Firedancer Bug Bounty Adds 1 SOL Fee to Curb Spam

Firedancer's team now requires researchers to burn 1 SOL (about $100) per bug report to curb AI-assisted spam, following a $1 million audit that drew 809 submissions.

The team behind Firedancer, Jump Crypto's alternative validator client for Solana, has introduced a nonrefundable 1 SOL fee — roughly $100 — for every report submitted to its Firedancer bug bounty program. The change, which took effect Monday, is designed to filter out low-effort and AI-generated submissions that have been overwhelming engineers and slowing down reviews of genuine security flaws.

What happened with the Firedancer bug bounty

Jump Crypto built Firedancer as an alternative to Agave, the main software used by Solana validator computers. Between April 9 and May 9, the team ran a $1 million audit competition that received 809 reports from 162 researchers. Those submissions produced 127 unique security findings, excluding non-exploitable observations, but nearly half of all valid reports turned out to be duplicates.

The backlog became a serious operational problem. Open reports peaked at 299, and about 80% of duplicate submissions arrived more than three days after the original report. As reviews slowed, other researchers sometimes rediscovered bugs that had already been submitted but not yet fixed or disclosed. Jump believes AI agents helped discover or write nearly every submission, making it cheap to generate reports but expensive to evaluate them.

The new rules are strict. The 1 SOL fee is nonrefundable even for invalid, out-of-scope or duplicate reports, and any submission sent without the burn is ineligible for rewards. Each main report section is now limited to 3,000 characters. Under the earlier competition format, researchers paid $100 per submission and were limited to one report per day — the new platform keeps the economic barrier but removes the daily cap.

Why the Firedancer bug bounty fee matters

For Solana holders and traders, the health of validator software is a structural issue, not a sideshow. Firedancer is meant to give Solana a second independent client, reducing reliance on Agave. Serious flaws in either client could halt transaction processing or cause validators to disagree about account balances. The audit competition itself uncovered a scheduling error that could make Firedancer execute transactions in the wrong order and disagree with other validators — exactly the kind of bug that justifies a rigorous review pipeline.

The fee changes the incentives for security researchers. Ishan Bhatt of Jump framed the problem directly: finding bugs has become inexpensive because of AI, but evaluating them remains costly. By making submissions costly, Jump hopes to discourage speculative findings that divert engineers from investigating and fixing real vulnerabilities. Some submissions flagged apparent weaknesses while missing protections elsewhere in the software, which wastes review time.

There is a counterargument worth weighing. A $100 nonrefundable fee could deter legitimate independent researchers, especially those who are unsure whether a finding is in scope. Jump is trying to offset that with higher payouts: eligible findings receive twice the standard payout through Nov. 20, or three times for Alpenglow-specific bugs. Alpenglow is described as Solana's new voting system, and critical Alpenglow findings can qualify for up to $300,000.

Market reaction

SOL is trading at $99.26, down 2.08% over the past 24 hours, with 24-hour volume of $2,330,694,502 and a market cap of $58,549,833,600. The move is modest and consistent with broader market conditions; there is no indication in the available data that the bug bounty change is driving price action. Traders should treat the announcement as a software-security development rather than a short-term catalyst.

What to watch next

Submission volume after the fee: A sharp drop in reports would suggest the filter is working; a persistent backlog would raise questions about whether 1 SOL is enough.
Quality of findings: The key metric is unique, valid vulnerabilities per week, not raw report counts.
Alpenglow disclosures: With triple payouts and up to $300,000 for critical Alpenglow bugs, any confirmed findings in Solana's new voting system will be closely watched.
Researcher participation: Watch whether independent researchers keep submitting or whether the fee narrows the pool to well-funded firms.

The Nov. 20 deadline for enhanced payouts is the next clear checkpoint. If valid submissions rise while duplicates fall, Jump will have evidence that pricing out spam can coexist with serious security work. If legitimate reports dry up, the team may need to adjust the fee or add refunds for clearly valid findings.

FAQ

What is the Firedancer bug bounty fee?

It is a nonrefundable burn of 1 SOL, worth about $100, required for every bug report submitted to Firedancer's program. Reports sent without the burn are ineligible for rewards, and the fee is not returned even if the report is invalid, out of scope or a duplicate.

Why did Firedancer add a 1 SOL fee?

Jump Crypto says AI tools have made it cheap to generate bug reports but expensive to evaluate them. During the $1 million audit competition, 809 reports from 162 researchers produced 127 unique findings, with nearly half of valid submissions being duplicates and the backlog peaking at 299 open reports. The fee is meant to discourage speculative submissions and free engineers to investigate genuine flaws.

How does the fee affect legitimate security researchers?

Legitimate researchers now pay about $100 per submission, which raises the cost of reporting. To offset that, eligible findings earn twice the standard payout through Nov. 20, or three times for Alpenglow-specific bugs, with critical Alpenglow findings qualifying for up to $300,000. The trade-off is that researchers must be more confident before submitting.

Market snapshot

Prices at the time of writing (Oct 27, 2026 10:25 UTC).

Solana (SOL): $99.26 — 24h -2.08%

Trade SOL now →

Firedancer Bug Bounty Now Charges 1 SOL Per Report