Beanstalk bug bounty programs
bean.money Updated
Beanstalk runs one public program: an Immunefi bug bounty paying up to $1,100,000 (paused).
- Top reward
- Not published
- Programs
- 1
- 1 pays cash
- Targets in scope
- 22
- 2 types
- Last change
- 2 Nov 2026
- 1 week ago
Where to report
The one public program Beanstalk runs.
| Program | Critical | High | Medium | Low | Top reward | Safe harbor | KYC | First response | Status |
|---|---|---|---|---|---|---|---|---|---|
|
Beanstalk
Immunefi · Bug bounty |
$1.1M | $100k | $10k | – | $1,100,000 | – | Not required | 3 days average | Paused |
-
- Critical
- $1.1M
- High
- $100k
- Medium
- $10k
- Low
- –
- KYC
- Not required
- First response
- 3 days average
Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.
What is in scope
22 targets.
-
app.bean.money
Domains No bounty
-
basin.exchange
Domains No bounty
-
https://arbiscan.io/address/0x1BEA054dddBca12889e07B3E076f511Bf1d27543
Smart contracts No bounty
-
https://arbiscan.io/address/0x1BEA059c3Ea15F6C10be1c53d70C75fD1266D788
Smart contracts No bounty
-
https://arbiscan.io/address/0x555555987d98079b9f43CDcDBD52DbB24FfEEef5
Smart contracts No bounty
-
https://arbiscan.io/address/0x5A5A5ADe4C9713172a5228703213d4D39608E2cD
Smart contracts No bounty
-
https://arbiscan.io/address/0xb1bE000644bD25996b0d9C2F7a6D6BA3954c91B0
Smart contracts No bounty
-
https://arbiscan.io/address/0xBA150002660BbCA20675D1C1535Cd76C98A95b13
Smart contracts No bounty
-
https://arbiscan.io/address/0xBA15000450Bf6d48ec50BD6327A9403E401b72b4
Smart contracts No bounty
-
https://arbiscan.io/address/0xba150052e11591D0648b17A0E608511874921CBC
Smart contracts No bounty
-
https://arbiscan.io/address/0xBA51055dAD14d3920e1798D2e8A152d91CaDb461
Smart contracts No bounty
-
https://arbiscan.io/address/0xBA5106bd62b342afAcB93f1078fe60177A62d1a9
Smart contracts No bounty
-
https://arbiscan.io/address/0xBA510995783111be5301d93CCfD5dE4e3B28e50B
Smart contracts No bounty
-
https://arbiscan.io/address/0xBA51AAAa8C2f911AE672e783707Ceb2dA6E97521
Smart contracts No bounty
-
https://arbiscan.io/address/0xBEA0005B8599265D41256905A9B3073D397812E4
Smart contracts No bounty
-
https://arbiscan.io/address/0xCCCCCC35b53c8a16404Ae414AFa31F30A5B35626
Smart contracts No bounty
-
https://arbiscan.io/address/0xD1A0060ba708BC4BCD3DA6C37EFa8deDF015FB70
Smart contracts No bounty
-
https://arbiscan.io/address/0xD6Fc4a63d7E93267c3007eA176081052369A4749
Smart contracts No bounty
-
https://arbiscan.io/address/0xdeb0f082ed3b0efe9257aea9f2e6e974aa4120c3
Smart contracts No bounty
-
https://arbiscan.io/address/0xFEFEFE2cfb089aEF0b0578573eF3CFAbC15f1490
Smart contracts No bounty
-
https://arbiscan.io/address/0xFEFEFECA5375630d6950F40e564A27f6074845B5
Smart contracts No bounty
-
https://etherscan.io/address/0xC1E088fC1323b20BCBee9bd1B9fC9546db5624C5
Smart contracts No bounty
No target matches. Try part of a host name, such as the company name.
Recent changes
Reward and scope changes across every Beanstalk program, newest first.
-
Paused
Paused. Not accepting reports right now.
About this page
This page gathers every public program listed under bean.money: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.
Something wrong or missing? Report a correction.