Skip to content

Stargate

Bug bounty on Immunefi stargate.finance

Accepting reports KYC to get paid Aptos Arbitrum Avalanche
Top reward
$3,500,000
Top severity paid
Critical
Assets in scope
4
Public CVEs
0
Last change

At a glance

What to know before you start testing.

Pays up to $3,500,000
for critical bugs, from $500.
Payment
Proof of identity needed to get paid.

Rewards

What Immunefi lists as the payout for each severity.

Severity Reward
Critical $3,500,000 10% of funds at risk · from $100,000
Medium $10,000 from $500

Scope

4 assets you may test.

Smart contracts 3

  • https://etherscan.io/address/0x72fAEbF58A62e33C044c37D8D973a961633ea294#code
  • https://etherscan.io/address/0xAcdDAC6C77318B615f7F6fB9bb67c6833e9c05f1
  • https://explorer.solana.com/address/BRoueHsu3h2SfEse9ohXipm1R9uRGRSe3zPYsAT8RySr

Source code 1

  • https://github.com/stargate-protocol/stargate-v2/tree/main/packages/stg-evm-v2/deployments

Changes

Tracked since 11 Nov 2026. Last checked 56 minutes ago.

  1. Cut

    Top reward $10,000,000 to $3,500,000.

Before we tracked it

Scope and reward changes recorded before this page started tracking it.

  1. Reward cut

    Maximum $10,000,000 → $3,500,000

  2. Reward terms

    The reward table or payout terms were edited

  3. Rules updated

    The program rules were edited

  4. Rules updated

    The program rules were edited

  5. Reward terms

    The reward table or payout terms were edited

  6. Scope removed

    https://etherscan.io/address/0xc026395860Db2d07ee33e05fE50ed7bD583189C7

  7. Scope added

    https://github.com/stargate-protocol/stargate-v2/tree/main/packages/stg-evm-v2/deployments

  8. Scope added

    https://explorer.solana.com/address/BRoueHsu3h2SfEse9ohXipm1R9uRGRSe3zPYsAT8RySr

  9. Scope added

    https://etherscan.io/address/0x72fAEbF58A62e33C044c37D8D973a961633ea294#code

  10. Scope added

    https://etherscan.io/address/0xAcdDAC6C77318B615f7F6fB9bb67c6833e9c05f1

  11. Scope removed

    https://etherscan.io/address/0x6Dd69717B1194B81A92105B7e0F94cb40f68A3e3

  12. Scope removed

    https://etherscan.io/address/0x77b2043768d28E9C9aB44E1aBfC95944bcE57931

  13. Scope removed

    https://etherscan.io/address/0x933597a323Eb81cAe705C5bC29985172fd5A3973

  14. Scope removed

    https://etherscan.io/address/0xe171AFcd1E0394b3312e68ca823D5BC87F3Db311

  15. Scope removed

    https://etherscan.io/address/0x6d6620eFa72948C5f68A3C8646d58C00d3f4A980

  16. Scope removed

    https://etherscan.io/address/0x1041D127b2d4BC700F0F563883bC689502606918

  17. Rules updated

    Removed: “Primacy of Impact vs Primacy of Rules”

  18. Reward terms

    The reward table or payout terms were edited

  19. Rules updated

    Added: “Stargate is a composable crosschain liquidity protocol, and the first application built on LayerZero.”

  20. Scope removed

    https://etherscan.io/address/0x3E368B6C95c6fEfB7A16dCc0D756389F3c658a06

  21. Scope removed

    https://etherscan.io/address/0xFF551fEDdbeDC0AeE764139cCD9Cb644Bb04A6BD

  22. Scope removed

    https://etherscan.io/address/0x5871A7f88b0f3F5143Bf599Fd45F8C0Dc237E881

  23. Scope removed

    https://etherscan.io/address/0x52B35406CB2FB5e0038EdEcFc129A152a1f74087

  24. Scope removed

    https://etherscan.io/address/0x6D5521F46b2cba9443feFC09cBaC3B15AE0F73eB

  25. Scope removed

    https://etherscan.io/address/0x268Ca24DAefF1FaC2ed883c598200CcbB79E931D

  26. Scope removed

    https://etherscan.io/address/0xcDafB1b2dB43f366E48e6F614b8DCCBFeeFEEcD3

Public CVEs

Published vulnerabilities in this vendor's products, from the NVD.

Search NVD

No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.