Skip to content

Compound Finance

Bug bounty on Immunefi

Accepting reports Full safe harbor KYC to get paid Defi ETH Lending
Top reward
$1,000,000
Top severity paid
Critical
Assets in scope
135
Public CVEs
0
Last change

At a glance

What to know before you start testing.

Pays up to $1,000,000
for critical bugs, from $1,000.
Full safe harbor
Good-faith research is authorised; no legal action.
Payment
Proof of identity needed to get paid.

Rewards

What Immunefi lists as the payout for each severity.

Severity Reward
Critical $1,000,000 10% of funds at risk · from $50,000
High $50,000 from $10,000
Medium $5,000
Low $1,000

Scope

135 assets you may test.

Smart contracts 134

  • https://arbiscan.io/address/0x1B2E88cC7365d90e7E81392432482925BD8437E9
  • https://arbiscan.io/address/0x2f2a2543b76a4166549f7aab2e75bef0aefc5b0f
  • https://arbiscan.io/address/0x354A6dA3fcde098F8389cad84b0182725c6C91dE
  • https://arbiscan.io/address/0x3fB4d38ea7EC20D91917c09591490Eeda38Cf88A
  • https://arbiscan.io/address/0x42480C37B249e33aABaf4c22B20235656bd38068
  • https://arbiscan.io/address/0x5404872d8f2e24b230EC9B9eC64E3855F637FB93
  • https://arbiscan.io/address/0x5979D7b546E38E414F7E9822514be443A4800529
  • https://arbiscan.io/address/0x6f7D514bbD4aFf3BcD1140B7344b32f063dEe486
  • https://arbiscan.io/address/0x82af49447d8a07e3bd95bd0d56f35241523fbab1
  • https://arbiscan.io/address/0x88730d254A2f7e6AC8388c3198aFd694bA9f7fae
  • https://arbiscan.io/address/0x912ce59144191c1204e64559fe8253a0e49e6548
  • https://arbiscan.io/address/0x9c4ec768c28520B50860ea7a15bd7213a9fF58bf
  • https://arbiscan.io/address/0xA5EDBDD9646f8dFF606d7448e414884C7d905dCA
  • https://arbiscan.io/address/0xaf88d065e77c8cC2239327C5EDb3A432268e5831
  • https://arbiscan.io/address/0xb21b06D71c75973babdE35b49fFDAc3F82Ad3775
  • https://arbiscan.io/address/0xD10b40fF1D92e2267D099Da3509253D9Da4D715e
  • https://arbiscan.io/address/0xd98Be00b5D27fc98112BdE293e487f8D4cA57d07
  • https://arbiscan.io/address/0xe2AA5194E45B043AfdD6E98F467c0B1c13484ae9
  • https://arbiscan.io/address/0xEC70Dcb4A1EFa46b8F2D97C310C9c4790ba5ffA8
  • https://arbiscan.io/address/0xfc5A1A6EB076a2C7aD06eD22C90d7E710E35ad0a
  • https://arbiscan.io/address/0xFd086bC7CD5C481DCC9C85ebE478A1C0b69FCbb9
  • https://arbiscan.io/address/0xFF970A61A04b1cA14834A43f5dE4533eBDDB5CC8
  • https://basescan.org/address/0x123964802e6ABabBE1Bc9547D72Ef1B69B00A6b1
  • https://basescan.org/address/0x27C348936400791b7350d80Fb81Bc61Ad68dF4AE
  • https://basescan.org/address/0x2Ae3F1Ec7F1F5012CFEab0185bfc7aa3cf0DEc22
  • https://basescan.org/address/0x3bac64185786922292266AA92a58cf870D694E2a
  • https://basescan.org/address/0x4200000000000000000000000000000000000006
  • https://basescan.org/address/0x46e6b214b524310239732D51387075E0e70970bf
  • https://basescan.org/address/0x78D0677032A35c63D142a48A2037048871212a8C
  • https://basescan.org/address/0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
  • https://basescan.org/address/0x88bB8C109640778D3fB1074bB10a66e31F2c9c17
  • https://basescan.org/address/0x9e1028F5F1D5eDE59748FFceE5532509976840E0
  • https://basescan.org/address/0xb125E6687d4313864e53df431d5425969c15Eb2F
  • https://basescan.org/address/0xd9aAEc86B65D86f6A7B5B1b0c42FFA531710b6CA
  • https://etherscan.io/address/0x041171993284df560249B57358F931D9eB7b925D
  • https://etherscan.io/address/0x12392F67bdf24faE0AF363c24aC620a2f67DAd86
  • https://etherscan.io/address/0x158079Ee67Fce2f58472A96584A73C7Ab9AC95c1
  • https://etherscan.io/address/0x1B0e765F6224C21223AeA2af16c1C46E38885a40
  • https://etherscan.io/address/0x1EC63B5883C3481134FD50D5DAebc83Ecd2E8779
  • https://etherscan.io/address/0x1f9840a85d5af5bf1d1762f925bdaddc4201f984
  • https://etherscan.io/address/0x2260fac5e5542a773aa44fbcfedf7c193bc2c599
  • https://etherscan.io/address/0x285617313887d43256F852cAE0Ee4de4b68D45B0
  • https://etherscan.io/address/0x309a862bbC1A00e45506cB8A802D1ff10004c8C0
  • https://etherscan.io/address/0x316f9708bB98af7dA9c68C1C3b5e79039cD336E3
  • https://etherscan.io/address/0x35A18000230DA775CAc24873d00Ff85BccdeD550
  • https://etherscan.io/address/0x39AA39c021dfbaE8faC545936693aC917d5E7563
  • https://etherscan.io/address/0x3Afdc9BCA9213A35503b077a6072F3D0d5AB0840
  • https://etherscan.io/address/0x3d9819210A31b4961b30EF54bE2aeD79B9c9Cd3B
  • https://etherscan.io/address/0x4B0181102A0112A2ef11AbEE5563bb4a3176c9d7
  • https://etherscan.io/address/0x4Ddc2D193948926D02f9B1fE9e1daa0718270ED5
  • https://etherscan.io/address/0x514910771af9ca656af840dff83e8264ecf986ca
  • https://etherscan.io/address/0x5C58d4479A1E9b2d19EE052143FA73F0ee79A36e
  • https://etherscan.io/address/0x5d3a536E4D6DbD6114cc1Ead35777bAB948E3643
  • https://etherscan.io/address/0x698A949f3b4f7a5DdE236106F25Fa0eAcA0FcEF1
  • https://etherscan.io/address/0x6C8c6b02E7b2BE14d4fA6022Dfd6d75921D90E4E
  • https://etherscan.io/address/0x6d903f6003cca6255D85CcA4D3B5E5146dC33925
  • https://etherscan.io/address/0x70e36f6BF80a52b3B46b3aF8e106CC0ed743E8e4
  • https://etherscan.io/address/0x74a81F84268744a40FEBc48f8b812a1f188D80C3
  • https://etherscan.io/address/0x7713DD9Ca933848F6819F38B8352D9A15EA73F67
  • https://etherscan.io/address/0x7f39c581f595b53c5cb19bd0b3f8da6c935e2ca0
  • https://etherscan.io/address/0x80a2AE356fc9ef4305676f7a3E2Ed04e12C33946
  • https://etherscan.io/address/0x95b4eF2869eBD94BEb4eEE400a99824BF5DC325b
  • https://etherscan.io/address/0xA1290d69c65A6Fe4DF752f95823fae25cB99e5A7
  • https://etherscan.io/address/0xA17581A9E3356d9A858b789D68B4d866e593aE94
  • https://etherscan.io/address/0xa397a8C2086C554B531c02E29f3291c9704B00c7
  • https://etherscan.io/address/0xa7F7De6cCad4D83d81676717053883337aC2c1b4
  • https://etherscan.io/address/0xae78736Cd615f374D3085123A210448E74Fc6393
  • https://etherscan.io/address/0xB3319f5D18Bc0D84dD1b4825Dcde5d5f7266d407
  • https://etherscan.io/address/0xBe9895146f7AF43049ca1c1AE358B0541Ea49704
  • https://etherscan.io/address/0xbf5495Efe5DB9ce00f80364C8B423567e58d2110
  • https://etherscan.io/address/0xc00e94Cb662C3520282E6f5717214004A7f26888
  • https://etherscan.io/address/0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2
  • https://etherscan.io/address/0xC11b1268C1A384e55C48c2391d8d480264A3A7F4
  • https://etherscan.io/address/0xc3d688B66703497DAA19211EEdff47f25384cdc3
  • https://etherscan.io/address/0xccF4429DB6322D5C611ee964527D42E5d685DD6a
  • https://etherscan.io/address/0xCd5fE23C85820F7B72D0926FC9b05b43E359b7ee
  • https://etherscan.io/address/0xdAC17F958D2ee523a2206206994597C13D831ec7
  • https://etherscan.io/address/0xe2C1F54aFF6b38fD9DF7a69F22cB5fd3ba09F030
  • https://etherscan.io/address/0xe65cdB6479BaC1e22340E4E755fAE7E509EcD06c
  • https://etherscan.io/address/0xf1C9acDc66974dFB6dEcB12aA385b9cD01190E38
  • https://etherscan.io/address/0xF5DCe57282A584D2746FaF1593d3121Fcac444dC
  • https://etherscan.io/address/0xf650C3d88D12dB855b8bf7D11Be6C55A4e07dCC9
  • https://etherscan.io/address/0xFAce851a4921ce59e912d19329929CE6da6EB0c7
  • https://optimistic.etherscan.io/address/0x1F32b1c2345538c0c6f582fCB022739c4A194Ebb
  • https://optimistic.etherscan.io/address/0x2e44e174f7D53F0212823acC11C01A11d58c5bCB
  • https://optimistic.etherscan.io/address/0x3870FAc3De911c12A57E5a2532D15aD8Ca275A60
  • https://optimistic.etherscan.io/address/0x3C30B5a5A04656565686f800481580Ac4E7ed178
  • https://optimistic.etherscan.io/address/0x4200000000000000000000000000000000000042
  • https://optimistic.etherscan.io/address/0x443EA0340cb75a160F31A440722dec7b5bc3C2E9
  • https://optimistic.etherscan.io/address/0x68f180fcCe6836688e9084f035309E29Bf0A2095
  • https://optimistic.etherscan.io/address/0x7e7d4467112689329f7E06571eD0E8CbAd4910eE
  • https://optimistic.etherscan.io/address/0x82B8d9A06ccABC1e9B0c0A00f38B858E6925CF2f
  • https://optimistic.etherscan.io/address/0x84E93EC6170ED630f5ebD89A1AAE72d4F63f2713
  • https://optimistic.etherscan.io/address/0x94b008aA00579c1307B0EF2c499aD98a8ce58e58
  • https://optimistic.etherscan.io/address/0x995E394b8B2437aC8Ce61Ee0bC610D617962B214
  • https://optimistic.etherscan.io/address/0x9Bcef72be871e61ED4fBbc7630889beE758eb81D
  • https://optimistic.etherscan.io/address/0xC3a73A70d1577CD5B02da0bA91C0Afc8fA434DAF
  • https://optimistic.etherscan.io/address/0xC49399814452B41dA8a7cd76a159f5515cb3e493
  • https://optimistic.etherscan.io/address/0xcb3643CC8294B23171272845473dEc49739d4Ba3
  • https://optimistic.etherscan.io/address/0xE36A30D249f7761327fd973001A32010b521b6Fd
  • https://optimistic.etherscan.io/address/0xE802a0b833f6080FEB46DD54c75444c5dba0c873
  • https://optimistic.etherscan.io/address/0xFa454dE61b317b6535A0C462267208E8FdB89f45
  • https://polygonscan.com/address/0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270
  • https://polygonscan.com/address/0x18281dfC4d00905DA1aaA6731414EABa843c468A
  • https://polygonscan.com/address/0x1BFD67037B42Cf73acF2047067bd4F2C47D9BfD6
  • https://polygonscan.com/address/0x2791Bca1f2de4661ED88A30C99A7a9449Aa84174
  • https://polygonscan.com/address/0x2F4eAF29dfeeF4654bD091F7112926E108eF4Ed0
  • https://polygonscan.com/address/0x2F9E3953b2Ef89fA265f2a32ed9F80D00229125B
  • https://polygonscan.com/address/0x3A58a54C066FdC0f2D55FC9C89F0415C92eBf3C4
  • https://polygonscan.com/address/0x45939657d1CA34A8FA39A924B71D28Fe8431e581
  • https://polygonscan.com/address/0x59e242D352ae13166B4987aE5c990C232f7f7CD6
  • https://polygonscan.com/address/0x7ceB23fD6bC0adD59E62ac25578270cFf1b9f619
  • https://polygonscan.com/address/0x83E0F742cAcBE66349E3701B171eE2487a26e738
  • https://polygonscan.com/address/0x8505b9d2254A7Ae468c0E9dd10Ccea3A837aef5c
  • https://polygonscan.com/address/0xaeB318360f27748Acb200CE616E389A6C9409a07
  • https://polygonscan.com/address/0xbdE8F31D2DdDA895264e27DD990faB3DC87b372d
  • https://polygonscan.com/address/0xc2132D05D31c914a87C6611C10748AEb04B58e8F
  • https://polygonscan.com/address/0xCC3E7c85Bb0EE4f09380e041fee95a0caeDD4a02
  • https://polygonscan.com/address/0xd712ACe4ca490D4F3E92992Ecf3DE12251b975F9
  • https://polygonscan.com/address/0xF25212E676D1F7F89Cd72fFEe66158f541246445
  • https://polygonscan.com/address/0xfa68FB4628DFF1028CFEc22b4162FCcd0d45efb6
  • https://scrollscan.com/address/0x06eFdBFf2a14a7c8E15944D1F4A48F9F95F663A4
  • https://scrollscan.com/address/0x27E24C49f95DfF7E231eF1C2849F760cDF25a5Ad
  • https://scrollscan.com/address/0x5300000000000000000000000000000000000004
  • https://scrollscan.com/address/0x53C6D04e3EC7031105bAeA05B36cBc3C987C56fA
  • https://scrollscan.com/address/0x643e160a3C3E2B7eae198f0beB1BfD2441450e86
  • https://scrollscan.com/address/0x70167D30964cbFDc315ECAe02441Af747bE0c5Ee
  • https://scrollscan.com/address/0x85Bfa13eB2BC22A742Ca552566131d31677Bd41e
  • https://scrollscan.com/address/0x87A27b91f4130a25E9634d23A5B8E05e342bac50
  • https://scrollscan.com/address/0xB2f97c1Bd3bf02f5e74d13f02E3e26F93D77CE44
  • https://scrollscan.com/address/0xC6bf5A64896D679Cf89843DbeC6c0f5d3C9b610D
  • https://scrollscan.com/address/0xECAB0bEEa3e5DEa0c35d3E69468EAC20098032D7
  • https://scrollscan.com/address/0xF6013e80E9e6AC211Cc031ad1CE98B3Aa20b73E4
  • https://scrollscan.com/address/0xf610A9dfB7C89644979b4A0f27063E9e7d7Cda32

Source code 1

  • https://github.com/compound-finance/compound-protocol/pull/127

Changes

Tracked since 11 Nov 2026. Last checked 57 minutes ago.

No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.

Before we tracked it

Scope and reward changes recorded before this page started tracking it.

  1. Reward terms

    The reward table or payout terms were edited

  2. Reward terms

    The reward table or payout terms were edited

  3. Scope removed

    https://arbiscan.io/address/0x5979D7b546E38E414F7E9822514be443A4800529

  4. Scope removed

    https://etherscan.io/address/0xf650C3d88D12dB855b8bf7D11Be6C55A4e07dCC9

  5. Scope removed

    https://arbiscan.io/address/0x2f2a2543b76a4166549f7aab2e75bef0aefc5b0f

  6. Scope removed

    https://polygonscan.com/address/0x1BFD67037B42Cf73acF2047067bd4F2C47D9BfD6

  7. Scope removed

    https://polygonscan.com/address/0x45939657d1CA34A8FA39A924B71D28Fe8431e581

  8. Scope removed

    https://basescan.org/address/0xbdE8F31D2DdDA895264e27DD990faB3DC87b372d

  9. Scope removed

    https://etherscan.io/address/0xB3319f5D18Bc0D84dD1b4825Dcde5d5f7266d407

  10. Scope removed

    https://optimistic.etherscan.io/address/0x2e44e174f7D53F0212823acC11C01A11d58c5bCB

  11. Scope removed

    https://etherscan.io/address/0x2260FAC5E5542a773Aa44fBCfeDf7C193bc2C599

  12. Scope removed

    https://polygonscan.com/address/0xbdE8F31D2DdDA895264e27DD990faB3DC87b372d

  13. Scope removed

    https://scrollscan.com/address/0x5300000000000000000000000000000000000004

  14. Scope removed

    https://polygonscan.com/address/0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270

  15. Scope removed

    https://etherscan.io/address/0xe65cdB6479BaC1e22340E4E755fAE7E509EcD06c

  16. Scope removed

    https://basescan.org/address/0x2Ae3F1Ec7F1F5012CFEab0185bfc7aa3cf0DEc22

  17. Scope removed

    https://arbiscan.io/address/0xb21b06D71c75973babdE35b49fFDAc3F82Ad3775

  18. Scope removed

    https://etherscan.io/address/0xC11b1268C1A384e55C48c2391d8d480264A3A7F4

  19. Scope removed

    https://arbiscan.io/address/0x42480C37B249e33aABaf4c22B20235656bd38068

  20. Scope removed

    https://polygonscan.com/address/0xF25212E676D1F7F89Cd72fFEe66158f541246445

  21. Scope removed

    https://optimistic.etherscan.io/address/0x84E93EC6170ED630f5ebD89A1AAE72d4F63f2713

  22. Scope removed

    https://polygonscan.com/address/0x7ceB23fD6bC0adD59E62ac25578270cFf1b9f619

  23. Scope removed

    https://etherscan.io/address/0xF5DCe57282A584D2746FaF1593d3121Fcac444dC

  24. Scope removed

    https://scrollscan.com/address/0xECAB0bEEa3e5DEa0c35d3E69468EAC20098032D7

  25. Scope removed

    https://etherscan.io/address/0xA1290d69c65A6Fe4DF752f95823fae25cB99e5A7

  26. Scope removed

    https://arbiscan.io/address/0x6f7D514bbD4aFf3BcD1140B7344b32f063dEe486

  27. Scope removed

    https://etherscan.io/address/0x698A949f3b4f7a5DdE236106F25Fa0eAcA0FcEF1

  28. Scope removed

    https://etherscan.io/address/0xe2C1F54aFF6b38fD9DF7a69F22cB5fd3ba09F030

  29. Scope removed

    https://basescan.org/address/0xd9aAEc86B65D86f6A7B5B1b0c42FFA531710b6CA

  30. Scope removed

    https://arbiscan.io/address/0xEC70Dcb4A1EFa46b8F2D97C310C9c4790ba5ffA8

  31. Scope removed

    https://arbiscan.io/address/0x354A6dA3fcde098F8389cad84b0182725c6C91dE

  32. Scope removed

    https://etherscan.io/address/0x74a81F84268744a40FEBc48f8b812a1f188D80C3

  33. Scope removed

    https://optimistic.etherscan.io/address/0x4200000000000000000000000000000000000042

  34. Scope removed

    https://arbiscan.io/address/0x82aF49447D8a07e3bd95BD0d56f35241523fBab1

  35. Scope removed

    https://arbiscan.io/address/0xfc5A1A6EB076a2C7aD06eD22C90d7E710E35ad0a

  36. Scope removed

    https://etherscan.io/address/0x6d903f6003cca6255D85CcA4D3B5E5146dC33925

  37. Scope removed

    https://basescan.org/address/0x18281dfC4d00905DA1aaA6731414EABa843c468A

  38. Scope removed

    https://basescan.org/address/0x9e1028F5F1D5eDE59748FFceE5532509976840E0

  39. Scope removed

    https://etherscan.io/address/0x1EC63B5883C3481134FD50D5DAebc83Ecd2E8779

  40. Scope removed

    https://optimistic.etherscan.io/address/0x3C30B5a5A04656565686f800481580Ac4E7ed178

Public CVEs

Published vulnerabilities in this vendor's products, from the NVD.

No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.