Skip to main content

​
Scoring System

How competition points are calculated and prize pots are distributed. Cantina competitions use a transparent, points-based scoring model to reward high-impact, high-quality submissions—encouraging depth, originality, and clarity.

​
Prize Pot Distribution

All eligible participants who score points share in a public prize pot.
  • High severity finding: 10 points
  • Medium severity finding: 3 points
  • Low severity findings: May be eligible for a separate prize pool, if specified.

​
Duplicate Submission Scaling

When multiple researchers submit the same bug, each person’s score is scaled down based on the total number of duplicates: Points=Full Points1+0.8×(n−1)\text{Points} = \frac{\text{Full Points}}{1 + 0.8 \times (n - 1)} Where n is the number of duplicate submissions.
  • 2 duplicates: each receives 4.5 points for a high severity finding
  • 3 duplicates: each receives 2.7 points for a high severity finding
This incentivizes originality—being the one to find the bug no one else saw results in a much larger reward.

​
Submission Timing

Submissions are scored equally regardless of when they’re submitted during the competition. However, early, well-written reports are encouraged to allow teams to provide feedback and begin implementing fixes.

​
Withdrawing Findings

You can withdraw a submission at any time using the “withdraw finding” option in the finding menu.

​
Low-Severity, Informational, and Gas Findings

Some competitions include a dedicated prize pool for these types of findings. These awards are based solely on quality, not quantity—and exceptional writeups in this category (or for high/medium findings) may be recognized here as well.