xyz/URLIn Scope22:36
Addedhttps://github.com/hemilabs/ui-monorepoURLIn Scope22:36
Addedhttps://github.com/hemilabs/optimismURLIn Scope22:36
Added*.hemi.xyzWILDCARDIn Scope22:36
Addedany atlassian product/serviceOTHEROut of Scope22:36
Addedhttps://rpc.hemi.network/noderpcURLIn Scope22:36
Addedhttps://explorer.hemi.xyz/URLIn Scope22:36
Addedhttps://github.com/hemilabs/heminetworkURLIn Scope22:36
Addedhttps://github.com/hemilabsURLIn Scope22:36
Added*.hemi.networkWILDCARDIn Scope22:36
Addedthird party provider vulnerabilityOTHERIn Scope22:36
Addedhttps://rpc.hemi.network/wsrpcURLIn Scope22:36
Addedhttps://testnet.rpc.hemi.network/rpcURLIn Scope22:36
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedhttps://testnet.rpc.hemi.network/noderpcURLIn Scope19:18
Addedhttps://hemi.xyz/URLIn Scope19:18
Added*.hemi.xyzWILDCARDIn Scope19:18
Addedthird party provider vulnerabilityOTHERIn Scope19:18
Addedhttps://github.com/hemilabs/optimismURLIn Scope19:18
Addedhttps://app.hemi.xyz/URLIn Scope19:18
Addedhttps://bitcoin-kit.hemi.xyz/URLIn Scope19:18
Addedhttps://github.com/hemilabs/ui-monorepoURLIn Scope19:18
Addedhttps://github.com/hemilabsURLIn Scope19:18
Addedhttps://news.hemi.xyz/URLOut of Scope19:18
Addedhttps://github.com/hemilabs/op-gethURLIn Scope19:18
Addedhttps://rpc.hemi.network/wsrpcURLIn Scope19:18
Addedhttps://rpc.hemi.network/noderpcURLIn Scope19:18
Addedhttps://testnet.rpc.hemi.network/rpcURLIn Scope19:18
Addedhttps://explorer.hemi.xyz/URLIn Scope19:18
Addedhttps://github.com/hemilabs/heminetworkURLIn Scope19:18
Added*.hemi.networkWILDCARDIn Scope19:18
Addedany atlassian product/serviceOTHEROut of Scope19:18
Addedhttps://rpc.hemi.network/rpcURLIn Scope19:18
Addedhttps://testnet.rpc.hemi.network/wsrpcURLIn Scope19:18
Addedhttps://rpc.hemi.network/rpcURLIn Scope17:17
Addedhttps://rpc.hemi.network/wsrpcURLIn Scope17:17
Addedhttps://rpc.hemi.network/noderpcURLIn Scope17:17
Addedhttps://testnet.rpc.hemi.network/rpcURLIn Scope17:17
Addedhttps://testnet.rpc.hemi.network/wsrpcURLIn Scope17:17
Addedhttps://testnet.rpc.hemi.network/noderpcURLIn Scope17:17
Addedhttps://app.hemi.xyz/URLIn Scope17:17
Addedhttps://explorer.hemi.xyz/URLIn Scope17:17
Addedhttps://bitcoin-kit.hemi.xyz/URLIn Scope17:17
Addedhttps://hemi.xyz/URLIn Scope17:17
Addedhttps://github.com/hemilabs/heminetworkOTHERIn Scope17:17
Addedhttps://github.com/hemilabs/ui-monorepoOTHERIn Scope17:17
Addedhttps://github.com/hemilabs/optimismOTHERIn Scope17:17
Addedhttps://github.com/hemilabs/op-gethOTHERIn Scope17:17
Addedhttps://github.com/hemilabsOTHERIn Scope17:17
Added*.hemi.xyzURLIn Scope17:17
Added*.hemi.networkURLIn Scope17:17
Addedthird party provider vulnerabilityOTHERIn Scope17:17
Addedhttps://news.hemi.xyz/URLOut of Scope17:17
Addedany atlassian product/serviceOTHEROut of Scope17:17
Addedhttps://rpc.hemi.network/wsrpcURLIn Scope17:17
Addedhttps://testnet.rpc.hemi.network/rpcURLIn Scope17:17
Addedhttps://testnet.rpc.hemi.network/wsrpcURLIn Scope17:17
Addedhttps://bitcoin-kit.hemi.xyz/URLIn Scope17:17
Added*.hemi.xyzWILDCARDIn Scope17:17
Addedthird party provider vulnerabilityOTHERIn Scope17:17
Addedany atlassian product/serviceOTHEROut of Scope17:17
Addedhttps://hemi.xyz/URLIn Scope17:17
Addedhttps://github.com/hemilabs/op-gethURLIn Scope17:17
Added*.hemi.networkWILDCARDIn Scope17:17
Addedhttps://github.com/hemilabs/optimismURLIn Scope17:17
Addedhttps://testnet.rpc.hemi.network/noderpcURLIn Scope17:17
Addedhttps://app.hemi.xyz/URLIn Scope17:17
Addedhttps://explorer.hemi.xyz/URLIn Scope17:17
Addedhttps://github.com/hemilabs/heminetworkURLIn Scope17:17
Addedhttps://news.hemi.xyz/URLOut of Scope17:17
Addedhttps://rpc.hemi.network/rpcURLIn Scope17:17
Addedhttps://rpc.hemi.network/noderpcURLIn Scope17:17
Addedhttps://github.com/hemilabs/ui-monorepoURLIn Scope17:17
Addedhttps://github.com/hemilabsURLIn Scope17:17