LayerZero bug bounty programs
layerzero.network Updated
LayerZero runs one public program: an Immunefi bug bounty paying up to $3,500,000.
- Top reward
- $3,500,000
- Immunefi
- Programs
- 1
- 1 pays cash
- Targets in scope
- 9
- 2 types
- Last change
- 29 Oct 2026
- 2 weeks ago
Where to report
The one public program LayerZero runs.
| Program | Critical | High | Medium | Low | Top reward | Safe harbor | KYC | First response | Status |
|---|---|---|---|---|---|---|---|---|---|
|
LayerZero
Immunefi · Bug bounty |
$3.5M | $250k | $25k | – | $3,500,000 | – | Required | – | Open |
-
- Critical
- $3.5M
- High
- $250k
- Medium
- $25k
- Low
- –
- KYC
- Required
Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.
What is in scope
9 targets.
-
tonscan.org/address/eqaesrvqpywnqv9_1g8czmhmyts7_3j1jsp1nnn0yudbzreh
Domains
-
https://etherscan.io/address/0x1a44076050125825900e736c501f859c50fe728c#code
Smart contracts
-
https://etherscan.io/address/0xbb2ea70c9e858123480642cf96acbcce1372dce1#code
Smart contracts
-
https://etherscan.io/address/0xc02ab410f0734efa3f14628780e6e695156024c2#code
Smart contracts
-
https://explorer.aptoslabs.com/object/0xc33752e0220faf79e45385dd73fb28d681dcd9f1569a1480725507c1f3c3aba9
Smart contracts
-
https://explorer.aptoslabs.com/object/0xe60045e20fc2c99e869c1c34a65b9291c020cd12a0d37a00a53ac1348af4f43c
Smart contracts
-
https://explorer.solana.com/address/6doghB248px58JSSwG4qejQ46kFMW4AMj7vzJnWZHNZn
Smart contracts
-
https://explorer.solana.com/address/76y77prsiCMvXMjuoZ5VRrhG5qYBrUMYTE5WgHqgjEn6
Smart contracts
-
https://explorer.solana.com/address/7a4WjyR8VZ7yZz5XJAKm39BUGn5iT9CKcv2pmG9tdXVH
Smart contracts
No target matches. Try part of a host name, such as the company name.
Recent changes
Reward and scope changes across every LayerZero program, newest first.
-
Cut
Top reward $15,000,000 to $3,500,000.
About this page
This page gathers every public program listed under layerzero.network: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.
Something wrong or missing? Report a correction.