Skip to content

Origin Protocol bug bounty programs

originprotocol.com Updated

Origin Protocol runs one public program: an Immunefi bug bounty paying up to $1,000,000.

Top reward
$1,000,000
Immunefi
Programs
1
1 pays cash
Targets in scope
57
2 types
Last change
3 Nov 2026
1 week ago

Where to report

The one public program Origin Protocol runs.

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

What is in scope

57 targets.

  • app.originprotocol.com

    Domains

  • https://arbiscan.io/address/0xD8724322f44E5c58D7A815F542036fb17DbbF839

    Smart contracts

  • https://basescan.org/address/0x0CbEAcf86232fC04050cD679d860516F7254c22E

    Smart contracts

  • https://basescan.org/address/0x3b56c09543D3068f8488ED34e6F383c3854d2bC1

    Smart contracts

  • https://basescan.org/address/0x7FcD174E80f264448ebeE8c88a7C4476AAF58Ea6

    Smart contracts

  • https://basescan.org/address/0x80c864704DD06C3693ed5179190786EE38ACf835

    Smart contracts

  • https://basescan.org/address/0x98a0CbeF61bD2D21435f433bE4CD42B56B38CC93

    Smart contracts

  • https://basescan.org/address/0x9cfcAF81600155e01c63e4D2993A8A81A8205829

    Smart contracts

  • https://basescan.org/address/0xa03360b3f6d902F1b3334c0adBd5C6995d3513fe

    Smart contracts

  • https://basescan.org/address/0xDBFeFD2e8460a6Ee4955A68582F85708BAEA60A3

    Smart contracts

  • https://basescan.org/address/0xF611cC500eEE7E4e4763A05FE623E2363c86d2Af

    Smart contracts

  • https://basescan.org/address/0xf817cb3092179083c48c014688D98B72fB61464f

    Smart contracts

  • https://etherscan.io/address/0x01F30B7358Ba51f637d1aa05D9b4A60f76DAD680

    Smart contracts

  • https://etherscan.io/address/0x03578bC4b5fB0cC0cA7A6AD05b06407ae6324a82

    Smart contracts

  • https://etherscan.io/address/0x0C9ac6D63B2b2A1b502E29eC47a53d0966Ea9465

    Smart contracts

  • https://etherscan.io/address/0x0DC20109Ea012f050BeDA184844c1eD5ec6dA33A

    Smart contracts

  • https://etherscan.io/address/0x0F12256E27E658790C404C087C38ab4f34D53360

    Smart contracts

  • https://etherscan.io/address/0x19B1Edb2caD902F103a20A30011f125DCe44F954

    Smart contracts

  • https://etherscan.io/address/0x1b84E64279D63f48DdD88B9B2A7871e817152A44

    Smart contracts

  • https://etherscan.io/address/0x1D3Fbd4d129Ddd2372EA85c5Fa00b2682081c9EC

    Smart contracts

  • https://etherscan.io/address/0x25e1d468B14005716111d5e8464573e5135275f4

    Smart contracts

  • https://etherscan.io/address/0x26a02ec47ACC2A3442b757F45E0A82B8e993Ce11

    Smart contracts

  • https://etherscan.io/address/0x2A8e1E676Ec238d8A992307B495b45B3fEAa5e86

    Smart contracts

  • https://etherscan.io/address/0x35918cDE7233F2dD33fA41ae3Cb6aE0e42E0e69F

    Smart contracts

  • https://etherscan.io/address/0x3643cafA6eF3dd7Fcc2ADaD1cabf708075AFFf6e

    Smart contracts

No target matches. Try part of a host name, such as the company name.

Recent changes

Reward and scope changes across every Origin Protocol program, newest first.

All changes · RSS feed

Recent CVEs

Published vulnerabilities in Origin Protocol products, from the NVD.

Search NVD
  • Origin Protocol is a blockchain based project. The Origin Protocol project website allows for malicious users to inject malicious Javascript via a POST request to `/presale/join`. User-controlled data is passed with no sanitization to SendGrid and injected into an email that is delivered to the [email protected]. If the email recipient is using an email program that is susceptible to XSS

About this page

This page gathers every public program listed under originprotocol.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.

Something wrong or missing? Report a correction.