Skip to content

NUVA

Bug bounty on Immunefi nuva.finance

Paused KYC to get paid web3
Top reward
$40,000
Top severity paid
Critical
Assets in scope
9
Public CVEs
0
Last change

At a glance

What to know before you start testing.

Pays up to $40,000
for critical bugs, from $1,000.
Payment
Proof of identity needed to get paid.

Rewards

What Immunefi lists as the payout for each severity.

Severity Reward
Critical Web $20,000 from $5,000
Critical Contract $40,000 10% of funds at risk · from $10,000
High Web $3,000
High Contract $10,000 from $3,000
Medium Web $2,000
Medium Contract $2,000
Low Web $1,000
Low Contract $1,000

Scope

9 assets you may test.

Smart contracts 7

  • https://etherscan.io/address/0x50AE1e4A612A4623b747aEeFb30aFBA82804e12c No bounty
  • https://etherscan.io/address/0xBB2f90A20AbC107161c0C66e2f7015bdb1D2c2f9 No bounty
  • https://etherscan.io/address/0xC360e625F19A7ea47e47810B13E386221d5187D1 No bounty
  • https://etherscan.io/address/0xCB74517bfDe9Af6692C5C7D4A125b20bA7FA14D5 No bounty
  • https://etherscan.io/token/0x5965f8e28eC14B58E49569f382A50F4f0B238327 No bounty
  • https://zonescan.io/provenance/accounts/pb15y0f2zkc9a2cgyqkhpp3z9u6fmvtegf92s7ndx No bounty
  • https://zonescan.io/provenance/contracts/pb10yzuaqqjsf4pwv6wkp87dqka0scrcgf92k92j6qkz9msc6qyzt3qqgl7e4 No bounty

Domains 2

  • app.nuva.finance No bounty
  • nuva.finance No bounty

Changes

Tracked since 11 Nov 2026. Last checked 8 minutes ago.

  1. Paused

    Paused. Not accepting reports right now.

Before we tracked it

Scope and reward changes recorded before this page started tracking it.

  1. Status

    Program status changed

Public CVEs

Published vulnerabilities in this vendor's products, from the NVD.

Search NVD

No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.