← All docs

How OPCODE Works

  1. Submit. Anyone drops a binary (or requests one via a bounty).
  2. Queue. The submission enters the public queue.
  3. Audit. A pseudonymous auditor reverse engineers it and posts a report with disassembly, findings, and severity.
  4. Peer review. Other auditors vote the report up or down. A report must clear a quorum to be marked verified.
  5. Payout. Verified reports release a bounty/fee payout in $USDC. Reports that fail review pay nothing.

No automated scanners. No vendor self-reports. Real people, real findings, real money.