Optimism bug bounty programs
optimism.io Updated
Optimism runs one public program: an Immunefi bug bounty paying up to $2,000,042.
- Top reward
- $2,000,042
- Immunefi
- Programs
- 1
- 1 pays cash
- Targets in scope
- 34
- 3 types
- Last change
- None yet
- Tracked since Nov 2026
Where to report
The one public program Optimism runs.
| Program | Critical | High | Medium | Low | Top reward | Safe harbor | KYC | First response | Status |
|---|---|---|---|---|---|---|---|---|---|
Optimism
Immunefi · Bug bounty |
$2M | $50k | $15k | – | $2,000,042 | – | Required | 3 days average | Open |
-
- Critical
- $2M
- High
- $50k
- Medium
- $15k
- Low
- –
- KYC
- Required
- First response
- 3 days average
Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.
What is in scope
34 targets.
-
app.optimism.io
Domains
-
blog.oplabs.co
Domains
-
community.optimism.io
Domains
-
console.optimism.io
Domains
-
dapp-console-api.optimism.io
Domains
-
docs.optimism.io
Domains
-
enterprise.optimism.io
Domains
-
gateway.optimism.io
Domains
-
jobs.optimism.io
Domains
-
ope-dashboard-api.optimism.io
Domains
-
specs.optimism.io
Domains
-
www.oplabs.co
Domains
-
www.optimism.io
Domains
-
https://github.com/ethereum-optimism/optimism/tree/develop/op-dispute-mon
Source code
-
https://github.com/ethereum-optimism/optimism/tree/develop/op-node
Source code
-
https://github.com/ethereum-optimism/optimism/tree/develop/rust/op-reth
Source code
-
https://etherscan.io/address/0x0f8EdFbDdD3c0256A80AD8C0F2560B1807873C9c
Smart contracts
-
https://etherscan.io/address/0x18DAc71c228D1C32c99489B7323d441E1175e443
Smart contracts
-
https://etherscan.io/address/0x229047fed2591dbec1eF1118d64F7aF3dB9EB290
Smart contracts
-
https://etherscan.io/address/0x25ace71c97B33Cc4729CF772ae268934F7ab5fA1
Smart contracts
-
https://etherscan.io/address/0x4146DF64D83acB0DcB0c1a4884a16f090165e122
Smart contracts
-
https://etherscan.io/address/0x543bA4AADBAb8f9025686Bd03993043599c6fB04
Smart contracts
-
https://etherscan.io/address/0x5a7749f83b81B301cAb5f48EB8516B986DAef23D
Smart contracts
-
https://etherscan.io/address/0x75505a97BD334E7BD3C476893285569C4136Fa0F
Smart contracts
-
https://etherscan.io/address/0x99C9fc46f92E8a1c0deC1b1747d010903E884bE1
Smart contracts
-
https://etherscan.io/address/0xbEb5Fc579115071764c7423A4f12eDde41f106Ed
Smart contracts
-
https://etherscan.io/address/0xD326E10B8186e90F4E2adc5c13a2d0C137ee8b34
Smart contracts
-
https://etherscan.io/address/0xdE1FCfB0851916CA5101820A69b13a4E276bd81F
Smart contracts
-
https://etherscan.io/address/0xdfe97868233d1aa22e815a266982f2cf17685a27
Smart contracts
-
https://etherscan.io/address/0xe2F826324b2faf99E513D16D266c3F80aE87832B
Smart contracts
-
https://etherscan.io/address/0xE497B094d6DbB3D5E4CaAc9a14696D7572588d14
Smart contracts
-
https://etherscan.io/address/0xe5965Ab5962eDc7477C8520243A95517CD252fA9
Smart contracts
-
https://etherscan.io/address/0xE9daD167EF4DE8812C1abD013Ac9570C616599A0
Smart contracts
-
https://optimistic.etherscan.io/address/0xb5CB7a05DD1311195982A26DFC8222477f9D8179
Smart contracts
No target matches. Try part of a host name, such as the company name.
Recent changes
Reward and scope changes across every Optimism program, newest first.
No changes recorded yet. New targets and reward moves show up here and in the RSS feed.
Recent CVEs
Published vulnerabilities in Optimism products, from the NVD.
-
CVE-2022-24916 High
Optimism before @eth-optimism/[email protected] allows economic griefing because a balance is duplicated upon contract self-destruction.
About this page
This page gathers every public program listed under optimism.io: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.
Something wrong or missing? Report a correction.