Skip to main content
Cortex Bounty is the Cortex Bounty Challenge, a bug bounty for miners on the Cortex subnet. You pair a mining hotkey to a Cortex account, look for a real defect in Cortex inside a marked conversation, file a report, and wait for a verdict. Every verdict that is reached is published on a log that anyone can read without signing in and without a credential. Cortex plays three parts in the programme: it records your pairing and the session context, it adjudicates the reports that are filed, and it publishes the public transparency log. It does not set weights and it does not compute a score. The subnet reads the public endpoints and sets weights from the valid rows it finds there.

​
The four pages of this section

Pair a hotkey

Accept the terms, sign the payload the CLI prints, and link an SS58 hotkey to your mining account.

File a report

Mark a conversation as a miner session, file from Chat, and see what the report carries.

Verdicts and scoring

The four statuses, the gates a row has to clear, and what can never become a valid row.

Transparency API

The unauthenticated public endpoints, windows and paging, and how to read a zero.

​
Before you start

Use a dedicated mining Cortex account, not your private personal account. The programme terms are explicit about why: “Conversations, logs, and the account may be read for research, to fix bugs, and to remunerate you.”
Accepting the terms is blocking. Until the terms are accepted, pairing is refused and so is marking a conversation as a miner session. The version in force is bounty-research-v1, and what is stored with your acceptance is your account id, that version, and a timestamp.

​
How it flows end to end

1

Create a dedicated mining account

Sign in to Cortex with an account you keep for mining. See Accounts and sign-in.
2

Accept the terms and pair a hotkey

Install the Cortex CLI and run the pairing command. The CLI prints an exact string, you sign it with your own wallet tool, and the hotkey is linked. Full procedure on Pair a hotkey.
3

Mark a conversation as a miner session

Pairing prints a command to send in Chat, plus a one-time session code. Sending that command marks the conversation as a bounty-miner session and injects miner context.
4

Find a defect and file a report

Describe what you found in the marked conversation, then file it with the Chat report tool. See File a report.
5

Wait for a verdict

A filed report is pending and private. It is not on the public endpoints, and fetching it by id answers as though it did not exist, until a verdict exists.
6

Read the verdict on the public log

Once a verdict is recorded, the row becomes public. Anyone can read it, count it and verify it with the Transparency API.

​
What a machine decides and what a person decides

Two different kinds of decision sit in this programme, and it is worth knowing which is which before you file. The mechanical gates are described in full on Verdicts and scoring. They are the usual reason a report you consider valid has not appeared on the public log.

​
What this section does not tell you

This documentation covers the mechanics: pairing, filing, verdicts, and the public log. It does not state what a reward is worth, when a verdict will arrive, or who is eligible to take part. Those belong to the programme’s own terms, the ones you accept at pairing, and they can depend on the case. Do not read an amount or a schedule into the three outcomes described on the scoring page.

​
How it fits with the other Cortex products

Cortex Bounty is a programme rather than an application you open, so it borrows the surfaces of two products you already have.
  • The Cortex CLI does the pairing. It is the only place the pairing command runs, and the only place the string you have to sign is printed.
  • Cortex Chat is where a report is filed, from a conversation that has been marked as a miner session. The report tool is not offered in an ordinary conversation.
  • The Transparency API stands on its own. It needs no account, so a third party can check a payout claim without your help.
If you have found a defect but are not a miner on the subnet, this is not your intake. Use Report a bug instead.
Not part of this programme, and not a Cortex feature: /miner is not a command and never will be, there is no attestation surface here, and there is no teacher host. The subnet runs its own pipeline beyond the public log, and nothing in it is documented on this site.