Skip to content
bugbounty.fyi
Get paid to secure open source 475 paid open-source programs on Sorona, up to $1M Perk Low bugs: $100 or 1 mo Claude Max

Also on Patchstack. All 476 paid open-source programs

Try

Highest paying Newly launched Paid without KYC Full safe harbor
All results

About this site

Ava Labs Avalanche

Bug bounty on Immunefi

Paused KYC to get paid L1 Services web3
Go to program
Top reward
$100,000
Top severity paid
Critical
Assets in scope
28
Public CVEs
0
Last change

At a glance

What to know before you start testing.

Pays up to $100,000
for critical bugs, from $1,000.
Report on Immunefi
Submit through the program page.
Payment
Proof of identity needed to get paid.

Rewards

What Immunefi lists as the payout for each severity.

Severity Reward
Critical Blockchain $100,000 10% of funds at risk · from $10,000
Critical Contract $100,000 10% of funds at risk · from $10,000
High Blockchain $10,000 from $5,000
High Contract $10,000 from $5,000
Medium Blockchain $5,000
Medium Contract $5,000
Low Blockchain $1,000

Scope

28 assets you may test.

Smart contracts 25

  • https://snowtrace.io/address/0x02d980a0d7af3fb7cf7df8cb35d9edbcf355f665 No bounty
  • https://snowtrace.io/address/0x152b9d0fdc40c096757f570a51e494bd4b943e50 No bounty
  • https://snowtrace.io/address/0x19860ccb0a68fd4213ab9d8266f7bbf05a8dde98 No bounty
  • https://snowtrace.io/address/0x2147efff675e4a4ee1c2f918d181cdbd7a8e208f No bounty
  • https://snowtrace.io/address/0x249848beca43ac405b8102ec90dd5f22ca513c06 No bounty
  • https://snowtrace.io/address/0x37b608519f91f70f2eeb0e5ed9af4061722e4f76 No bounty
  • https://snowtrace.io/address/0x3bd2b1c7ed8d396dbb98ded3aebb41350a5b2339 No bounty
  • https://snowtrace.io/address/0x49d5c2bdffac6ce2bfdb6640f4f80f226bc10bab No bounty
  • https://snowtrace.io/address/0x50b7545627a5162f82a992c33b87adc75187b218 No bounty
  • https://snowtrace.io/address/0x5947bb275c521040051d82396192181b413227a3 No bounty
  • https://snowtrace.io/address/0x596fa47043f99a4e0f122243b841e55375cde0d2 No bounty
  • https://snowtrace.io/address/0x63a72806098bd3d9520cc43356dd78afe5d386d9 No bounty
  • https://snowtrace.io/address/0x88128fd4b259552a9a1d457f435a6527aab72d42 No bounty
  • https://snowtrace.io/address/0x8a0cac13c7da965a312f08ea4229c37869e85cb9 No bounty
  • https://snowtrace.io/address/0x8ebaf22b6f053dffeaf46f4dd9efa95d89ba8580 No bounty
  • https://snowtrace.io/address/0x98443b96ea4b0858fdf3219cd13e98c7a4690588 No bounty
  • https://snowtrace.io/address/0x9eaac1b23d935365bd7b542fe22ceee2922f52dc No bounty
  • https://snowtrace.io/address/0xa7d7079b0fead91f3e65f86e8915cb59c1a4c664 No bounty
  • https://snowtrace.io/address/0xabc9547b534519ff73921b1fba6e672b5f58d083 No bounty
  • https://snowtrace.io/address/0xbec243c995409e6520d7c41e404da5deba4b209b No bounty
  • https://snowtrace.io/address/0xc3048e19e76cb9a3aa9d77d8c03c29fc906e2437 No bounty
  • https://snowtrace.io/address/0xc7198437980c041c805a1edcba50c1ce5db95118 No bounty
  • https://snowtrace.io/address/0xc7b5d72c836e718cda8888eaf03707faef675079 No bounty
  • https://snowtrace.io/address/0xd501281565bf7789224523144fe5d98e8b28f267 No bounty
  • https://snowtrace.io/address/0xd586e7f844cea2f87f50152665bcbc2c279d8d70 No bounty

Source code 3

  • https://github.com/ava-labs/avalanchego No bounty
  • https://github.com/ava-labs/icm-services/tree/main/icm-contracts No bounty
  • https://github.com/ava-labs/libevm No bounty

Changes

Tracked since 11 Nov 2026. Last checked 1 hour ago.

  1. Paused

    Paused. Not accepting reports right now.

Before we tracked it

Scope and reward changes recorded before this page started tracking it.

  1. Reward terms

    The reward table or payout terms were edited

  2. Status

    Program status changed

  3. Rules updated

    The program rules were edited

Public CVEs

Published vulnerabilities in this vendor's products, from the NVD.

No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.