- Scope
- 258
- First response
- –
- Top severity
- Critical
No KYC
Web3 Global Updated
Immunefi is a Web3 bug bounty platform with 155 public programs; 154 (99%) pay cash, with a median top reward of $100k and a highest of $10M.
What matters most when you are new: rewards for small bugs, open access and quick answers.
The usual complaints about bug bounty platforms, and what the data says here.
Triage speed
Median first response is 14 days.
Paid out
$28.71M paid in total by the programs that publish it.
Reward changes
2 reward raises and 9 cuts in the last 90 days.
Low-severity bugs
78 programs list a cash reward for Low. 76 start at Medium or higher.
Identity checks (KYC)
87 require KYC before paying, 67 say they don't; the rest don't say.
Fees and deposits
86 programs charge a fee, deposit or credits per report.
How you are paid
9 pay in fiat money and 145 in crypto (USDC, , USDT, USDC).
Safe harbor
6 state full safe harbor and 8 partial.
Disputes
17 offer arbitration if you disagree with the outcome.
No KYC
No KYC
No KYC
Maximum reward per severity, from USD reward tables.
| Severity | Programs | Median | Top |
|---|---|---|---|
| Critical | 154 | $100k | $10M |
| High | 139 | $15k | $250k |
| Medium | 124 | $3,000 | $50k |
| Low | 78 | $1,000 | $25k |
Search and filter without leaving the page. Filters stay in the link, so you can share a view.
No program matches
Remove a filter above, or try a shorter search.