Is Immunefi a good place to start bug bounty hunting?

78 programs list a cash reward for Low-severity bugs, every program can be read without an account and 4 launched in the last 90 days.

Immunefi bug bounty programs

Web3 Global Updated 1 hour ago

Immunefi is a Web3 bug bounty platform with 155 public programs; 154 (99%) pay cash, with a median top reward of $100k and a highest of $10M.

Visit immunefi.com Browse all 155 programs

Public programs: 155
Pay cash (99%): 154
Median top reward: $100k
Highest reward: $10M
New, 30 / 90 days: 3 / 4
First response: 14 d
Reward changes, 90 d: +2 / −9

Is Immunefi a good place to start?

What matters most when you are new: rewards for small bugs, open access and quick answers.

78 programs list a cash reward for Low-severity bugs.
Every program can be read without an account.
4 launched in the last 90 days.

Pays for Low

What hunters should know

The usual complaints about bug bounty platforms, and what the data says here.

Triage speed

Median first response is 14 days.

Based on 1 program Answer within 3 days
Paid out

$28.71M paid in total by the programs that publish it.

Based on 29 programs
Reward changes

2 reward raises and 9 cuts in the last 90 days.

Based on 155 programs
Low-severity bugs

78 programs list a cash reward for Low. 76 start at Medium or higher.

Based on 154 programs Pays for Low
Identity checks (KYC)

87 require KYC before paying, 67 say they don't; the rest don't say.

Based on 154 programs No KYC
Fees and deposits

86 programs charge a fee, deposit or credits per report.

Based on 155 programs No fee
How you are paid

9 pay in fiat money and 145 in crypto (USDC, , USDT, USDC).

Based on 154 programs Fiat only
Safe harbor

6 state full safe harbor and 8 partial.

Based on 14 programs Full safe harbor
Disputes

17 offer arbitration if you disagree with the outcome.

Based on 154 programs

Highest-paying programs

See all

Sky

sky.money

$10M
from $1,000

Scope

258

First response

–

Top severity

Critical

No KYC
USDT0

$6M
from $5,000

Scope

32

First response

–

Top severity

Critical
GMX

gmx.io

$5M
from $1,000

Scope

239

First response

–

Top severity

Critical

No KYC
Spark

$5M
from $1,000

Scope

276

First response

–

Top severity

Critical

No KYC
LayerZero

layerzero.network

$3.5M
from $25k

Scope

9

First response

–

Top severity

Critical
Stargate

stargate.finance

$3.5M
from $500

Scope

4

First response

–

Top severity

Critical

Rewards by severity

Maximum reward per severity, from USD reward tables.

Severity	Programs	Median	Top
Critical	154	$100k	$10M
High	139	$15k	$250k
Medium	124	$3,000	$50k
Low	78	$1,000	$25k

What you can test

5,052 in-scope targets across all programs.

Smart contract 3,148
Source code 1,690
Domain 177
Other 22
Android 6
iOS 6
Binary 3

Newest programs

Metric Launched 10 Nov 2026
$500k
Audit Competition | Plether Launched 2 Nov 2026
$80k
Paxos Labs Launched 20 Oct 2026
$500k
SP1 Launched 21 Sep 2026
$15k
Leather Launched 30 Jul 2026
$5,000
Horizen Launched 15 Jul 2026
$10k

Recent changes

View all

Unstoppable Wallet 1w ago

Paused Immunefi

Paused. Not accepting reports right now.
Origin Protocol 1w ago

Scope + Immunefi

Added to scope: https://basescan.org/address/0x0F12256E27E658790C404C087C38ab4f34D53360
Origin Protocol 1w ago

Scope + Immunefi

Added to scope: https://etherscan.io/address/0xa03360b3f6d902F1b3334c0adBd5C6995d3513fe
Origin Protocol 1w ago

Scope + Immunefi

Added to scope: https://etherscan.io/address/0x03578bC4b5fB0cC0cA7A6AD05b06407ae6324a82
Beanstalk 1w ago

Paused Immunefi

Paused. Not accepting reports right now.
Mt Pelerin 1w ago

Cut Immunefi

Top reward $5,000 to $3,500.
Stargate 2w ago

Cut Immunefi

Top reward $10,000,000 to $3,500,000.
LayerZero 2w ago

Cut Immunefi

Top reward $15,000,000 to $3,500,000.

All 155 programs on Immunefi

Search and filter without leaving the page. Filters stay in the link, so you can share a view.

Sort

Filters

69 programs match · Highest reward

Programs, highest reward first
Program	Top severity	Scope	First response	Top reward
USDT0	Critical	32	–	$6,000,000 from $5,000
Olympus olympusdao.finance	Critical	70	–	$3,333,333
Gnosis Chain gnosis.io	Critical	7	–	$2,000,000 from $1,000
Lido lido.fi	Critical	29	–	$2,000,000 from $500
Rhino.fi rhino.fi	Critical	9	–	$2,000,000 from $1,000
AAVE aave.com	Critical	105	–	$1,000,000 from $1,000
Immutable immutable.com	Critical	7	–	$1,000,000 from $1,000
Lista DAO	Critical	57	–	$1,000,000 from $1,000
PancakeSwap pancakeswap.finance	Critical	6	–	$1,000,000
Flux Finance	Critical	9	–	$550,000 from $1,000
Aera aera.finance	Critical	25	–	$500,000 from $2,000
BENQI benqi.fi	Critical	38	–	$500,000 from $5,000
DeXe Protocol dexe.network	Critical	10	–	$500,000 from $1,000
Maple maple.finance New scope	Critical	40	–	$500,000 from $10k
mETH Protocol	Critical	10	–	$500,000 from $5,000
Orca orca.so	Critical	2	–	$500,000 from $10k
Sei sei.io	Critical	3	–	$500,000 from $1,000
Utix	Critical	1	–	$500,000
Aevo aevo.xyz	Critical	3	–	$300,000 from $1,000
Avail availproject.org	Critical	2	–	$250,000 from $1,000
Kelp DAO kelpdao.xyz	Critical	11	–	$250,000 from $1,000
Marinade	Critical	1	–	$250,000
Polygon polygon.technology	Critical	11	–	$250,000 from $2,000
Aster asterdex.com	Critical	11	–	$200,000 from $1,000
Beets	Critical	3	–	$200,000 from $5,000
Celer celer.network	Critical	15	–	$200,000 from $3,000
deBridge	Critical	20	–	$200,000 from $5,000
SushiSwap	Critical	3	–	$200,000 from $1,000
Arkadiko arkadiko.finance	Critical	13	–	$100,000 from $1,000
Boba Network boba.network	Critical	6	–	$100,000 from $1,000
FBTC fbtc.com	Critical	12	–	$100,000 from $1,000
Hermetica hermetica.fi	Critical	12	–	$100,000 from $1,000
Silo Finance (v2 & v3) silo.finance	Critical	28	–	$100,000 from $1,000
Symbiosis	Critical	4	–	$100,000
Synthetix synthetix.io	Critical	7	–	$100,000 from $1,000
Katana katana.network	Critical	20	–	$80,000 from $1,000
Xterio xter.io	Critical	2	–	$80,000 from $1,000
Beefy Finance beefy.finance	Critical	241	–	$75,000 from $500
Velvet Capital	Critical	30	–	$51,000 from $1,000
dHEDGE dhedge.org	Critical	6	–	$50,000 from $1,000
Gamma gammastrategies.org	Critical	3	–	$50,000 from $5,000
Hashflow	Critical	4	–	$50,000 from $1,000
Ichi	Critical	5	–	$50,000 from $1,000
Immunefi	Critical	6	–	$50,000 from $1,000
JustLend DAO justlend.org	Critical	55	–	$50,000
Kleidi kleidi.io	Critical	6	–	$50,000 from $5,000
Obyte obyte.org	Critical	11	–	$50,000 from $1,000
Twyne twyne.xyz	Critical	16	–	$50,000 from $3,000
GammaSwap	Critical	27	–	$40,000 from $15k
Ante Finance	Critical	7	–	$25,000 from $500

USDT0

$6M
from $5,000

Scope

32

First response

–

Top severity

Critical
Olympus

olympusdao.finance

$3.33M

Scope

70

First response

–

Top severity

Critical

No KYC
Gnosis Chain

gnosis.io

$2M
from $1,000

Scope

7

First response

–

Top severity

Critical

No KYC
Lido

lido.fi

$2M
from $500

Scope

29

First response

–

Top severity

Critical

No KYC
Rhino.fi

rhino.fi

$2M
from $1,000

Scope

9

First response

–

Top severity

Critical

No KYC
AAVE

aave.com

$1M
from $1,000

Scope

105

First response

–

Top severity

Critical
Immutable

immutable.com

$1M
from $1,000

Scope

7

First response

–

Top severity

Critical
Lista DAO

$1M
from $1,000

Scope

57

First response

–

Top severity

Critical

No KYC
PancakeSwap

pancakeswap.finance

$1M

Scope

6

First response

–

Top severity

Critical

No KYC
Flux Finance

$550k
from $1,000

Scope

9

First response

–

Top severity

Critical

No KYC
Aera

aera.finance

$500k
from $2,000

Scope

25

First response

–

Top severity

Critical
BENQI

benqi.fi

$500k
from $5,000

Scope

38

First response

–

Top severity

Critical

No KYC
DeXe Protocol

dexe.network

$500k
from $1,000

Scope

10

First response

–

Top severity

Critical
Maple

maple.finance

$500k
from $10k

Scope

40

First response

–

Top severity

Critical

New scope
mETH Protocol

$500k
from $5,000

Scope

10

First response

–

Top severity

Critical

No KYC
Orca

orca.so

$500k
from $10k

Scope

2

First response

–

Top severity

Critical

No KYC
Sei

sei.io

$500k
from $1,000

Scope

3

First response

–

Top severity

Critical
Utix

$500k

Scope

1

First response

–

Top severity

Critical

No KYC
Aevo

aevo.xyz

$300k
from $1,000

Scope

3

First response

–

Top severity

Critical

No KYC
Avail

availproject.org

$250k
from $1,000

Scope

2

First response

–

Top severity

Critical
Kelp DAO

kelpdao.xyz

$250k
from $1,000

Scope

11

First response

–

Top severity

Critical
Marinade

$250k

Scope

1

First response

–

Top severity

Critical

No KYC
Polygon

polygon.technology

$250k
from $2,000

Scope

11

First response

–

Top severity

Critical
Aster

asterdex.com

$200k
from $1,000

Scope

11

First response

–

Top severity

Critical

No KYC
Beets

$200k
from $5,000

Scope

3

First response

–

Top severity

Critical

No KYC
Celer

celer.network

$200k
from $3,000

Scope

15

First response

–

Top severity

Critical
deBridge

$200k
from $5,000

Scope

20

First response

–

Top severity

Critical

No KYC
SushiSwap

$200k
from $1,000

Scope

3

First response

–

Top severity

Critical

No KYC
Arkadiko

arkadiko.finance

$100k
from $1,000

Scope

13

First response

–

Top severity

Critical

No KYC
Boba Network

boba.network

$100k
from $1,000

Scope

6

First response

–

Top severity

Critical
FBTC

fbtc.com

$100k
from $1,000

Scope

12

First response

–

Top severity

Critical
Hermetica

hermetica.fi

$100k
from $1,000

Scope

12

First response

–

Top severity

Critical

No KYC
Silo Finance (v2 & v3)

silo.finance

$100k
from $1,000

Scope

28

First response

–

Top severity

Critical
Symbiosis

$100k

Scope

4

First response

–

Top severity

Critical

No KYC
Synthetix

synthetix.io

$100k
from $1,000

Scope

7

First response

–

Top severity

Critical

No KYC
Katana

katana.network

$80k
from $1,000

Scope

20

First response

–

Top severity

Critical
Xterio

xter.io

$80k
from $1,000

Scope

2

First response

–

Top severity

Critical
Beefy Finance

beefy.finance

$75k
from $500

Scope

241

First response

–

Top severity

Critical

No KYC
Velvet Capital

$51k
from $1,000

Scope

30

First response

–

Top severity

Critical

No KYC
dHEDGE

dhedge.org

$50k
from $1,000

Scope

6

First response

–

Top severity

Critical

No KYC
Gamma

gammastrategies.org

$50k
from $5,000

Scope

3

First response

–

Top severity

Critical

No KYC
Hashflow

$50k
from $1,000

Scope

4

First response

–

Top severity

Critical

No KYC
Ichi

$50k
from $1,000

Scope

5

First response

–

Top severity

Critical

No KYC
Immunefi

$50k
from $1,000

Scope

6

First response

–

Top severity

Critical

Safe harbor
JustLend DAO

justlend.org

$50k

Scope

55

First response

–

Top severity

Critical

No KYC
Kleidi

kleidi.io

$50k
from $5,000

Scope

6

First response

–

Top severity

Critical
Obyte

obyte.org

$50k
from $1,000

Scope

11

First response

–

Top severity

Critical

No KYC
Twyne

twyne.xyz

$50k
from $3,000

Scope

16

First response

–

Top severity

Critical

No KYC
GammaSwap

$40k
from $15k

Scope

27

First response

–

Top severity

Critical

No KYC
Ante Finance

$25k
from $500

Scope

7

First response

–

Top severity

Critical