OhShii Labs Confirms Bug Bounty Launch Is Near

OhShii Labs says it has sold all of the cycles involved in its latest programme and has committed half of the ICP revenue from those sales to a Bug Bounty reward pool.

The lab said the final size of the pool has not yet been determined, but confirmed that it will be worth at least 1,500 ckUSDC. It said further details, including the official launch date, will be announced shortly.

According to OhShii Labs, part of the cycles it purchased and later resold was funded through a 300 ICP contribution from PassionPlanet1, who made two contributions during April.

The lab said the contribution followed an informal external security review in which it identified several vulnerabilities affecting one of PassionPlanet1’s platforms. OhShii Labs said it reported the issues and assisted with their resolution before PassionPlanet1 voluntarily contributed to the Bug Bounty programme.

OhShii Labs described the contribution as support for the initiative and thanked PassionPlanet1 for backing the project.

The proposed Bug Bounty is intended to provide rewards for researchers who identify and responsibly report vulnerabilities. Such programmes are commonly used in software development to encourage independent security testing and give project teams an additional way to identify weaknesses before they can be exploited.

OhShii Labs has not yet published the full rules for its programme, including eligibility requirements, reward criteria, submission procedures or the way individual payouts will be determined. Those details are expected when the Bug Bounty officially launches.

For now, the lab has confirmed the minimum size of the reward pool and said the programme will launch soon. The final amount available to researchers will depend on the completed calculation of revenue from the cycle sales.


Dear Reader,

Ledger Life is an independent platform dedicated to covering the Internet Computer (ICP) ecosystem and beyond. We focus on real stories, builder updates, project launches, and the quiet innovations that often get missed.

We’re not backed by sponsors. We rely on readers like you.

If you find value in what we publish—whether it’s deep dives into dApps, explainers on decentralised tech, or just keeping track of what’s moving in Web3—please consider making a donation. It helps us cover costs, stay consistent, and remain truly independent.

Your support goes a long way.

🧠 ICP Principal: ins6i-d53ug-zxmgh-qvum3-r3pvl-ufcvu-bdyon-ovzdy-d26k3-lgq2v-3qe

🧾 ICP Address: f8deb966878f8b83204b251d5d799e0345ea72b8e62e8cf9da8d8830e1b3b05f

Every contribution helps keep the lights on, the stories flowing, and the crypto clutter out.

Thank you for reading, sharing, and being part of this experiment in decentralised media.
—Team Ledger Life

0

Community Discussion

Loading discussion…

LEAVE A REPLY

Please enter your comment!
Please enter your name here

More like this

DOM Protocol launches Domify with 50,000 live radio stations...

DOM Protocol has added Domify, a live radio streaming feature that gives users access to thousands of...

Canic team explores Motoko support for large-scale ICP applications

The team behind Toko and Dragginz is exploring whether Motoko applications could eventually be managed through Canic...

Liquidium adds Internet Identity login with Google, Apple ID...

Liquidium has introduced Internet Identity login, allowing users to access their accounts through familiar sign-in methods including...