Skip to content

DAWN bug bounty programs

infrastructure.finance Updated

DAWN runs one public program: an Immunefi bug bounty paying up to $50,000.

Top reward
$50,000
Immunefi
Programs
1
1 pays cash
Targets in scope
14
3 types
Last change
28 Sep 2026
1 month ago

Where to report

The one public program DAWN runs.

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

What is in scope

14 targets. 1 excluded.

  • api.infrastructure.finance

    Domains

  • app.infrastructure.finance

    Domains

  • DAWN vault 4rXteUmbxiXvgLqP14eQwtqkLyVNXVCBHnXyLQ9vZkSh

    Smart contracts

  • Exchange-rate publisher (BNB Chain)

    Smart contracts

  • https://bscscan.com/address/0x8b7eA48F5F528F5bCf256f75623dA98152Ec95f3

    Smart contracts

  • https://solscan.io/account/4rXteUmbxiXvgLqP14eQwtqkLyVNXVCBHnXyLQ9vZkSh

    Smart contracts

  • https://solscan.io/account/EZ8sq2FNnmqQo254irAMGNp7c6B7DPuKh22SyXAwuXSn

    Smart contracts

  • https://solscan.io/token/dawn7ZUF7h7anFuEsDdAU1Y3HYwikwqNMAENZsQJdNL

    Smart contracts

  • Loopscale core program 1oopBoJG58DgkUVKkEzKgyG9dvRmpgeEm1AVjoHkF78

    Smart contracts

  • USD.infra — M0 wrapped-M, Solana Token-2022 with the Pausable extension. Mint dawn7ZUF7h7anFuEsDdAU1Y3HYwikwqNMAENZsQJdNL

    Smart contracts

  • indexer

    Products and areas

  • infrafi-api

    Products and areas

  • infrafi-manager

    Products and areas

  • infrafi-web

    Products and areas

No target matches. Try part of a host name, such as the company name.

Out of scope 1

Don't test these. A program can exclude a host another program covers; the program you report to decides.

  • USDTelExchangeRate (0x15a6f1f2705b3916b5b1d2b19b10f320778744c1, BNB Smart Chain)

Recent changes

Reward and scope changes across every DAWN program, newest first.

All changes · RSS feed

About this page

This page gathers every public program listed under infrastructure.finance: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.

Something wrong or missing? Report a correction.