Aera bug bounty programs
aera.finance Updated
Aera runs one public program: an Immunefi bug bounty paying up to $500,000.
- Top reward
- $500,000
- Immunefi
- Programs
- 1
- 1 pays cash
- Targets in scope
- 25
- 1 type
- Last change
- None yet
- Tracked since Nov 2026
Where to report
The one public program Aera runs.
| Program | Critical | High | Medium | Low | Top reward | Safe harbor | KYC | First response | Status |
|---|---|---|---|---|---|---|---|---|---|
Aera
Immunefi · Bug bounty |
$500k | $10k | $2,000 | – | $500,000 | – | Required | – | Open |
-
- Critical
- $500k
- High
- $10k
- Medium
- $2,000
- Low
- –
- KYC
- Required
Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.
What is in scope
25 targets. 5 excluded.
-
https://arbiscan.io/address/0x000000001DC8bd45d7E7829fb1c969cbe4D0D1eC
Smart contracts
-
https://arbiscan.io/address/0x8bFcD1088fFa41B46329567ae5c4Cd872AB38c0f
Smart contracts
-
https://arbiscan.io/address/0xCe7Ea99545A6d0744a52Da9017729451Ec92A62C
Smart contracts
-
https://arbiscan.io/address/0xD61ecfB5cEd67Ef4F01E0dfae591c838BfA33932
Smart contracts
-
https://arbiscan.io/address/0xDd4a42603E6d8E515C3468789375A98c376821b3
Smart contracts
-
https://basescan.org/address/0x000000000001CdB57E58Fa75Fe420a0f4D6640D5
Smart contracts
-
https://basescan.org/address/0x18cf8d963e1a727f9bbf3aeffa0bd04fb4dbda07
Smart contracts
-
https://basescan.org/address/0x69dd4d44eed6bbc33b8a0bdfe17897ab9044372e
Smart contracts
-
https://basescan.org/address/0x6e5430C10fce10e5c6F67dC54506e4564dD7A6E5
Smart contracts
-
https://basescan.org/address/0xdDfd960a7150520548dD1F6E53CC2f201b364692
Smart contracts
-
https://etherscan.io/address/0x00000000d8f3d6c5DFeB2D2b5ED2276095f3aF44
Smart contracts
-
https://etherscan.io/address/0x1703a1B0fee4D507CA8a743f04E168BCd4862d24
Smart contracts
-
https://etherscan.io/address/0x21994912f1D286995c4d4961303cBB8E44939944
Smart contracts
-
https://etherscan.io/address/0x3bd9248048df95Db4fBD748C6CD99C1bAa40bAD0
Smart contracts
-
https://etherscan.io/address/0x74C4A66CE4F4779B11E7c63D42e51EEef3A80D11
Smart contracts
-
https://etherscan.io/address/0x811C6f0eF2E8f8A409306DAE242ba70Bd4f2467D
Smart contracts
-
https://etherscan.io/address/0x8F3FfA11CD5915f0E869192663b905504A2Ef4a5
Smart contracts
-
https://etherscan.io/address/0xD580c26F7bD8A8a66fd32a97Df2308C083b65d9c
Smart contracts
-
https://etherscan.io/address/0xefF0AE5b39271b33f448cD408b51DC8aA72a672b
Smart contracts
-
https://explorer.morphl2.io/address/0x047623636f1c7997F5B49ecaADb865681734D89A
Smart contracts
-
https://explorer.morphl2.io/address/0x85A1D961F1D1bbD9b4A6D96106c5bF9ae91f0510
Smart contracts
-
https://explorer.morphl2.io/address/0x89963FF339C4A6194eA77381c204884e4503F8FB
Smart contracts
-
https://explorer.morphl2.io/address/0xBCB62B29a1B982C51d57A44745b694CAA1ed2Bf2
Smart contracts
-
https://optimistic.etherscan.io/address/0xCC923371F0d3A9cA75d98E767Df9dE1cdf5799Ef
Smart contracts
-
https://optimistic.etherscan.io/address/0xFB6De307b11C50D8B8A0790cd5c82c620D574440
Smart contracts
No target matches. Try part of a host name, such as the company name.
Out of scope 5
Don't test these. A program can exclude a host another program covers; the program you report to decides.
-
Risks associated with an untrusted guardian, accountant or solver
-
Risks associated with faulty oracles or third-party ERC20/ERC4626 asset implementations
-
Risks associated with unsanctioned collusion of different roles (e.g., guardian and owner of asset registry)
-
Risks associated with use of execute by treasury
-
Risks of MEV in executed or submitted transactions
Recent changes
Reward and scope changes across every Aera program, newest first.
No changes recorded yet. New targets and reward moves show up here and in the RSS feed.
About this page
This page gathers every public program listed under aera.finance: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.
Something wrong or missing? Report a correction.