Skip to content
web3grant

Web3 bounties vs grants: how they differ

Updated 7 min readBy the web3grant editors

Web3 bounties vs grants comes down to who defines the work. A bounty pays a fixed amount for a task someone else has specified, usually after you deliver it. A grant funds work you propose and scope yourself, often paid in milestones. Bug bounties are a separate market that pays for finding security flaws. Bounties are quicker to start; grants fund larger, longer work.

Key takeaways

  • A bounty is task-first: the funder writes the spec and the price. A grant is proposal-first: you write the plan, budget and milestones, and a reviewer decides.
  • Tether Grants and Bounties is the clearest task-based program in web3grant's directory: at launch Tether said payouts range from roughly $1,500 to $4,000 per task, paid in USDT or bitcoin for completed work.
  • On Polkadot and Kusama, a "bounty" is an on-chain pot of treasury funds run by curators, closer to a small grants program; Kusama Vision Bounties draw on a 10M DOT pool from Web3 Foundation.
  • Polkadot Fast-Grants, a treasury bounty paying up to $10,000 in DOT per application, closed its intake on November 3, 2025 and had not restarted when we checked on October 2, 2026.
  • Bug bounties pay for vulnerabilities you find and disclose under a protocol's own rules; they are not funding for your project.

What is the difference between a bounty and a grant?

A bounty pays for a result that is already defined; a grant pays for a plan you define. That one difference drives everything else: how you apply, when you are paid and how much is at stake.

BountyGrantBug bounty
Who defines the workThe funderYou, in a proposalYou find the flaw
How you get itClaim or apply for a posted taskApply and pass reviewReport a vulnerability
When you are paidOn deliveryUp front, in milestones or after reviewAfter the report is confirmed
Typical sizeHundreds to a few thousand dollarsMedian published ceiling of $50,000Set by each program
Best forNew contributors, quick paid workProjects that run for monthsSecurity researchers

The grant figure is from web3grant's directory: as of October 31, 2026, the median published maximum across the 50 programs that publish one is $50,000. Bounty sizes vary more, but the examples below cluster in the low thousands.

Where do bounties appear in Web3 grant programs?

Most bounties in web3grant's directory sit inside programs that also make grants. Four show the range.

  • Tether Grants and Bounties ties most of its funding to tasks with a fixed payout and deadline, posted on Tether's bounty board, for its open stack: QVAC local AI, the WDK wallet kit, MDK and Pears. You can also propose your own grant through a form. When we checked on October 1, 2026, one task was listed: 5,000 USDT for Apple Neural Engine support in llama.cpp and QVAC. Tether may not tell you if it rejects your application.
  • Rocket Pool GMC grants pays three kinds of award: grants for work you propose and do yourself, bounties for open goals anyone can complete, and retrospective awards for work already done. Funds are tight; Round 41 declined every application.
  • Nym Squad League splits work into missions, which anyone can do without applying, and grants, which need a proposal on the Nym forum.
  • Shutter DAO Impact Pilot lets bountied work qualify for a grant covering scope beyond the bounty, as long as you disclose the bounty.

Outside the directory, Zama's Developer Program runs seasons of prize-based tracks for apps built on its encryption protocol, with prizes from 500 to 5,000 cUSDT. Its Season 4 bounty closed on September 5, 2026. We left it out of the directory because it is a prize competition, not a grant.

What does "bounty" mean on Polkadot and Kusama?

On Polkadot and Kusama, a bounty is a governance tool, not a single task. Token holders vote to set aside treasury funds for a purpose, and named curators then decide how to spend them, often by approving smaller grants. For an applicant, it works much like a grants program with its own reviewers.

  • Kusama Vision Bounties are three on-chain bounties set up by referenda in May 2026: Zero Knowledge Proofs, Proof of Personhood, and Art and Social Experiments. They draw on a shared pool of 10M DOT committed by Web3 Foundation. Curators review applications, and payments go out in DOT on Kusama Asset Hub in installments agreed per project. The art bounty typically funds up to $10,000 per project.
  • Polkadot Fast-Grants was a treasury bounty offering up to $10,000 in DOT per application. It closed its intake on November 3, 2025; the curators said they would finish existing reviews and milestones, then decide whether to continue. What happened to Polkadot Fast-Grants has the details.
  • The Polkadot Open Source Developer Grants bounty (OpenGov bounty #59) offered up to $30,000 in DOT and is closed. Its final report, published March 20, 2026, says 59 proposals were submitted, 10 approved for $248,000 and 8 completed, with $220,500 paid in total.

You can still ask the Polkadot OpenGov Treasury directly, by on-chain referendum. Among the things it funds are security work and bug bounties. See Polkadot grants for the full list in that ecosystem.

How are bug bounties different from grants?

A bug bounty pays you for finding and responsibly disclosing a vulnerability in a protocol's code, under that protocol's published scope and rules. You don't apply in advance, and the reward is usually tied to how severe the bug is. It is payment for a security finding, not funding for a project.

Grant programs touch bug bounties from the other side: they pay projects to set them up. Gravity Developer Grants lists security and bug bounty programs among what it funds, the Polkadot treasury funds bug bounties, and the firms on Ava Labs' audit whitelist include bug bounty setup among their services. If you need money for a security review of your own code, the route is an audit subsidy, covered in smart contract audit subsidies, or one of the Web3 security and audit grants.

When should you choose a bounty or a grant?

Choose a bounty when you have skills but no project, or when you are new to an ecosystem and need a track record. Choose a grant when you have your own idea, the work will take months, or you need money before you can start.

Your situationBetter fit
No track record in the ecosystemBounty
A few spare weeks, want paid work nowBounty
Your own project with a roadmapGrant
Need funding before deliveryGrant
Months of full-time work, or a teamGrant
You found a vulnerabilityBug bounty

Bounties have costs too. Some pay only the first or best submission, so work can go unpaid. Payouts are small, and they rarely cover maintenance after delivery. A grant takes longer to win but can fund the follow-through.

How do you move from bounties to grants?

Bounties are a practical way to build the record that grant reviewers look for. Several programs in web3grant's directory spell out what that record should contain.

  1. Stay in one ecosystem. Reviewers fund people they have seen deliver. Rocket Pool's committee says it favors applicants who engaged with the community before applying.
  2. Do real contributions. Btrust's Starter Grant asks for at least one merged, non-trivial code PR (not a "good first issue") and meaningful reviews. Brink says evidence of open-source contributions matters far more than formal education.
  3. Keep the work public. Link every bounty you complete from one profile or repository, with what it does and who uses it.
  4. Ask for a small grant first. Programs with small tiers, such as Mina's Exploration Grants of $1,000 to $5,000, are a natural next step. Small Web3 grants lists more.
  5. Build on your bounty work. Shutter's rules show the pattern: disclose the bounty and propose the scope beyond it.

When you are ready, how to apply for Web3 grants covers the application itself. Hackathon prizes are a third route with their own trade-offs, compared in Web3 hackathons vs grants.

FAQ

Are Web3 bounties paid in crypto?

Most Web3 bounties are paid in crypto. Tether pays its task-based grants in USDT or bitcoin, Zama's developer prizes are paid in cUSDT, and Kusama Vision Bounties pay in DOT on Kusama Asset Hub. Rocket Pool pays awards in RPL with some payments in USDC. Check the currency before you start, because a token payout can lose value before you convert it.

Do you need KYC to claim a Web3 bounty?

Many Web3 bounties require identity checks before payment. Tether requires KYC and anti-money-laundering checks where needed, and you must be 18 or older. Kusama Vision Bounties require a Kusama Asset Hub address with a verified identity on the Kusama People chain. Requirements differ by program, so read the terms before you invest time in a task.

Is a bounty taxed like a grant?

A bounty and a grant can both count as taxable income, and a bounty paid for delivered work can look more like payment for services than a gift. How it is treated depends on your country and how you receive it. Keep records of each payment and its value on the day received, and check with a tax professional.

Can you get paid later for work you already did?

You can get paid for finished work through retroactive programs. Rocket Pool's committee makes retrospective awards for Rocket Pool work already done, Shutter's Round 2 pays retroactive grants, and Algorand xGov funds only open-source tools that are already built and in use. Each judges finished work against its own criteria, so read them before you submit.

Programs in this guide

Where each one stands today, soonest deadline first.

Browse all grant programsGet deadline alerts