Origin Protocol
Bug bounty on Immunefi originprotocol.com
- Top reward
- $1,000,000
- Top severity paid
- Critical
- Assets in scope
- 57
- Public CVEs
- 1
- Last change
At a glance
What to know before you start testing.
- Pays up to $1,000,000
- for critical bugs, from $2,000.
- Report on Immunefi
- Submit through the program page.
- Full safe harbor
- Good-faith research is authorised; no legal action.
- Payment
- No identity check to get paid.
Rewards
What Immunefi lists as the payout for each severity.
| Severity | Applies to | Relative size | Reward |
|---|---|---|---|
| Critical Web | Web |
|
$25,000 |
| Critical Contract | Contract |
|
$1,000,000 10% of funds at risk |
| High Contract | Contract |
|
$15,000 from $2,000 |
Scope
57 assets you may test.
Smart contracts 56
- https://arbiscan.io/address/0xD8724322f44E5c58D7A815F542036fb17DbbF839
- https://basescan.org/address/0x0CbEAcf86232fC04050cD679d860516F7254c22E
- https://basescan.org/address/0x3b56c09543D3068f8488ED34e6F383c3854d2bC1
- https://basescan.org/address/0x7FcD174E80f264448ebeE8c88a7C4476AAF58Ea6
- https://basescan.org/address/0x80c864704DD06C3693ed5179190786EE38ACf835
- https://basescan.org/address/0x98a0CbeF61bD2D21435f433bE4CD42B56B38CC93
- https://basescan.org/address/0x9cfcAF81600155e01c63e4D2993A8A81A8205829
- https://basescan.org/address/0xa03360b3f6d902F1b3334c0adBd5C6995d3513fe
- https://basescan.org/address/0xDBFeFD2e8460a6Ee4955A68582F85708BAEA60A3
- https://basescan.org/address/0xF611cC500eEE7E4e4763A05FE623E2363c86d2Af
- https://basescan.org/address/0xf817cb3092179083c48c014688D98B72fB61464f
- https://etherscan.io/address/0x01F30B7358Ba51f637d1aa05D9b4A60f76DAD680
- https://etherscan.io/address/0x03578bC4b5fB0cC0cA7A6AD05b06407ae6324a82
- https://etherscan.io/address/0x0C9ac6D63B2b2A1b502E29eC47a53d0966Ea9465
- https://etherscan.io/address/0x0DC20109Ea012f050BeDA184844c1eD5ec6dA33A
- https://etherscan.io/address/0x0F12256E27E658790C404C087C38ab4f34D53360
- https://etherscan.io/address/0x19B1Edb2caD902F103a20A30011f125DCe44F954
- https://etherscan.io/address/0x1b84E64279D63f48DdD88B9B2A7871e817152A44
- https://etherscan.io/address/0x1D3Fbd4d129Ddd2372EA85c5Fa00b2682081c9EC
- https://etherscan.io/address/0x25e1d468B14005716111d5e8464573e5135275f4
- https://etherscan.io/address/0x26a02ec47ACC2A3442b757F45E0A82B8e993Ce11
- https://etherscan.io/address/0x2A8e1E676Ec238d8A992307B495b45B3fEAa5e86
- https://etherscan.io/address/0x35918cDE7233F2dD33fA41ae3Cb6aE0e42E0e69F
- https://etherscan.io/address/0x3643cafA6eF3dd7Fcc2ADaD1cabf708075AFFf6e
- https://etherscan.io/address/0x39254033945AA2E4809Cc2977E7087BEE48bd7Ab
- https://etherscan.io/address/0x438731b5Ee8fEcC02a28532713E237b93260C3F8
- https://etherscan.io/address/0x43f35Fa72dcf93DaD9843Ab7B0E0587bF57d9643
- https://etherscan.io/address/0x63898b3b6Ef3d39332082178656E9862bee45C57
- https://etherscan.io/address/0x68025A4615407993A680102b08a23A61D11C657C
- https://etherscan.io/address/0x7b0a90552D2dc01936301A45bFC813717Af7E8a9
- https://etherscan.io/address/0x856c4Efb76C1D1AE02e20CEB03A2A6a08b0b8dC3
- https://etherscan.io/address/0x85B78AcA6Deae198fBF201c82DAF6Ca21942acc6
- https://etherscan.io/address/0x90d588fc0eC3DB9c4b417dB4537fE08e063D2ae5
- https://etherscan.io/address/0x9E3A7026E5767F2d7Ff5e83b0ed011005f45a170
- https://etherscan.io/address/0xAb98aC901B8A26636d9cf3Cf38d9aCdcD045788f
- https://etherscan.io/address/0xad2b1657E2c3243750B32Cb9A51169575945b05B
- https://etherscan.io/address/0xB1b9cf49B16DECc1634AEa0675C3b976FfE2B4F4
- https://etherscan.io/address/0xB1d624fc40824683e2bFBEfd19eB208DbBE00866
- https://etherscan.io/address/0xb7992eFDa9aBBaC3522336A626191D198fa37145
- https://etherscan.io/address/0xB7CeFE4CB483Be80C2963D3D9Edb991e69ff39cf
- https://etherscan.io/address/0xba0e352AB5c13861C26e4E773e7a833C3A223FE6
- https://etherscan.io/address/0xc4444C5D9e7C1a5A0a01c5E4b11692d589DcAF22
- https://etherscan.io/address/0xCEDa2d856238aA0D12f6329de20B9115f07C366d
- https://etherscan.io/address/0xD2af830E8CBdFed6CC11Bab697bB25496ed6FA62
- https://etherscan.io/address/0xD400341aEfED0BC75176714cFdE82e8BDAA2D3b8
- https://etherscan.io/address/0xD5F61bFd890169c28858039f6b6c9b517407C852
- https://etherscan.io/address/0xDA0485c1E74A7ef690E99D8286C243942eDAa07B
- https://etherscan.io/address/0xDcEe70654261AF21C44c093C300eD3Bb97b78192
- https://etherscan.io/address/0xE0228DB13F8C4Eb00fD1e08e076b09eF5cD0EA1e
- https://etherscan.io/address/0xE11EDbd5AE4Fa434Af7f8D7F03Da1742996e7Ab2
- https://etherscan.io/address/0xe192824f42ae3D643ac867774b45E8d233d86c72
- https://etherscan.io/address/0xE28ca056A12134b6B872D1CbE04cd1A82fDfeA95
- https://etherscan.io/address/0xE620aFB67223AE03C260112aE21A717Af94C90f0
- https://etherscan.io/address/0xE75D77B1865Ae93c7eaa3040B038D7aA7BC02F70
- https://etherscan.io/address/0xFa205c9a110a3e82Bd8d223CccCB15C5b9E6434e
- https://hyperevmscan.io/address/0x77121911A387c9e4Eae46345E0f831A6da8a1364
Domains 1
- app.originprotocol.com
Changes
Tracked since 11 Nov 2026. Last checked 55 minutes ago.
-
Scope +
Added to scope: https://etherscan.io/address/0x03578bC4b5fB0cC0cA7A6AD05b06407ae6324a82
-
Scope +
Added to scope: https://basescan.org/address/0x0F12256E27E658790C404C087C38ab4f34D53360
-
Scope +
Added to scope: https://etherscan.io/address/0xa03360b3f6d902F1b3334c0adBd5C6995d3513fe
Before we tracked it
Scope and reward changes recorded before this page started tracking it.
-
Reward terms
The reward table or payout terms were edited
-
Reward terms
The reward table or payout terms were edited
-
Scope added
https://basescan.org/address/0x0F12256E27E658790C404C087C38ab4f34D53360
-
Scope added
https://basescan.org/address/0x03578bC4b5fB0cC0cA7A6AD05b06407ae6324a82
-
Scope added
https://etherscan.io/address/0x03578bC4b5fB0cC0cA7A6AD05b06407ae6324a82
-
Scope added
https://etherscan.io/address/0xa03360b3f6d902F1b3334c0adBd5C6995d3513fe
-
Scope added
https://basescan.org/address/0xa03360b3f6d902F1b3334c0adBd5C6995d3513fe
-
Scope added
https://etherscan.io/address/0x0F12256E27E658790C404C087C38ab4f34D53360
-
Reward terms
The reward table or payout terms were edited
-
Scope added
https://etherscan.io/address/0xad2b1657E2c3243750B32Cb9A51169575945b05B
-
Scope added
https://etherscan.io/address/0xAb98aC901B8A26636d9cf3Cf38d9aCdcD045788f
-
Scope added
https://etherscan.io/address/0x0C9ac6D63B2b2A1b502E29eC47a53d0966Ea9465
-
Scope added
https://etherscan.io/address/0x19B1Edb2caD902F103a20A30011f125DCe44F954
-
Scope added
https://etherscan.io/address/0x9E3A7026E5767F2d7Ff5e83b0ed011005f45a170
-
Scope added
https://etherscan.io/address/0xE11EDbd5AE4Fa434Af7f8D7F03Da1742996e7Ab2
-
Scope added
https://etherscan.io/address/0xe192824f42ae3D643ac867774b45E8d233d86c72
-
Scope added
https://etherscan.io/address/0xD5F61bFd890169c28858039f6b6c9b517407C852
-
Scope added
https://etherscan.io/address/0xFa205c9a110a3e82Bd8d223CccCB15C5b9E6434e
-
Scope added
https://etherscan.io/address/0x7b0a90552D2dc01936301A45bFC813717Af7E8a9
-
Scope added
https://etherscan.io/address/0x68025A4615407993A680102b08a23A61D11C657C
-
Scope added
https://etherscan.io/address/0xE28ca056A12134b6B872D1CbE04cd1A82fDfeA95
-
Scope added
https://etherscan.io/address/0x1b84E64279D63f48DdD88B9B2A7871e817152A44
-
Scope added
https://etherscan.io/address/0x90d588fc0eC3DB9c4b417dB4537fE08e063D2ae5
-
Scope added
https://hyperevmscan.io/address/0x77121911A387c9e4Eae46345E0f831A6da8a1364
-
Scope added
https://etherscan.io/address/0x35918cDE7233F2dD33fA41ae3Cb6aE0e42E0e69F
-
Scope added
https://etherscan.io/address/0x01F30B7358Ba51f637d1aa05D9b4A60f76DAD680
-
Scope added
https://etherscan.io/address/0xB7CeFE4CB483Be80C2963D3D9Edb991e69ff39cf
-
Scope added
https://etherscan.io/address/0xB1b9cf49B16DECc1634AEa0675C3b976FfE2B4F4
-
Scope added
https://etherscan.io/address/0xE620aFB67223AE03C260112aE21A717Af94C90f0
-
Scope added
https://etherscan.io/address/0x43f35Fa72dcf93DaD9843Ab7B0E0587bF57d9643
-
Scope removed
https://etherscan.io/address/0x501804B374EF06fa9C427476147ac09F1551B9A0
-
Scope removed
https://etherscan.io/address/0x7609c88e5880e934dd3a75bcfef44e31b1badb8b#code
-
Scope removed
https://etherscan.io/address/0x95c347d6214614a780847b8aaf4f96eb84f4da6d
-
Scope added
https://basescan.org/address/0xD8724322f44E5c58D7A815F542036fb17DbbF839
-
Scope added
https://arbiscan.io/address/0xD8724322f44E5c58D7A815F542036fb17DbbF839
-
Scope added
https://etherscan.io/address/0x438731b5Ee8fEcC02a28532713E237b93260C3F8
-
Scope added
https://etherscan.io/address/0xDA0485c1E74A7ef690E99D8286C243942eDAa07B
-
Scope added
https://etherscan.io/address/0x856c4Efb76C1D1AE02e20CEB03A2A6a08b0b8dC3
-
Scope added
https://etherscan.io/address/0xD400341aEfED0BC75176714cFdE82e8BDAA2D3b8
-
Scope added
https://hyperevmscan.io/address/0xE0228DB13F8C4Eb00fD1e08e076b09eF5cD0EA1e
Public CVEs
Published vulnerabilities in this vendor's products, from the NVD.
| CVE | Summary | Severity | Published |
|---|---|---|---|
| CVE-2022-24864 | Origin Protocol is a blockchain based project. The Origin Protocol project website allows for malicious users to inject malicious Javascript via a POST request to `/presale/join`. User-controlled data is passed with no sanitization to SendGrid and injected into an email that is delivered to the [email protected]. If the email recipient is using an email program that is susceptible to XSS | Medium 4.1 | 20 Apr 2022 |