IM
Immunefi bug bounty programs
Web3
Global Updated
Immunefi is a Web3 bug bounty platform with 155 public programs; 154 (99%) pay cash, with a median top reward of $100k and a highest of $10M.
- Public programs
- 155
- Pay cash (99%)
- 154
- Median top reward
- $100k
- Highest reward
- $10M
- New, 30 / 90 days
- 3 / 4
- First response
- 14 d
- Reward changes, 90 d
- +2 / −9
Is Immunefi a good place to start?
What matters most when you are new: rewards for small bugs, open access and quick answers.
-
78 programs list a cash reward for Low-severity bugs.
-
Every program can be read without an account.
-
4 launched in the last 90 days.
What hunters should know
The usual complaints about bug bounty platforms, and what the data says here.
-
Triage speed
Median first response is 14 days.
-
Paid out
$28.71M paid in total by the programs that publish it.
Based on 29 programs
-
Reward changes
2 reward raises and 9 cuts in the last 90 days.
Based on 155 programs
-
Low-severity bugs
78 programs list a cash reward for Low. 76 start at Medium or higher.
Based on 154 programs
Pays for Low
-
Identity checks (KYC)
87 require KYC before paying, 67 say they don't; the rest don't say.
Based on 154 programs
No KYC
-
Fees and deposits
86 programs charge a fee, deposit or credits per report.
Based on 155 programs
No fee
-
How you are paid
9 pay in fiat money and 145 in crypto (USDC, , USDT, USDC).
Based on 154 programs
Fiat only
-
Safe harbor
6 state full safe harbor and 8 partial.
Based on 14 programs
Full safe harbor
-
Disputes
17 offer arbitration if you disagree with the outcome.
Based on 154 programs
-
SK
- Scope
- 258
- First response
- –
- Top severity
-
Critical
No KYC
-
US
- Scope
- 32
- First response
- –
- Top severity
-
Critical
-
GM
- Scope
- 239
- First response
- –
- Top severity
-
Critical
No KYC
-
SP
- Scope
- 276
- First response
- –
- Top severity
-
Critical
No KYC
-
LA
- Scope
- 9
- First response
- –
- Top severity
-
Critical
-
ST
- Scope
- 4
- First response
- –
- Top severity
-
Critical
Rewards by severity
Maximum reward per severity, from USD reward tables.
| Severity |
Programs |
Median |
Top |
| Critical
|
154 |
$100k |
$10M |
| High
|
139 |
$15k |
$250k |
| Medium
|
124 |
$3,000 |
$50k |
| Low
|
78 |
$1,000 |
$25k |