Skip to main content

Deposits for Bounty Submissions

Overview

When submitting to a bounty that has this feature implemented, researchers must maintain a minimum wallet balance in their Cantina account.
Not all bounties require deposits. Check the bounty home page for deposit requirements (e.g., “Deposit required: $10”).

Why Deposits May Be Required

Bounty programs may require deposits to:
  • Deter low-effort or AI-generated submissions
  • Reduce spam and abuse from repeat offenders
  • Encourage thoughtful, high-quality findings
  • Discourage exaggerated severity classifications

Maintaining Your Balance

Ensure you have sufficient balance before submitting to bounties with deposit requirements. Your balance can be viewed and managed in your account settings.

How to Add Balance

  1. Navigate to cantina.xyz/settings/account-balance
  2. When prompted to submit a deposit, set the deposit amount directly in the UI.
  3. After confirming the amount, you will be redirected to Stripe Checkout.
  4. Complete the payment on Stripe using your preferred supported wallet option.
  5. Once payment is successful, you are redirected back to Cantina and your deposit is recorded automatically.
Stripe is now the default and preferred method for deposits. Deposits completed via Stripe are automatically added to the wallet balance in your Cantina account

Slashing & Refunds

Deposits will only be slashed in specific cases. Regular rejected findings will not lose their deposit.
Submission OutcomeDeposit Status
Valid submissionDeposit refunded
Legitimate invalid submissionDeposit refunded
Spam/low-effort/AI submissionDeposit slashed
Over-inflated severity claimDeposit slashed
Repeat abusive behaviorDeposit slashed & possible account action

Example

If a bounty requires a $100 deposit:
  • You submit a finding and it’s confirmed valid → Your $100 is refunded
  • You submit a finding and it’s rejected as out of scope → Your $100 is refunded
  • You submit a low-effort or AI-generated finding → Your $100 is slashed

Legacy Deposit Addresses (Deprecated)

The previous deposit flow using static deposit addresses is deprecated. New deposit addresses are no longer issued and previously issued deposit addresses no longer work.

UI Behavior During Transition

If the Cantina UI still displays a deposit address, that flow will continue to work only while it is shown. If you see a Stripe redirect instead of a deposit address, you must use Stripe to submit your deposit.

What to Do Going Forward

Always follow the deposit method shown in the UI. If Stripe is presented, do not attempt to send funds to old deposit addresses—those payments will not be recognized.
For support, contact Cantina Support.