Skip to content

Orca

Bug bounty on Immunefi orca.so

Accepting reports No KYC AMM Crosschain Liquidity Defi
Top reward
$500,000
Top severity paid
Critical
Assets in scope
2
Public CVEs
0
Last change

At a glance

What to know before you start testing.

Pays up to $500,000
for critical bugs, from $10,000.
Payment
No identity check to get paid.

Rewards

What Immunefi lists as the payout for each severity.

Severity Reward
Critical $500,000 10% of funds at risk
High $50,000
Medium $10,000

Scope

2 assets you may test.

Smart contracts 2

  • https://solscan.io/account/StaKE6XNKVVhG8Qu9hDJBqCW3eRe7MDGLz17nJZetLT
  • https://solscan.io/account/whirLbMiicVdio4qvUfM5KAg6Ct8VwpYzGff3uctyCc

Changes

Tracked since 11 Nov 2026. Last checked 55 minutes ago.

No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.

Before we tracked it

Scope and reward changes recorded before this page started tracking it.

  1. Scope removed

    https://solscan.io/account/waveQX2yP3H1pVU8djGvEHmYg8uamQ84AuyGtpsrXTF

Public CVEs

Published vulnerabilities in this vendor's products, from the NVD.

Search NVD

No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.