Skip to content

Yearn Finance

Bug bounty on Immunefi yearn.fi

Accepting reports No KYC Blockchain Defi ETH
Top reward
$200,000
Top severity paid
Critical
Assets in scope
47
Public CVEs
0
Last change

At a glance

What to know before you start testing.

Pays up to $200,000
for critical bugs, from $1,000.
Payment
No identity check to get paid.

Rewards

What Immunefi lists as the payout for each severity.

Severity Reward
Critical $200,000 from $20,000
High $20,000 from $5,000
Medium $5,000 from $1,000

Scope

47 assets you may test.

Smart contracts 47

  • https://etherscan.io/address/0x0000000C90799449af8eE0B240Da639144a36C6A
  • https://etherscan.io/address/0x0bc529c00c6401aef6d220be8c6ea1667f6ad93e#code
  • https://etherscan.io/address/0x1111111Ecd5Ae05422aeCe517072ec33Dbf34af9#code
  • https://etherscan.io/address/0x1c221980AAb2E52Ccc02180E0c171Ca5E5ffDFD6
  • https://etherscan.io/address/0x1d02F6A86Ed5650f93E40FCD62fa5727c32ad746#code
  • https://etherscan.io/address/0x22222222aEA0076fCA927a3f44dc0B4FdF9479D6#code
  • https://etherscan.io/address/0x24b267AA3946209ca19231d0f17110577be00A86
  • https://etherscan.io/address/0x2548BF65916fdABB5A5673fC4225011FF29ee884
  • https://etherscan.io/address/0x310aC28ACF5E514abDbFF9Ab25e21f1bfe22bcAC
  • https://etherscan.io/address/0x310f5Db015E9d6E542fd41bd4542640790791e76
  • https://etherscan.io/address/0x3d4Ced97ADb0ae3A53DA95a47fFc749aAd26BC8f#code
  • https://etherscan.io/address/0x42b25284E8ae427D79da78b65DFFC232aAECc016#code
  • https://etherscan.io/address/0x52Aa16860E0D42B6a7b6ecC15688472eb20135c9
  • https://etherscan.io/address/0x53100f8979D3655a2E95465f583b0f4A11c8bbe1
  • https://etherscan.io/address/0x5A74Cb32D36f2f517DB6f7b0A0591e09b22cDE69#code
  • https://etherscan.io/address/0x5B5AB518F532Ce260A5d2795E1eEc544FC159587
  • https://etherscan.io/address/0x5D2eA33449A60a70E8FCdc5251FDd86a030fAD91#code
  • https://etherscan.io/address/0x6973CF85d479b9253E13E71F377E8CD2c2dfECd7
  • https://etherscan.io/address/0x770D0d1Fb036483Ed4AbB6d53c1C88fb277D812F
  • https://etherscan.io/address/0x7e417e19fe3f72798E1094E8dF185378370cb416
  • https://etherscan.io/address/0x7eFc3953Bed2fc20b9f825eBffaB1cC8B072a000
  • https://etherscan.io/address/0x952B31960C97E76362Ac340D07D183aDa15e3d6E
  • https://etherscan.io/address/0x95547ede56cf74b73dd78a37f547127dffda6113
  • https://etherscan.io/address/0x9C42461AA8422926e3AEF7B1C6e3743597149d79
  • https://etherscan.io/address/0x9da431b8A5b5962ebFF1d1876DdB0f336a372F29#code
  • https://etherscan.io/address/0xA16F6FC7380300525C812ea2733Ad62DDA58143B
  • https://etherscan.io/address/0xa59B34c87f97Bdf95Ab3E532FD9b7D1Fcd23BF43
  • https://etherscan.io/address/0xA66002E9ab0BABf46882D0E0cd274f46CEb13116#code
  • https://etherscan.io/address/0xA82454009E01Ae697012a73cB232d85e61B05e50
  • https://etherscan.io/address/0xADB7228a85fCD24E3Cfc8C58E2d4b9F03E1468D9#code
  • https://etherscan.io/address/0xB226c52EB411326CdB54824a88aBaFDAAfF16D3d#code
  • https://etherscan.io/address/0xbC587a495420aBB71Bbd40A0e291B64e80117526
  • https://etherscan.io/address/0xbCc932e4750C3E465A7E54A06A34F9EdF8f6116b#code
  • https://etherscan.io/address/0xC1f9b548afcBe850f2BEbA8a50E55d86f4ABaE2E
  • https://etherscan.io/address/0xc32bd1A70e831c43956Ff2f5F23f2Ee45a04C020
  • https://etherscan.io/address/0xd0660cd418a64a1d44e9214ad8e459324d8157f1#code
  • https://etherscan.io/address/0xd31911a33a5577Be233Dc096F6F5a7e496fF5934#code
  • https://etherscan.io/address/0xD377919FA87120584B21279a491F82D5265A139c
  • https://etherscan.io/address/0xd6AFd78C05f0d425F2b46359746dD44991dCB315
  • https://etherscan.io/address/0xd8063123BBA3B480569244AE66BFE72B6c84b00d
  • https://etherscan.io/address/0xdD3FA86409658d207A9BE0141eE560C8db557824
  • https://etherscan.io/address/0xe16608758c11322d407745927d2D033f1BFB206C
  • https://etherscan.io/address/0xe28fCC9FB2998ba57754789F6666DAa8C815614D#code
  • https://etherscan.io/address/0xE9A115b77A1057C918F997c32663FdcE24FB873f#code
  • https://etherscan.io/address/0xf03a919a59f8381bE220511eCf788b15FB039e4C
  • https://etherscan.io/address/0xFCc5c47bE19d06BF83eB04298b026F81069ff65b#code
  • https://yearn.fi/vaults/1/0x696d02Db93291651ED510704c9b286841d506987

Changes

Tracked since 11 Nov 2026. Last checked 1 hour ago.

No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.

Before we tracked it

Scope and reward changes recorded before this page started tracking it.

  1. Rules updated

    The program rules were edited

  2. Scope added

    https://etherscan.io/address/0x24b267AA3946209ca19231d0f17110577be00A86

  3. Scope added

    https://etherscan.io/address/0x7e417e19fe3f72798E1094E8dF185378370cb416

  4. Scope added

    https://etherscan.io/address/0xA66002E9ab0BABf46882D0E0cd274f46CEb13116#code

  5. Scope added

    https://etherscan.io/address/0xbCc932e4750C3E465A7E54A06A34F9EdF8f6116b#code

  6. Scope added

    https://etherscan.io/address/0xC1f9b548afcBe850f2BEbA8a50E55d86f4ABaE2E

  7. Scope added

    https://etherscan.io/address/0x5B5AB518F532Ce260A5d2795E1eEc544FC159587

  8. Scope added

    https://etherscan.io/address/0x1c221980AAb2E52Ccc02180E0c171Ca5E5ffDFD6

  9. Scope added

    https://etherscan.io/address/0xa59B34c87f97Bdf95Ab3E532FD9b7D1Fcd23BF43

  10. Scope added

    https://etherscan.io/address/0x9da431b8A5b5962ebFF1d1876DdB0f336a372F29#code

  11. Scope added

    https://etherscan.io/address/0xf03a919a59f8381bE220511eCf788b15FB039e4C

  12. Scope added

    https://etherscan.io/address/0xe16608758c11322d407745927d2D033f1BFB206C

  13. Scope added

    https://etherscan.io/address/0x53100f8979D3655a2E95465f583b0f4A11c8bbe1

  14. Scope added

    https://etherscan.io/address/0xd6AFd78C05f0d425F2b46359746dD44991dCB315

  15. Scope added

    https://etherscan.io/address/0xADB7228a85fCD24E3Cfc8C58E2d4b9F03E1468D9#code

  16. Scope added

    https://etherscan.io/address/0x6973CF85d479b9253E13E71F377E8CD2c2dfECd7

Public CVEs

Published vulnerabilities in this vendor's products, from the NVD.

Search NVD

No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.