LayerZero
Bug bounty on Immunefi layerzero.network
- Top reward
- $3,500,000
- Top severity paid
- Critical
- Assets in scope
- 9
- Public CVEs
- 0
- Last change
At a glance
What to know before you start testing.
- Pays up to $3,500,000
- for critical bugs, from $25,000.
- Report on Immunefi
- Submit through the program page.
- Payment
- Proof of identity needed to get paid.
Rewards
What Immunefi lists as the payout for each severity.
| Severity | Relative size | Reward |
|---|---|---|
| Critical |
|
$3,500,000 10% of funds at risk · from $25,000 |
| High |
|
$250,000 |
| Medium |
|
$25,000 |
Scope
9 assets you may test.
Smart contracts 8
- https://etherscan.io/address/0x1a44076050125825900e736c501f859c50fe728c#code
- https://etherscan.io/address/0xbb2ea70c9e858123480642cf96acbcce1372dce1#code
- https://etherscan.io/address/0xc02ab410f0734efa3f14628780e6e695156024c2#code
- https://explorer.aptoslabs.com/object/0xc33752e0220faf79e45385dd73fb28d681dcd9f1569a1480725507c1f3c3aba9
- https://explorer.aptoslabs.com/object/0xe60045e20fc2c99e869c1c34a65b9291c020cd12a0d37a00a53ac1348af4f43c
- https://explorer.solana.com/address/6doghB248px58JSSwG4qejQ46kFMW4AMj7vzJnWZHNZn
- https://explorer.solana.com/address/76y77prsiCMvXMjuoZ5VRrhG5qYBrUMYTE5WgHqgjEn6
- https://explorer.solana.com/address/7a4WjyR8VZ7yZz5XJAKm39BUGn5iT9CKcv2pmG9tdXVH
Domains 1
- tonscan.org/address/eqaesrvqpywnqv9_1g8czmhmyts7_3j1jsp1nnn0yudbzreh
Changes
Tracked since 11 Nov 2026. Last checked 55 minutes ago.
-
Cut
Top reward $15,000,000 to $3,500,000.
Before we tracked it
Scope and reward changes recorded before this page started tracking it.
-
Scope removed
https://tonviewer.com/0:150645746e25be5486eb3b2f5d98b44c6b324697c48d495d059f96fc9d3ec368
-
Scope removed
https://etherscan.io/address/0xD231084BfB234C107D3eE2b22F97F3346fDAF705#code
-
Scope removed
https://github.com/LayerZero-Labs/solidity-examples/blob/main/contracts/token/onft1155/ONFT1155.sol
-
Scope removed
https://github.com/LayerZero-Labs/devtools/tree/main/packages/oapp-evm/contracts/oapp
-
Scope removed
https://tonviewer.com/0:1eb2bbea3d8c0d42ff7fd60f0264c866c934bbff727526ca759e7374cae0c166
-
Scope removed
https://etherscan.io/address/0x245b6e8ffe9ea5fc301e32d16f66bd4c2123eefc#code
-
Scope removed
https://github.com/LayerZero-Labs/solidity-examples/blob/main/contracts/token/onft721/ONFT721.sol
-
Scope added
https://tonscan.org/address/EQAesrvqPYwNQv9_1g8CZMhmyTS7_3J1Jsp1nnN0yuDBZrEH
-
Scope added
https://explorer.aptoslabs.com/object/0xc33752e0220faf79e45385dd73fb28d681dcd9f1569a1480725507c1f3c3aba9
-
Scope added
https://explorer.aptoslabs.com/object/0xe60045e20fc2c99e869c1c34a65b9291c020cd12a0d37a00a53ac1348af4f43c
-
Scope removed
https://etherscan.io/address/0x589dedbd617e0cbcb916a9223f4d1300c294236b#code
-
Scope removed
https://etherscan.io/address/0x66A71Dcef29A0fFBDBE3c6a460a3B5BC225Cd675#code
-
Scope removed
https://github.com/LayerZero-Labs/devtools/tree/main/packages/oft-evm/contracts
-
Scope removed
https://github.com/LayerZero-Labs/devtools/tree/main/examples/oft-solana
-
Scope removed
https://github.com/LayerZero-Labs/solidity-examples/blob/main/contracts/token/oft/v2/OFTV2.sol
-
Scope removed
https://explorer.solana.com/address/4VDjp6XQaxoZf5RGwiPU9NR1EXSZn2TP4ATMmiSzLfhb
-
Scope removed
https://aptoscan.com/account/0x54ad3d30af77b60d939ae356e6606de9a4da67583f02b962d2d3f2e481484e90
-
Scope removed
https://github.com/LayerZero-Labs/solidity-examples/blob/main/contracts/token/oft/v1/OFT.sol
-
Scope removed
https://tonviewer.com/0:0d122dec4ec8bd66c68344faf0dd471d727a7d57a21b62051705bbe2e4c272a7
-
Scope removed
https://etherscan.io/address/0x07245eEa05826F5984c7c3C8F478b04892e4df89
-
Scope removed
https://etherscan.io/address/0x4d73adb72bc3dd368966edd0f0b2148401a178e2#code
-
Rules updated
Removed: “LayerZero is an omnichain interoperability protocol that allows developers to seamlessly interact with contracts across dozens of blockchains.”
-
Reward cut
Maximum $15,000,000 → $3,500,000
-
Reward terms
The reward table or payout terms were edited
-
Reward terms
The reward table or payout terms were edited
-
Rules updated
Added: “LayerZero adheres to the Primacy of Impact for the following impacts:”
-
Reward terms
The reward table or payout terms were edited
Public CVEs
Published vulnerabilities in this vendor's products, from the NVD.
No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.