Skip to content
bugbounty.fyi
Get paid to secure open source 475 paid open-source programs on Sorona, up to $1M Perk Low bugs: $100 or 1 mo Claude Max

Also on Patchstack. All 476 paid open-source programs

Try

Highest paying Newly launched Paid without KYC Full safe harbor
All results

About this site

GMX

Bug bounty on Immunefi gmx.io

Accepting reports No KYC AMM Arbitrum Avalanche
Go to program
Top reward
$5,000,000
Top severity paid
Critical
Assets in scope
239
Public CVEs
0
Last change

At a glance

What to know before you start testing.

Pays up to $5,000,000
for critical bugs, from $1,000.
Report on Immunefi
Submit through the program page.
Payment
No identity check to get paid.

Rewards

What Immunefi lists as the payout for each severity.

Severity Reward
Critical Web $50,000 from $10,000
Critical Contract $5,000,000 10% of funds at risk
High Web $5,000
High Contract $25,000 from $10,000
Medium Web $1,000
Medium Contract $10,000 from $2,500

Scope

239 assets you may test.

Smart contracts 237

  • https://arbiscan.io/address/0x01AF26b74409d10e15b102621EDd29c326ba1c55
  • https://arbiscan.io/address/0x03e8f708e9C85EDCEaa6AD7Cd06824CeB82A7E68
  • https://arbiscan.io/address/0x03f349b3cc4f200d7fae4d8ddaf1507f5a40d356
  • https://arbiscan.io/address/0x04a7c49b83FDDb35Df6b142717A1737ACf052f76
  • https://arbiscan.io/address/0x0537C767cDAC0726c76Bb89e92904fe28fd02fE1
  • https://arbiscan.io/address/0x0628D46b5D145f183AdB6Ef1f2c97eD1C4701C55
  • https://arbiscan.io/address/0x0755D33e45eD2B874c9ebF5B279023c8Bd1e5E93
  • https://arbiscan.io/address/0x09f77e8a13de9a35a7231028187e9fd5db8a2acb#code
  • https://arbiscan.io/address/0x112292FBCdCAd1AbE411a966313Bc7031a516300
  • https://arbiscan.io/address/0x113Fc422d9D49b7371b7A164f62b839877DCbb93
  • https://arbiscan.io/address/0x1364DeC7e321059A1bD803e2B634b7a8efd5aE75
  • https://arbiscan.io/address/0x13E0BbE893B33b64D4f3F96725dd70531fA4EbCe
  • https://arbiscan.io/address/0x157E6bd60d71Ad6202448bF85699Fe2695F80B6F
  • https://arbiscan.io/address/0x17fA5E5e5BeeB8896e1bE5F663aAE1618F8B35e0
  • https://arbiscan.io/address/0x19254A4dFbD855E11cC9DEF57cC7844ff8Fa4088
  • https://arbiscan.io/address/0x199070DDfd1CFb69173aa2F7e20906F26B363004
  • https://arbiscan.io/address/0x1aDDD80E6039594eE970E5872D247bf0414C8903
  • https://arbiscan.io/address/0x1b3d1d98B310fA509Fc0BA387E0310AC6676aB61
  • https://arbiscan.io/address/0x1de098faf30bd74f22753c28db17a2560d4f5554
  • https://arbiscan.io/address/0x23208b91a98c7c1cd9fe63085bff68311494f193
  • https://arbiscan.io/address/0x23aD637ccC648F0D83A74491bDB4cd4C50983911
  • https://arbiscan.io/address/0x2A29D3a792000750807cc401806d6fd539928481
  • https://arbiscan.io/address/0x2e246061BE08DC56d33E03Dc0cb962C2155722b5
  • https://arbiscan.io/address/0x31eF83a530Fde1B38EE9A18093A333D8Bbbc40D5
  • https://arbiscan.io/address/0x321f653eed006ad1c29d174e17d96351bde22649
  • https://arbiscan.io/address/0x35247165119B69A40edD5304969560D0ef486921
  • https://arbiscan.io/address/0x36368FB5CEd1b6A53034a6D514452084fff3cAcd
  • https://arbiscan.io/address/0x389CEf541397e872dC04421f166B5Bc2E0b374a5
  • https://arbiscan.io/address/0x393053B58f9678C9c28c2cE941fF6cac49C3F8f9
  • https://arbiscan.io/address/0x3C2233B0CaA8437827f03366556186f5e5899FA8
  • https://arbiscan.io/address/0x3c3d99FD298f679DBC2CEcd132b4eC4d0F5e6e72
  • https://arbiscan.io/address/0x3f3e77421e30271568ef7a0ab5c5f2667675341e
  • https://arbiscan.io/address/0x3f6dF0c3A7221BA1375E87e7097885a601B41Afc
  • https://arbiscan.io/address/0x41194c86Fc1A915d568D79067A9BCCc7D47d499A
  • https://arbiscan.io/address/0x41418793Aa2B2D595b37398ec6AF99ec6b40f48e
  • https://arbiscan.io/address/0x4277f8F2c384827B5273592FF7CeBd9f2C1ac258
  • https://arbiscan.io/address/0x447ddf3aCdb6809FFE90a033D0de1d85F30C8c16
  • https://arbiscan.io/address/0x45096e7aA921f27590f8F19e457794EB09678141
  • https://arbiscan.io/address/0x48787F7847068f9Cc1398e5f589BEf9744730C8D
  • https://arbiscan.io/address/0x489ee077994B6658eAfA855C308275EAd8097C4A
  • https://arbiscan.io/address/0x4904C431efFc77fAa547789F0895Ca9f93940E74
  • https://arbiscan.io/address/0x4ae2629279256847CDAbAF9e7b8ef8BFaed457da
  • https://arbiscan.io/address/0x4bd1cdAab4254fC43ef6424653cA2375b4C94C0E
  • https://arbiscan.io/address/0x4d268a7d4C16ceB5a606c173Bd974984343fea13
  • https://arbiscan.io/address/0x4e971a87900b931fF39d1Aad67697F49835400b6
  • https://arbiscan.io/address/0x527FB0bCfF63C47761039bB386cFE181A92a4701
  • https://arbiscan.io/address/0x5453b265BB51162B16eE8d79039144dEb5eB7256
  • https://arbiscan.io/address/0x5554B2055aB335B1f4c811bb98d1EB62a18D3deE
  • https://arbiscan.io/address/0x55E8E153048294c060455e5762d7280FAee86Dc7
  • https://arbiscan.io/address/0x56e0172be5d13180c92c9448b6D24EF9096A5d33
  • https://arbiscan.io/address/0x584933A3e87c7E68E842C4B6106cf73021343d34
  • https://arbiscan.io/address/0x5AE447830925bE3E8D16D9D5afb96C2FDD6b567F
  • https://arbiscan.io/address/0x5c04a12eb54a093c396f61355c6da0b15890150d
  • https://arbiscan.io/address/0x5Ce5e2B1C44e0C0E79D6072e6bA57AC965d942e7
  • https://arbiscan.io/address/0x5D4520aB45b635b1B9E83B4890e7b87Bc0A45b04
  • https://arbiscan.io/address/0x5d6B84086DA6d4B0b6C0dF7E02f8a6A039226530
  • https://arbiscan.io/address/0x5E4766F932ce00aA4a1A82d3Da85adf15C5694A1
  • https://arbiscan.io/address/0x60519b48ec4183a61ca2b8e37869e675fd203b34
  • https://arbiscan.io/address/0x64fbD82d9F987baF5A59401c64e823232182E8Ed
  • https://arbiscan.io/address/0x65d5ED986Fd27f427DE0EfA4Cda558319a7f7C3D
  • https://arbiscan.io/address/0x674Ee2FFe588c4b1Fde6D5481c55Ef6133004cbA
  • https://arbiscan.io/address/0x694F0eadBbBb25D9D640a393800bcAB613f027dc
  • https://arbiscan.io/address/0x6a9505D0B44cFA863d9281EA5B0b34cB36243b45
  • https://arbiscan.io/address/0x70406fB299F00F8aEB66E37Da079b496Dbd2b1fF
  • https://arbiscan.io/address/0x7452c558d45f8afC8c83dAe62C3f8A5BE19c71f6
  • https://arbiscan.io/address/0x74bc4F1EC38bf5C98b9E2Ffd9d1Ed3F54960CEBf
  • https://arbiscan.io/address/0x7A967D114B8676874FA2cFC1C14F3095C88418Eb
  • https://arbiscan.io/address/0x7D9E403F82b59e7fF5F7A37a9bf4A8df914352A1
  • https://arbiscan.io/address/0x7EB417637a3E6d1C19E6d69158c47610b7a5d9B3
  • https://arbiscan.io/address/0x7F9d94e918985beE91A712c4Ae26dC46F24c6583
  • https://arbiscan.io/address/0x83cBb05AA78014305194450c4AADAc887fe5DF7F
  • https://arbiscan.io/address/0x8903de973bC60A1B2CFf2F657D46e65f92A5f172
  • https://arbiscan.io/address/0x8B613227962B2d90a56155D1f1779c7610787143
  • https://arbiscan.io/address/0x908c4d94d34924765f1edc22a1dd098397c59dd4
  • https://arbiscan.io/address/0x9214a5C4065CAa10e259fA4a0D89439eB4005690
  • https://arbiscan.io/address/0x9242FbED25700e82aE26ae319BCf68E9C508451c
  • https://arbiscan.io/address/0x926d812d8fba03764CabD60A8dC09ecb2DffF44e
  • https://arbiscan.io/address/0x93c316CA7708101Ad6169A5e2c86570Af5652d9d
  • https://arbiscan.io/address/0x9530Ad090569Fddc5472845d6226d6ac0d585db8
  • https://arbiscan.io/address/0x98A768791Dc8C0E2F0b0cDd7Af9E5FadF71E042e
  • https://arbiscan.io/address/0x98fbd63aF0b20810A6eA163a7621F7336dA84F36
  • https://arbiscan.io/address/0x9CbB37630d65324af064F28CCD9dF6E667Cb16F1
  • https://arbiscan.io/address/0x9E6ac9e474Ce93040141391bf52fa74135490f50
  • https://arbiscan.io/address/0xa07B749AF48Cf3d172D9A56a0C00c5239A92E519
  • https://arbiscan.io/address/0xa329221a77BE08485f59310b873b14815c82E10D
  • https://arbiscan.io/address/0xa3346F984c3c5F73B603adA39FC2b2C88899dd67
  • https://arbiscan.io/address/0xA75287d2f8b217273E7FCD7E86eF07D33972042E
  • https://arbiscan.io/address/0xA8AF9B86fC47deAde1bc66B12673706615E2B011
  • https://arbiscan.io/address/0xAb27c2a82D89b545a53a4f13F9Dd42B70D4655DF
  • https://arbiscan.io/address/0xAB30090059B1ABc98eE6e95e13c10934B94caDC8
  • https://arbiscan.io/address/0xaBBc5F99639c9B6bCb58544ddf04EFA6802F4064
  • https://arbiscan.io/address/0xAd3a89131048b85acF899f089F2fD17424cb77b2
  • https://arbiscan.io/address/0xb4Fc59988E1aFee8354E2222CC81ea4D8643bCD6
  • https://arbiscan.io/address/0xb8fc96d7a413C462F611A7aC0C912c2FE26EAbC4
  • https://arbiscan.io/address/0xBD219aADaFe3AD8c8F570b204B99cb4aDbe9983E
  • https://arbiscan.io/address/0xC5Be2e12166b36a15F2324b5a8AD13030a677507
  • https://arbiscan.io/address/0xC8ee91A54287DB53897056e12D9819156D3822Fb
  • https://arbiscan.io/address/0xcb6Bbd2614cccc0b5EB25328b0369fCe9439A33C
  • https://arbiscan.io/address/0xCC6e13d6A6e8D314d62456C2422E12Da683A3cAc
  • https://arbiscan.io/address/0xCe5440d9812A38e566Ca761b3B0AB35b2ecB2F48
  • https://arbiscan.io/address/0xD064a53B5fC178AA6137553F67940EFc1D8a30A6
  • https://arbiscan.io/address/0xd2D1162512F927a7e282Ef43a362659E4F2a728F
  • https://arbiscan.io/address/0xD5955B44BdF643209A18ddE0ACd410E6C6B16F5a
  • https://arbiscan.io/address/0xd59a808bCA24812C483C1B3bF0A0E8D7D5932E4c
  • https://arbiscan.io/address/0xDA8030E31f29F9083825837C4860538DDA7414D4
  • https://arbiscan.io/address/0xdAb9bA9e3a301CCb353f18B4C8542BA2149E4010
  • https://arbiscan.io/address/0xdaFa7Deb67805d7498Aa926002bB2d713D1d9256
  • https://arbiscan.io/address/0xDdCC32312792c0cb9735b290458CeEe1d57E07D0
  • https://arbiscan.io/address/0xE37D052e1DeB99901de205E7186E31A36E4Ef70c
  • https://arbiscan.io/address/0xe68CAAACdf6439628DFD2fe624847602991A31eB
  • https://arbiscan.io/address/0xE6BCA9f99AAAD29d698DbE0D13e9B802ff04467C
  • https://arbiscan.io/address/0xe79118d6D92a4b23369ba356C90b9A7ABf1CB961
  • https://arbiscan.io/address/0xE971b9D5eA8Ab28bF3639069CF7a91E5dA7b7015
  • https://arbiscan.io/address/0xEb77B660cCa2e5110d9cA473E38dd213cd35aAFB
  • https://arbiscan.io/address/0xf42Ae1D54fd613C9bb14810b0588FaAa09a426cA
  • https://arbiscan.io/address/0xF44893f529FB4b6769CEadD079a1053Bcaf9e3fC
  • https://arbiscan.io/address/0xF5BD6f70CE7Afa2c86bd47A60A7C58a42Ea2388D
  • https://arbiscan.io/address/0xf5F30B10141E1F63FC11eD772931A8294a591996
  • https://arbiscan.io/address/0xf7F06d4e6aB73058B25707C0C2c288C4F70B9dA6
  • https://arbiscan.io/address/0xF89e77e8Dc11691C9e8757e84aaFbCD8A67d7A55
  • https://arbiscan.io/address/0xfc5A1A6EB076a2C7aD06eD22C90d7E710E35ad0a
  • https://arbiscan.io/address/0xFD70de6b91282D8017aA4E741e9Ae325CAb992d8
  • https://arbiscan.io/address/0xfe2Df84627950A0fB98EaD49c69a1DE3F66867d6
  • https://arbiscan.io/address/0xfe99609C4AA83ff6816b64563Bdffd7fa68753Ab
  • https://arbiscan.io/address/0xFf1B35C888F548C77755939118e71ae2408F6516
  • https://snowtrace.io/address/0x01234181085565ed162a948b6a5e88758CD7c7b8
  • https://snowtrace.io/address/0x036E2e8Eae7C647C580BCCe5aC9224e487721280
  • https://snowtrace.io/address/0x05DC08259f1E511541f553617BAE6D4465C93355
  • https://snowtrace.io/address/0x0747e9641549690Ed9f0FB89B519AA3e57354203
  • https://snowtrace.io/address/0x0885bcf264Fb71518443A3b2Cd87466036f222Bc
  • https://snowtrace.io/address/0x088711C3d2FA992188125e009E65c726bA090AD6
  • https://snowtrace.io/address/0x08A902113F7F41a8658eBB1175f9c847bf4fB9D8
  • https://snowtrace.io/address/0x091eD806490Cc58Fd514441499e58984cCce0630
  • https://snowtrace.io/address/0x0b7E3E946Fd9aFF1b103810C36B610ad9D4Cb7d0
  • https://snowtrace.io/address/0x0ff183E29f1924ad10475506D7722169010CecCb
  • https://snowtrace.io/address/0x129174043B134aD27eaE552D6BEA08f23f771205
  • https://snowtrace.io/address/0x1A3A103F9F536a0456C9b205152A3ac2b3c54490
  • https://snowtrace.io/address/0x1Ad2560bD34D17A413e4eb9420643d1782466dDA
  • https://snowtrace.io/address/0x1b0a44dD3bCCC2Ddae33921694EBc34E3ECC1415
  • https://snowtrace.io/address/0x2098465FC0329C4d2F3B266190a6A664fBC6E0Db
  • https://snowtrace.io/address/0x21A2253c136042075b15CD44846A5fF89F06662c
  • https://snowtrace.io/address/0x226ED647C6eA2C0cE4C08578e2F37b8c2F922849
  • https://snowtrace.io/address/0x25e6385C1b4CE6B80928Ef2406EcE24D2319D191
  • https://snowtrace.io/address/0x26d2D37567c4944d3EC867f693b40c8063A4B4F9
  • https://snowtrace.io/address/0x27346Fdab142e2b8B6C6d2ecFe73e75B5e249A57
  • https://snowtrace.io/address/0x2B4FCd7552c53f56891100D6E584633C7E5a9078
  • https://snowtrace.io/address/0x2bD10f8E93B3669b6d42E74eEedC65dd1B0a1342
  • https://snowtrace.io/address/0x2CdA6CF21aFA4A8ff61a888865E26231fA0bd565
  • https://snowtrace.io/address/0x2ECB664e934aCd5DF1EE889Dbb2E7D6C1d7CE3Cb
  • https://snowtrace.io/address/0x2F0b22339414ADeD7D5F06f9D604c7fF5b2fe3f6
  • https://snowtrace.io/address/0x34acBf9Fb2f0dDAB489F6B75FBf394C240b97276
  • https://snowtrace.io/address/0x377D0e11Bb5F4a97275C16EB2FcBeb157B8c3697
  • https://snowtrace.io/address/0x3b944bda5521C2eCE014CF1E4717ce130266c0Db
  • https://snowtrace.io/address/0x41613136174912714faF4cF0680fB1Acbe0cC7D1
  • https://snowtrace.io/address/0x418F9CC6cA4870be1088Ce03CC48985B145c79a8
  • https://snowtrace.io/address/0x4296e307f108B2f583FF2F7B7270ee7831574Ae5
  • https://snowtrace.io/address/0x46088fA22988c40CE5aBC0647a7638D27A8bF7d1
  • https://snowtrace.io/address/0x470b40dc22D7a4974b199E13e4A00893EB140479
  • https://snowtrace.io/address/0x472361d3cA5F49c8E633FB50385BfaD1e018b445
  • https://snowtrace.io/address/0x48486CaF8851ed0085432789D28A8820bEcbfd45
  • https://snowtrace.io/address/0x4895170e184441da9BD2bF95c120c07ba628eeF0
  • https://snowtrace.io/address/0x4FB4e6db5738709490856ecE38EcEcf264F2a97F
  • https://snowtrace.io/address/0x50474CAe810B316c294111807F94F9f48527e7F8
  • https://snowtrace.io/address/0x51e42dd437aBfF9E715f8C5853F42cB1597A1ea0
  • https://snowtrace.io/address/0x55E9A5E1Aed46500F746F7683e87F3D9f3C1E14E
  • https://snowtrace.io/address/0x5643F4b25E36478eE1E90418d5343cb6591BcB9d
  • https://snowtrace.io/address/0x56AEd6EA2538487603EC56417d44379A921a5b48
  • https://snowtrace.io/address/0x5aEb6AD978f59e220aA9099e09574e1c5E03AafD
  • https://snowtrace.io/address/0x5AF9de15Bc0E332622f6dFE77fC489d709CE12fE
  • https://snowtrace.io/address/0x5B6856a9E427BE70B19BBF7BAbb5A6aDB36a2716
  • https://snowtrace.io/address/0x5Ca84c34a381434786738735265b9f3FD814b824
  • https://snowtrace.io/address/0x5f719c2f1095f7b9fc68a68e35b51194f4b6abe8
  • https://snowtrace.io/address/0x618fCEe30D9A26e8533C3B244CAd2D6486AFf655
  • https://snowtrace.io/address/0x62331A7Bd1dfB3A7642B7db50B5509E57CA3154A
  • https://snowtrace.io/address/0x62edc0692BD897D2295872a9FFCac5425011c661
  • https://snowtrace.io/address/0x69C527fC77291722b52649E45c838e41be8Bf5d5
  • https://snowtrace.io/address/0x70205d90Ba4017e98aA0b95EB3d3E8a0DBb2021E
  • https://snowtrace.io/address/0x713c6a2479f6C079055A6AD3690D95dEDCEf9e1e
  • https://snowtrace.io/address/0x76fCBAF92eA8F9Fc2c21Ef785F37C52095F76DCC
  • https://snowtrace.io/address/0x7C68C7866A64FA2160F78EEaE12217FFbf871fa8
  • https://snowtrace.io/address/0x7fC46CCb386e9bbBFB49A2639002734C3Ec52b39
  • https://snowtrace.io/address/0x8087a341D32D445d9aC8aCc9c14F5781E04A26d2
  • https://snowtrace.io/address/0x81d8B0F2FD89D31728E8fe36fa3C9aD8BAcF10DC
  • https://snowtrace.io/address/0x820F5FfC5b525cD4d88Cd91aCf2c28F16530Cc68
  • https://snowtrace.io/address/0x8410C65EA0fE4533492f2D4a2FB045F0072059ea
  • https://snowtrace.io/address/0x857aA530f3EaC0a5a4fE7628012ccAC7FaF54eEf
  • https://snowtrace.io/address/0x8583b878DA0844B7f59974069f00D3A9eaE0F4ae
  • https://snowtrace.io/address/0x85d2B53cE13f2A2e2be7F95E3A26d265301a0B49
  • https://snowtrace.io/address/0x85Fcd569577A0bb52abF9D9E691F69D94dD61aF8
  • https://snowtrace.io/address/0x8AE344DEeD1526B1772adDF78718722A169288Dc
  • https://snowtrace.io/address/0x8BFB5291eEd1535B50ee6F1B8a8CEFc374FC49c5
  • https://snowtrace.io/address/0x8C75f9905a9fD94A0D95cb0801d7De33A432667C
  • https://snowtrace.io/address/0x90c670825d0C62ede1c5ee9571d6d9a17A722DFF
  • https://snowtrace.io/address/0x949FF0357eC250A6b1BcFE9B9E36822B8Bc2Eabf
  • https://snowtrace.io/address/0x97c067B65AC815c08d73B867fe32F61Ce772468F
  • https://snowtrace.io/address/0x9901D033dBDdFACBb82B768Bb913186E54F5EEd4
  • https://snowtrace.io/address/0x9ab2De34A33fB459b538c43f251eB825645e8595
  • https://snowtrace.io/address/0x9Dc4f12Eb2d8405b499FB5B8AF79a5f64aB8a457
  • https://snowtrace.io/address/0x9e295B5B976a184B14aD8cd72413aD846C299660
  • https://snowtrace.io/address/0x9F48160eDc3Ad78F4cA0E3FDF54A75D8FB228452
  • And 37 more on Immunefi.

Domains 2

  • app.gmx.io
  • gmx.io

Changes

Tracked since 11 Nov 2026. Last checked 42 minutes ago.

No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.

Before we tracked it

Scope and reward changes recorded before this page started tracking it.

  1. Reward terms

    The reward table or payout terms were edited

  2. Rules updated

    The program rules were edited

  3. Reward terms

    The reward table or payout terms were edited

  4. Rules updated

    Added: “Critical smart contract vulnerabilities are capped at 10% of economic damage, primarily”

  5. Reward raised

    Maximum $5,000,000 → $5,000,000

Public CVEs

Published vulnerabilities in this vendor's products, from the NVD.

Search NVD

No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.