Origin Protocol bug bounty programs
originprotocol.com Updated
Origin Protocol runs one public program: an Immunefi bug bounty paying up to $1,000,000.
- Top reward
- $1,000,000
- Immunefi
- Programs
- 1
- 1 pays cash
- Targets in scope
- 57
- 2 types
- Last change
- 3 Nov 2026
- 1 week ago
Where to report
The one public program Origin Protocol runs.
| Program | Critical | High | Medium | Low | Top reward | Safe harbor | KYC | First response | Status |
|---|---|---|---|---|---|---|---|---|---|
|
Origin Protocol
Immunefi · Bug bounty |
$1M | $15k | – | – | $1,000,000 | Full | Not required | 7 hours average | Open |
-
- Critical
- $1M
- High
- $15k
- Medium
- –
- Low
- –
- Safe harbor
- Full
- KYC
- Not required
- First response
- 7 hours average
Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.
What is in scope
57 targets.
-
app.originprotocol.com
Domains
-
https://arbiscan.io/address/0xD8724322f44E5c58D7A815F542036fb17DbbF839
Smart contracts
-
https://basescan.org/address/0x0CbEAcf86232fC04050cD679d860516F7254c22E
Smart contracts
-
https://basescan.org/address/0x3b56c09543D3068f8488ED34e6F383c3854d2bC1
Smart contracts
-
https://basescan.org/address/0x7FcD174E80f264448ebeE8c88a7C4476AAF58Ea6
Smart contracts
-
https://basescan.org/address/0x80c864704DD06C3693ed5179190786EE38ACf835
Smart contracts
-
https://basescan.org/address/0x98a0CbeF61bD2D21435f433bE4CD42B56B38CC93
Smart contracts
-
https://basescan.org/address/0x9cfcAF81600155e01c63e4D2993A8A81A8205829
Smart contracts
-
https://basescan.org/address/0xa03360b3f6d902F1b3334c0adBd5C6995d3513fe
Smart contracts
-
https://basescan.org/address/0xDBFeFD2e8460a6Ee4955A68582F85708BAEA60A3
Smart contracts
-
https://basescan.org/address/0xF611cC500eEE7E4e4763A05FE623E2363c86d2Af
Smart contracts
-
https://basescan.org/address/0xf817cb3092179083c48c014688D98B72fB61464f
Smart contracts
-
https://etherscan.io/address/0x01F30B7358Ba51f637d1aa05D9b4A60f76DAD680
Smart contracts
-
https://etherscan.io/address/0x03578bC4b5fB0cC0cA7A6AD05b06407ae6324a82
Smart contracts
-
https://etherscan.io/address/0x0C9ac6D63B2b2A1b502E29eC47a53d0966Ea9465
Smart contracts
-
https://etherscan.io/address/0x0DC20109Ea012f050BeDA184844c1eD5ec6dA33A
Smart contracts
-
https://etherscan.io/address/0x0F12256E27E658790C404C087C38ab4f34D53360
Smart contracts
-
https://etherscan.io/address/0x19B1Edb2caD902F103a20A30011f125DCe44F954
Smart contracts
-
https://etherscan.io/address/0x1b84E64279D63f48DdD88B9B2A7871e817152A44
Smart contracts
-
https://etherscan.io/address/0x1D3Fbd4d129Ddd2372EA85c5Fa00b2682081c9EC
Smart contracts
-
https://etherscan.io/address/0x25e1d468B14005716111d5e8464573e5135275f4
Smart contracts
-
https://etherscan.io/address/0x26a02ec47ACC2A3442b757F45E0A82B8e993Ce11
Smart contracts
-
https://etherscan.io/address/0x2A8e1E676Ec238d8A992307B495b45B3fEAa5e86
Smart contracts
-
https://etherscan.io/address/0x35918cDE7233F2dD33fA41ae3Cb6aE0e42E0e69F
Smart contracts
-
https://etherscan.io/address/0x3643cafA6eF3dd7Fcc2ADaD1cabf708075AFFf6e
Smart contracts
-
https://etherscan.io/address/0x39254033945AA2E4809Cc2977E7087BEE48bd7Ab
Smart contracts
-
https://etherscan.io/address/0x438731b5Ee8fEcC02a28532713E237b93260C3F8
Smart contracts
-
https://etherscan.io/address/0x43f35Fa72dcf93DaD9843Ab7B0E0587bF57d9643
Smart contracts
-
https://etherscan.io/address/0x63898b3b6Ef3d39332082178656E9862bee45C57
Smart contracts
-
https://etherscan.io/address/0x68025A4615407993A680102b08a23A61D11C657C
Smart contracts
-
https://etherscan.io/address/0x7b0a90552D2dc01936301A45bFC813717Af7E8a9
Smart contracts
-
https://etherscan.io/address/0x856c4Efb76C1D1AE02e20CEB03A2A6a08b0b8dC3
Smart contracts
-
https://etherscan.io/address/0x85B78AcA6Deae198fBF201c82DAF6Ca21942acc6
Smart contracts
-
https://etherscan.io/address/0x90d588fc0eC3DB9c4b417dB4537fE08e063D2ae5
Smart contracts
-
https://etherscan.io/address/0x9E3A7026E5767F2d7Ff5e83b0ed011005f45a170
Smart contracts
-
https://etherscan.io/address/0xAb98aC901B8A26636d9cf3Cf38d9aCdcD045788f
Smart contracts
-
https://etherscan.io/address/0xad2b1657E2c3243750B32Cb9A51169575945b05B
Smart contracts
-
https://etherscan.io/address/0xB1b9cf49B16DECc1634AEa0675C3b976FfE2B4F4
Smart contracts
-
https://etherscan.io/address/0xB1d624fc40824683e2bFBEfd19eB208DbBE00866
Smart contracts
-
https://etherscan.io/address/0xb7992eFDa9aBBaC3522336A626191D198fa37145
Smart contracts
-
https://etherscan.io/address/0xB7CeFE4CB483Be80C2963D3D9Edb991e69ff39cf
Smart contracts
-
https://etherscan.io/address/0xba0e352AB5c13861C26e4E773e7a833C3A223FE6
Smart contracts
-
https://etherscan.io/address/0xc4444C5D9e7C1a5A0a01c5E4b11692d589DcAF22
Smart contracts
-
https://etherscan.io/address/0xCEDa2d856238aA0D12f6329de20B9115f07C366d
Smart contracts
-
https://etherscan.io/address/0xD2af830E8CBdFed6CC11Bab697bB25496ed6FA62
Smart contracts
-
https://etherscan.io/address/0xD400341aEfED0BC75176714cFdE82e8BDAA2D3b8
Smart contracts
-
https://etherscan.io/address/0xD5F61bFd890169c28858039f6b6c9b517407C852
Smart contracts
-
https://etherscan.io/address/0xDA0485c1E74A7ef690E99D8286C243942eDAa07B
Smart contracts
-
https://etherscan.io/address/0xDcEe70654261AF21C44c093C300eD3Bb97b78192
Smart contracts
-
https://etherscan.io/address/0xE0228DB13F8C4Eb00fD1e08e076b09eF5cD0EA1e
Smart contracts
-
https://etherscan.io/address/0xE11EDbd5AE4Fa434Af7f8D7F03Da1742996e7Ab2
Smart contracts
-
https://etherscan.io/address/0xe192824f42ae3D643ac867774b45E8d233d86c72
Smart contracts
-
https://etherscan.io/address/0xE28ca056A12134b6B872D1CbE04cd1A82fDfeA95
Smart contracts
-
https://etherscan.io/address/0xE620aFB67223AE03C260112aE21A717Af94C90f0
Smart contracts
-
https://etherscan.io/address/0xE75D77B1865Ae93c7eaa3040B038D7aA7BC02F70
Smart contracts
-
https://etherscan.io/address/0xFa205c9a110a3e82Bd8d223CccCB15C5b9E6434e
Smart contracts
-
https://hyperevmscan.io/address/0x77121911A387c9e4Eae46345E0f831A6da8a1364
Smart contracts
No target matches. Try part of a host name, such as the company name.
Recent changes
Reward and scope changes across every Origin Protocol program, newest first.
-
Scope +
Added to scope: https://etherscan.io/address/0x03578bC4b5fB0cC0cA7A6AD05b06407ae6324a82
-
Scope +
Added to scope: https://basescan.org/address/0x0F12256E27E658790C404C087C38ab4f34D53360
-
Scope +
Added to scope: https://etherscan.io/address/0xa03360b3f6d902F1b3334c0adBd5C6995d3513fe
Recent CVEs
Published vulnerabilities in Origin Protocol products, from the NVD.
-
CVE-2022-24864 Medium
Origin Protocol is a blockchain based project. The Origin Protocol project website allows for malicious users to inject malicious Javascript via a POST request to `/presale/join`. User-controlled data is passed with no sanitization to SendGrid and injected into an email that is delivered to the [email protected]. If the email recipient is using an email program that is susceptible to XSS
About this page
This page gathers every public program listed under originprotocol.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.
Something wrong or missing? Report a correction.