- Top reward
- $10,000
- Top severity paid
- Critical
- Assets in scope
- 17
- Public CVEs
- 0
- Last change
At a glance
What to know before you start testing.
- Pays up to $10,000
- for critical bugs, from $1,000.
- Report on Immunefi
- Submit through the program page.
- Payment
- Proof of identity needed to get paid.
Rewards
What Immunefi lists as the payout for each severity.
| Severity | Relative size | Reward |
|---|---|---|
| Critical |
|
$10,000 from $5,000 |
| High |
|
$5,000 from $2,500 |
| Medium |
|
$2,500 from $1,000 |
| Low |
|
$1,000 |
Scope
17 assets you may test.
Domains 12
- api.avax.network No bounty
- api.avax-test.network No bounty
- avax.network No bounty
- backstage.avax-dev.network No bounty
- bridge.avax-test.network No bounty
- core.app No bounty
- explorer.avax.network No bounty
- faucet.avax-test.network No bounty
- notify.avax.network No bounty
- stats.avax.network No bounty
- subnets.avax.network No bounty
- www.avalabs.org No bounty
Source code 2
- https://github.com/ava-labs/AvalancheJS No bounty
- https://github.com/ava-labs/Avalanche-Wallet-SDK No bounty
Android apps 1
- https://play.google.com/store/apps/details?id=com.avaxwallet No bounty
Desktop and binaries 1
- https://chrome.google.com/webstore/detail/core-crypto-wallet-nft-ex/agoakfejjabomempkjlepdflaleeobhb No bounty
iOS apps 1
- https://apps.apple.com/ng/app/core-crypto-wallet-nfts/id6443685999 No bounty
Changes
Tracked since 11 Nov 2026. Last checked 9 minutes ago.
-
Paused
Paused. Not accepting reports right now.
Before we tracked it
Scope and reward changes recorded before this page started tracking it.
-
Reward terms
The reward table or payout terms were edited
-
Status
Program status changed
-
Reward terms
The reward table or payout terms were edited
Public CVEs
Published vulnerabilities in this vendor's products, from the NVD.
No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.