Skip to content

LayerZero

Bug bounty on Immunefi layerzero.network

Accepting reports KYC to get paid Aptos Arbitrum Astar zkEVM
Top reward
$3,500,000
Top severity paid
Critical
Assets in scope
9
Public CVEs
0
Last change

At a glance

What to know before you start testing.

Pays up to $3,500,000
for critical bugs, from $25,000.
Payment
Proof of identity needed to get paid.

Rewards

What Immunefi lists as the payout for each severity.

Severity Reward
Critical $3,500,000 10% of funds at risk · from $25,000
High $250,000
Medium $25,000

Scope

9 assets you may test.

Smart contracts 8

  • https://etherscan.io/address/0x1a44076050125825900e736c501f859c50fe728c#code
  • https://etherscan.io/address/0xbb2ea70c9e858123480642cf96acbcce1372dce1#code
  • https://etherscan.io/address/0xc02ab410f0734efa3f14628780e6e695156024c2#code
  • https://explorer.aptoslabs.com/object/0xc33752e0220faf79e45385dd73fb28d681dcd9f1569a1480725507c1f3c3aba9
  • https://explorer.aptoslabs.com/object/0xe60045e20fc2c99e869c1c34a65b9291c020cd12a0d37a00a53ac1348af4f43c
  • https://explorer.solana.com/address/6doghB248px58JSSwG4qejQ46kFMW4AMj7vzJnWZHNZn
  • https://explorer.solana.com/address/76y77prsiCMvXMjuoZ5VRrhG5qYBrUMYTE5WgHqgjEn6
  • https://explorer.solana.com/address/7a4WjyR8VZ7yZz5XJAKm39BUGn5iT9CKcv2pmG9tdXVH

Domains 1

  • tonscan.org/address/eqaesrvqpywnqv9_1g8czmhmyts7_3j1jsp1nnn0yudbzreh

Changes

Tracked since 11 Nov 2026. Last checked 55 minutes ago.

  1. Cut

    Top reward $15,000,000 to $3,500,000.

Before we tracked it

Scope and reward changes recorded before this page started tracking it.

  1. Scope removed

    https://tonviewer.com/0:150645746e25be5486eb3b2f5d98b44c6b324697c48d495d059f96fc9d3ec368

  2. Scope removed

    https://etherscan.io/address/0xD231084BfB234C107D3eE2b22F97F3346fDAF705#code

  3. Scope removed

    https://github.com/LayerZero-Labs/solidity-examples/blob/main/contracts/token/onft1155/ONFT1155.sol

  4. Scope removed

    https://github.com/LayerZero-Labs/devtools/tree/main/packages/oapp-evm/contracts/oapp

  5. Scope removed

    https://tonviewer.com/0:1eb2bbea3d8c0d42ff7fd60f0264c866c934bbff727526ca759e7374cae0c166

  6. Scope removed

    https://etherscan.io/address/0x245b6e8ffe9ea5fc301e32d16f66bd4c2123eefc#code

  7. Scope removed

    https://github.com/LayerZero-Labs/solidity-examples/blob/main/contracts/token/onft721/ONFT721.sol

  8. Scope added

    https://tonscan.org/address/EQAesrvqPYwNQv9_1g8CZMhmyTS7_3J1Jsp1nnN0yuDBZrEH

  9. Scope added

    https://explorer.aptoslabs.com/object/0xc33752e0220faf79e45385dd73fb28d681dcd9f1569a1480725507c1f3c3aba9

  10. Scope added

    https://explorer.aptoslabs.com/object/0xe60045e20fc2c99e869c1c34a65b9291c020cd12a0d37a00a53ac1348af4f43c

  11. Scope removed

    https://etherscan.io/address/0x589dedbd617e0cbcb916a9223f4d1300c294236b#code

  12. Scope removed

    https://etherscan.io/address/0x66A71Dcef29A0fFBDBE3c6a460a3B5BC225Cd675#code

  13. Scope removed

    https://github.com/LayerZero-Labs/devtools/tree/main/packages/oft-evm/contracts

  14. Scope removed

    https://github.com/LayerZero-Labs/devtools/tree/main/examples/oft-solana

  15. Scope removed

    https://github.com/LayerZero-Labs/solidity-examples/blob/main/contracts/token/oft/v2/OFTV2.sol

  16. Scope removed

    https://explorer.solana.com/address/4VDjp6XQaxoZf5RGwiPU9NR1EXSZn2TP4ATMmiSzLfhb

  17. Scope removed

    https://aptoscan.com/account/0x54ad3d30af77b60d939ae356e6606de9a4da67583f02b962d2d3f2e481484e90

  18. Scope removed

    https://github.com/LayerZero-Labs/solidity-examples/blob/main/contracts/token/oft/v1/OFT.sol

  19. Scope removed

    https://tonviewer.com/0:0d122dec4ec8bd66c68344faf0dd471d727a7d57a21b62051705bbe2e4c272a7

  20. Scope removed

    https://etherscan.io/address/0x07245eEa05826F5984c7c3C8F478b04892e4df89

  21. Scope removed

    https://etherscan.io/address/0x4d73adb72bc3dd368966edd0f0b2148401a178e2#code

  22. Rules updated

    Removed: “LayerZero is an omnichain interoperability protocol that allows developers to seamlessly interact with contracts across dozens of blockchains.”

  23. Reward cut

    Maximum $15,000,000 → $3,500,000

  24. Reward terms

    The reward table or payout terms were edited

  25. Reward terms

    The reward table or payout terms were edited

  26. Rules updated

    Added: “LayerZero adheres to the Primacy of Impact for the following impacts:”

  27. Reward terms

    The reward table or payout terms were edited

Public CVEs

Published vulnerabilities in this vendor's products, from the NVD.

Search NVD

No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.