Skip to content

GMX bug bounty programs

gmx.io Updated

GMX runs one public program: an Immunefi bug bounty paying up to $5,000,000.

Top reward
$5,000,000
Immunefi
Programs
1
1 pays cash
Targets in scope
239
2 types
Last change
None yet
Tracked since Nov 2026

Where to report

The one public program GMX runs.

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

What is in scope

239 targets.

  • app.gmx.io

    Domains

  • gmx.io

    Domains

  • https://arbiscan.io/address/0x01AF26b74409d10e15b102621EDd29c326ba1c55

    Smart contracts

  • https://arbiscan.io/address/0x03e8f708e9C85EDCEaa6AD7Cd06824CeB82A7E68

    Smart contracts

  • https://arbiscan.io/address/0x03f349b3cc4f200d7fae4d8ddaf1507f5a40d356

    Smart contracts

  • https://arbiscan.io/address/0x04a7c49b83FDDb35Df6b142717A1737ACf052f76

    Smart contracts

  • https://arbiscan.io/address/0x0537C767cDAC0726c76Bb89e92904fe28fd02fE1

    Smart contracts

  • https://arbiscan.io/address/0x0628D46b5D145f183AdB6Ef1f2c97eD1C4701C55

    Smart contracts

  • https://arbiscan.io/address/0x0755D33e45eD2B874c9ebF5B279023c8Bd1e5E93

    Smart contracts

  • https://arbiscan.io/address/0x09f77e8a13de9a35a7231028187e9fd5db8a2acb#code

    Smart contracts

  • https://arbiscan.io/address/0x112292FBCdCAd1AbE411a966313Bc7031a516300

    Smart contracts

  • https://arbiscan.io/address/0x113Fc422d9D49b7371b7A164f62b839877DCbb93

    Smart contracts

  • https://arbiscan.io/address/0x1364DeC7e321059A1bD803e2B634b7a8efd5aE75

    Smart contracts

  • https://arbiscan.io/address/0x13E0BbE893B33b64D4f3F96725dd70531fA4EbCe

    Smart contracts

  • https://arbiscan.io/address/0x157E6bd60d71Ad6202448bF85699Fe2695F80B6F

    Smart contracts

  • https://arbiscan.io/address/0x17fA5E5e5BeeB8896e1bE5F663aAE1618F8B35e0

    Smart contracts

  • https://arbiscan.io/address/0x19254A4dFbD855E11cC9DEF57cC7844ff8Fa4088

    Smart contracts

  • https://arbiscan.io/address/0x199070DDfd1CFb69173aa2F7e20906F26B363004

    Smart contracts

  • https://arbiscan.io/address/0x1aDDD80E6039594eE970E5872D247bf0414C8903

    Smart contracts

  • https://arbiscan.io/address/0x1b3d1d98B310fA509Fc0BA387E0310AC6676aB61

    Smart contracts

  • https://arbiscan.io/address/0x1de098faf30bd74f22753c28db17a2560d4f5554

    Smart contracts

  • https://arbiscan.io/address/0x23208b91a98c7c1cd9fe63085bff68311494f193

    Smart contracts

  • https://arbiscan.io/address/0x23aD637ccC648F0D83A74491bDB4cd4C50983911

    Smart contracts

  • https://arbiscan.io/address/0x2A29D3a792000750807cc401806d6fd539928481

    Smart contracts

  • https://arbiscan.io/address/0x2e246061BE08DC56d33E03Dc0cb962C2155722b5

    Smart contracts

No target matches. Try part of a host name, such as the company name.

Recent changes

Reward and scope changes across every GMX program, newest first.

No changes recorded yet. New targets and reward moves show up here and in the RSS feed.

About this page

This page gathers every public program listed under gmx.io: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.

Something wrong or missing? Report a correction.