Skip to content
bugbounty.fyi
Get paid to secure open source 475 paid open-source programs on Sorona, up to $1M Perk Low bugs: $100 or 1 mo Claude Max

Also on Patchstack. All 476 paid open-source programs

Try

Highest paying Newly launched Paid without KYC Full safe harbor
All results

About this site

Ondo Finance

Bug bounty on Immunefi

Accepting reports KYC to get paid Defi ETH Rust
Go to program
Top reward
$1,000,000
Top severity paid
Critical
Assets in scope
120
Public CVEs
0
Last change

At a glance

What to know before you start testing.

Pays up to $1,000,000
for critical bugs, from $1,000.
Report on Immunefi
Submit through the program page.
Payment
Proof of identity needed to get paid.

Rewards

What Immunefi lists as the payout for each severity.

Severity Reward
Critical $1,000,000 10% of funds at risk · from $50,000
High $50,000 from $11,000
Medium $10,000
Low $1,000

Scope

120 assets you may test.

Smart contracts 120

  • https://arbiscan.io/address/0x0bE393DC46248E4285dc5CAcA3084bc7e9bfbB41#code
  • https://arbiscan.io/address/0x35e050d3C0eC2d29D269a8EcEa763a183bDF9A9D
  • https://bscscan.com/address/0x01bB8620c0aEF4390c983A5A792d178AF2733e82
  • https://bscscan.com/address/0x028c1ed9506D11208b48CdC0d661e2c65c29294d
  • https://bscscan.com/address/0x058d2EFcD3C09E5c34Fd55D038Cc84f6B978F84F
  • https://bscscan.com/address/0x14032815B65f6B65f23d2532ad5F5DFf7BE48C03
  • https://bscscan.com/address/0x180EeCc78a99d32E925Ff6a0Ed42adA2AbfdD1bB
  • https://bscscan.com/address/0x1f8955E640Cbd9abc3C3Bb408c9E2E1f5F20DfE6
  • https://bscscan.com/address/0x28B2C711156EfB3238A19eFa6E0bF85F3523Bac4
  • https://bscscan.com/address/0x2ced30744edcF9eDe5799eb07a0A29CE4f012a0c
  • https://bscscan.com/address/0x2D3Fa4e1AaB6E4BBd909CF81518A8084873c47B5
  • https://bscscan.com/address/0x341f9e6463161F0C90037Cbc0150DC54e6d1e06e
  • https://bscscan.com/address/0x3e8Aa5A0Da924F6F7471D3DACc420a3Dd6999bC5
  • https://bscscan.com/address/0x4D4E562D6882Dc523B8d629d2E9dF9230B699933
  • https://bscscan.com/address/0x55E0b3aC59D3F6A924483B25A9F3D83C0Dd7C31c
  • https://bscscan.com/address/0x578f397CA4661D1dB4D9a65065D6B284A1A850fd
  • https://bscscan.com/address/0x5f7d50242206993A4476C76b21950219a4ED2c91
  • https://bscscan.com/address/0x6334924c787Ebd21C881740Ef6237Ef51962638F
  • https://bscscan.com/address/0x643Aa7AD6D443fB25745F4072B169D334a827077
  • https://bscscan.com/address/0x75D1668C421c33D7Ae91072cf81D5f57a20bC3E1
  • https://bscscan.com/address/0x76be569C94C39a2E2492DE2F4D1C253F348250D0
  • https://bscscan.com/address/0x818D560D5197C6DF7afFc41833289C453aDEE738
  • https://bscscan.com/address/0x8760e42a5aA004969AbfdDc97a6cbbB6241e5728
  • https://bscscan.com/address/0x87786323ad9997924B22eac3AA9f71f562795633
  • https://bscscan.com/address/0x898128F9f22c0192da0c5acD394D9eeAc461D911
  • https://bscscan.com/address/0x91f8Aff3738825e8eB16FC6f6b1A7A4647bDB299
  • https://bscscan.com/address/0x96b525B1a93f31E65F4aAf18C53842eD28525D48
  • https://bscscan.com/address/0xA21Ed4C3122fc51c6D6Db0d668D968C3B3f689CB
  • https://bscscan.com/address/0xA2aA93cbB069B4BF246258E4D9cD093B914DcDFE
  • https://bscscan.com/address/0xC246D6619C30CbC7AFF319019761cC49D20b937E
  • https://bscscan.com/address/0xC58584FF45b06822f49Ec8871BA8af9B8943A689
  • https://bscscan.com/address/0xC9F8A9922917731f8a8ED21F6F131655B9cfd5Fe
  • https://bscscan.com/address/0xCd6D30a1A585eb67E0d0ef5c1ae601BE20862897
  • https://bscscan.com/address/0xF131D1E7bb84e111A8Ee729A0871e358309185B9
  • https://bscscan.com/address/0xF4Fd8a1B412633e10527454137A29Db7Aa35F15e
  • https://bscscan.com/address/0xfBBf4fF845339993BCacA6D425b09c50E6a27Be6
  • https://etherscan.io/address/0x0502c5ae08E7CD64fe1AEDA7D6e229413eCC6abe
  • https://etherscan.io/address/0x05CCbB4b74854f8A067b83475E8c34f5a413D7e1
  • https://etherscan.io/address/0x0b34233a94c3433092009D8903080553039bB7a1
  • https://etherscan.io/address/0x10d8bbFAE5dF091DC1646A95685F7aFAe0c853E7
  • https://etherscan.io/address/0x14dd822e1b75253525a209e3cc917cd0d54b6cae
  • https://etherscan.io/address/0x156F73fc73197555e950743Cb2B23F411c751002
  • https://etherscan.io/address/0x1B19C19393e2d034D8Ff31ff34c81252FcBbee92
  • https://etherscan.io/address/0x1cb2Dcc325615d02ae384941149d1dA6521fa018
  • https://etherscan.io/address/0x25A103A1D6AeC5967c1A4fe2039cdc514886b97e
  • https://etherscan.io/address/0x27370016A46fF10255b8DAAbE7035f5203ce280E
  • https://etherscan.io/address/0x2c158BC456e027b2AfFCCadF1BDBD9f5fC4c5C8c
  • https://etherscan.io/address/0x355c78ef949270A32e31174C057562F7469fE831
  • https://etherscan.io/address/0x44cBF4D4Db78a48F80d54b61FA1955979f07AEfd
  • https://etherscan.io/address/0x54043c656F0FAd0652D9Ae2603cDF347c5578d00
  • https://etherscan.io/address/0x54a8757c2FEF8649830b158a8C19D3a670e80318
  • https://etherscan.io/address/0x54aC0E5f60EC257385f134D5Fa490A00e5ddD17c
  • https://etherscan.io/address/0x56A5D911052323D688C731d516530878557463e7
  • https://etherscan.io/address/0x5C8AD93f75805FB504FAc767378A170420671c32
  • https://etherscan.io/address/0x6658F677902e1Df805AdF42fac015E1124AEbFDB
  • https://etherscan.io/address/0x7a17Ad297b79f1fA7e40FF4F81A332bE85D10f29
  • https://etherscan.io/address/0x87b126e5518b6a1Bb8465779b4607C45C643DF90
  • https://etherscan.io/address/0x914D5Cb27cb30E80BdE8215ff577eD63Eb986B79
  • https://etherscan.io/address/0x93358db73B6cd4b98D89c8F5f230E81a95c2643a
  • https://etherscan.io/address/0x95feCDD21D48426d3bAd195c6A3f0686e6b4d635
  • https://etherscan.io/address/0x96F6eF951840721AdBF46Ac996b59E0235CB985C
  • https://etherscan.io/address/0x98Db502215Da1ad9F626D4a0090A8A2f4971003c
  • https://etherscan.io/address/0x99B8d1D1c17a10CD1A878d1A44c11fd7E4daD7bC
  • https://etherscan.io/address/0x9BC39DB6fbB44B91a48b8D5A6C208B82B1741bE6
  • https://etherscan.io/address/0x9Cad45a8BF0Ed41Ff33074449B357C7a1fAb4094
  • https://etherscan.io/address/0x9F205E1aC7698F59EdbAa0a28C4A4c4ed605b722
  • https://etherscan.io/address/0xa0219aa5b31e65bc920b5b6dfb8edf0988121de0
  • https://etherscan.io/address/0xa42613C243b67BF6194Ac327795b926B4b491f15
  • https://etherscan.io/address/0xa6275720b3fB1Efe3E6EF2b5BF2293148852307D#code
  • https://etherscan.io/address/0xAcE8E719899F6E91831B18AE746C9A965c2119F1
  • https://etherscan.io/address/0xADC4966E4F8CAAf12C777f07AA7A0Ae8D894cDf3
  • https://etherscan.io/address/0xaf37c1167910ebc994e266949387d2c7c326b879
  • https://etherscan.io/address/0xbC6D5C103a3f586e68bd475942a49d041b171C3e
  • https://etherscan.io/address/0xcf6958D69d535FD03BD6Df3F4fe6CDcd127D97df
  • https://etherscan.io/address/0xD2746617c58b72254785BDb483e04f311c858d5f
  • https://etherscan.io/address/0xE1cb24077d77d2fE763fCAC63e5653D97dc8D20C
  • https://etherscan.io/address/0xe28AfEC27C50096B4e98cd5546eAE8414b5e7542
  • https://etherscan.io/address/0xE59dbF08CccF8D1ab90156b9664d31Fd20BB2AC7
  • https://etherscan.io/address/0xE60F44AA6b7084d5Ca05D0e9145921e94bc23caB
  • https://etherscan.io/address/0xe9b3c628103580702b465c052f67843cac61fb35
  • https://etherscan.io/address/0xeA8dBF5F3456FaB742fc11b977330A58069758eF
  • https://etherscan.io/address/0xEaC2181075BA0FC53D5141B17943Ea9F913954e6
  • https://etherscan.io/address/0xebBcb2cEE51c2FeE4062c9C1270dcb98B0b22250
  • https://etherscan.io/address/0xec8bBB0c90c0B5F4D8240D0F7b49DA3b0aA41f4E
  • https://etherscan.io/address/0xf0Bc39Fc911F6437C84d16188dD8294F7110f451
  • https://etherscan.io/address/0xf1586e1BEb654435E320a5fd0263F174Af71f03E
  • https://etherscan.io/address/0xF16c188c2D411627d39655A60409eC6707D3d5e8
  • https://etherscan.io/address/0xfD48112E448417CA79305a518c4186dF4b0A200a
  • https://etherscan.io/address/0xff2BABA46Df92919705E60120C477Ae5b7341Eb3
  • https://explorer.aptoslabs.com/account/0xcfea864b32833f157f042618bd845145256b1bf4c0da34a7013b76e42daa53cc/modules/code/usdy?network=mainnet
  • https://explorer.mantle.xyz/address/0x5bE26527e817998A7206475496fDE1E68957c5A6
  • https://explorer.mantle.xyz/address/0xA96abbe61AfEdEB0D14a20440Ae7100D9aB4882f#code
  • https://explorer.mantle.xyz/address/0xab575258d37EaA5C8956EfABe71F4eE8F6397cF3?tab=contract#address-tabs
  • https://explorer.plume.org/address/0xD2B65e851Be3d80D3c2ce795eB2E78f16cB088b2
  • https://explore.tempo.xyz/address/0x2ccc69bAaB923c358F2bD7aA2DC90159fdB1977F
  • https://explore.tempo.xyz/address/0x37Cfdb6fc80B11693a0B461dEbD4dcC6AFA57727
  • https://explore.tempo.xyz/address/0x6B4e041956159a5E01377e035af2C0189378cBaF
  • https://explore.tempo.xyz/address/0x6Dc6DD2375ED71F990b114b6739D7ad4262dBc70
  • https://explore.tempo.xyz/address/0x7E2A9d8B3B97EDa5922cdb320fC96e0ff4C8B4C5
  • https://explore.tempo.xyz/address/0x8ff4cbfEedD9565251482117eecFa5D910b4183B
  • https://explore.tempo.xyz/address/0x99042B6C9094dDeFBE06cB5AC642377c38e71aB8
  • https://explore.tempo.xyz/address/0x9BfC5B42ada75037f5E4fD7486709Ce95B9830Cb
  • https://explore.tempo.xyz/address/0x9c90817f3aB8D37a40e96deF7073673B8326201D
  • https://explore.tempo.xyz/address/0x9C9f9fccD6e25a3158076cBb5396925E7da60719
  • https://explore.tempo.xyz/address/0xA5F9975a4334CF3fB411357A252e2fCC7b322999
  • https://explore.tempo.xyz/address/0xb25b3266467a755328cfb8F1b349319C2B94419C
  • https://explore.tempo.xyz/address/0xDE06fcB8D87c6b20f88B092eCF675e11C0df886E
  • https://explore.tempo.xyz/address/0xf03746D4172c7c397CC7255D25C51b3ff16818eB
  • https://polygonscan.com/address/0x7cd852c0d7613aa869e632929560f310d4059ac1
  • https://polygonscan.com/address/0xbA11C5effA33c4D6F8f593CFA394241CfE925811
  • https://seiscan.io/address/0x54cD901491AeF397084453F4372B93c33260e2A6
  • https://seiscan.io/address/0x6f04B655d5209E85E47D3920A2EF407A66e83f6c
  • https://solscan.io/account/3cKyGYojYbFxeUnBf5xak3cTpaxmYuzpFbSnP9n3kyui
  • https://solscan.io/account/7YNReenG6AXgVUfmSizt6hoVXrznS4zDdgCj1UTLJ2S3
  • https://solscan.io/account/A1KLoBrKBde8Ty9qtNQUtq3C2ortoC3u7twggz7sEto6#metadata
  • https://solscan.io/account/CKW82CT7QtJUDkxCa6sSHZ3UXvUSu6EuGDXUtKyXgn67
  • https://solscan.io/account/i7u4r16TcsJTgq1kAG8opmVZyVnAKBwLKu6ZPMwzxNc#metadata
  • https://solscan.io/account/XzTT4XB8m7sLD2xi6snefSasaswsKCxx5Tifjondogm
  • https://www.mintscan.io/noble/assets/native/YXVzZHk=
  • https://www.oklink.com/xlayer/address/0x5903E2Be82832c42a868A4748B64b5c401DE91Eb/contract#category=read

Changes

Tracked since 11 Nov 2026. Last checked 58 minutes ago.

No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.

Before we tracked it

Scope and reward changes recorded before this page started tracking it.

  1. Reward terms

    The reward table or payout terms were edited

  2. Rules updated

    The program rules were edited

  3. Reward terms

    The reward table or payout terms were edited

  4. Scope added

    https://bscscan.com/address/0x058d2EFcD3C09E5c34Fd55D038Cc84f6B978F84F

  5. Scope added

    https://bscscan.com/address/0x8760e42a5aA004969AbfdDc97a6cbbB6241e5728

  6. Scope added

    https://bscscan.com/address/0xfBBf4fF845339993BCacA6D425b09c50E6a27Be6

  7. Scope added

    https://bscscan.com/address/0xC9F8A9922917731f8a8ED21F6F131655B9cfd5Fe

  8. Scope added

    https://bscscan.com/address/0xC246D6619C30CbC7AFF319019761cC49D20b937E

  9. Scope added

    https://bscscan.com/address/0x643Aa7AD6D443fB25745F4072B169D334a827077

  10. Scope added

    https://bscscan.com/address/0x180EeCc78a99d32E925Ff6a0Ed42adA2AbfdD1bB

  11. Scope added

    https://etherscan.io/address/0x5C8AD93f75805FB504FAc767378A170420671c32

  12. Scope added

    https://bscscan.com/address/0x75D1668C421c33D7Ae91072cf81D5f57a20bC3E1

  13. Scope added

    https://etherscan.io/address/0xf1586e1BEb654435E320a5fd0263F174Af71f03E

  14. Scope added

    https://bscscan.com/address/0x3e8Aa5A0Da924F6F7471D3DACc420a3Dd6999bC5

  15. Scope added

    https://etherscan.io/address/0x355c78ef949270A32e31174C057562F7469fE831

  16. Scope added

    https://explore.tempo.xyz/address/0xb25b3266467a755328cfb8F1b349319C2B94419C

  17. Scope added

    https://explore.tempo.xyz/address/0x37Cfdb6fc80B11693a0B461dEbD4dcC6AFA57727

  18. Scope added

    https://explore.tempo.xyz/address/0x2ccc69bAaB923c358F2bD7aA2DC90159fdB1977F

  19. Scope added

    https://explore.tempo.xyz/address/0x9c90817f3aB8D37a40e96deF7073673B8326201D

  20. Scope added

    https://explore.tempo.xyz/address/0x6B4e041956159a5E01377e035af2C0189378cBaF

  21. Scope added

    https://explore.tempo.xyz/address/0x6Dc6DD2375ED71F990b114b6739D7ad4262dBc70

  22. Scope added

    https://explore.tempo.xyz/address/0xA5F9975a4334CF3fB411357A252e2fCC7b322999

  23. Scope added

    https://explore.tempo.xyz/address/0xDE06fcB8D87c6b20f88B092eCF675e11C0df886E

  24. Scope added

    https://explore.tempo.xyz/address/0x9C9f9fccD6e25a3158076cBb5396925E7da60719

  25. Scope added

    https://explore.tempo.xyz/address/0x9BfC5B42ada75037f5E4fD7486709Ce95B9830Cb

  26. Scope added

    https://explore.tempo.xyz/address/0x8ff4cbfEedD9565251482117eecFa5D910b4183B

  27. Scope added

    https://explore.tempo.xyz/address/0xf03746D4172c7c397CC7255D25C51b3ff16818eB

  28. Scope added

    https://explore.tempo.xyz/address/0x99042B6C9094dDeFBE06cB5AC642377c38e71aB8

  29. Scope added

    https://bscscan.com/address/0x028c1ed9506D11208b48CdC0d661e2c65c29294d

  30. Scope added

    https://bscscan.com/address/0xF131D1E7bb84e111A8Ee729A0871e358309185B9

  31. Scope added

    https://etherscan.io/address/0x54aC0E5f60EC257385f134D5Fa490A00e5ddD17c

  32. Scope added

    https://bscscan.com/address/0x341f9e6463161F0C90037Cbc0150DC54e6d1e06e

  33. Scope added

    https://etherscan.io/address/0xec8bBB0c90c0B5F4D8240D0F7b49DA3b0aA41f4E

  34. Scope added

    https://explore.tempo.xyz/address/0x7E2A9d8B3B97EDa5922cdb320fC96e0ff4C8B4C5

  35. Scope added

    https://bscscan.com/address/0x818D560D5197C6DF7afFc41833289C453aDEE738

  36. Scope added

    https://bscscan.com/address/0xA2aA93cbB069B4BF246258E4D9cD093B914DcDFE

  37. Scope added

    https://etherscan.io/address/0x6658F677902e1Df805AdF42fac015E1124AEbFDB

  38. Scope added

    https://bscscan.com/address/0x28B2C711156EfB3238A19eFa6E0bF85F3523Bac4

  39. Rules updated

    Added: “Effects from OndoCompliance being intentionally unconfigured for USDY on Tempo, with the blocklist and sanctions list left unset. Transfer-level compliance for...”

  40. Scope added

    https://solscan.io/account/i7u4r16TcsJTgq1kAG8opmVZyVnAKBwLKu6ZPMwzxNc#metadata

Public CVEs

Published vulnerabilities in this vendor's products, from the NVD.

No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.