AAVE pays up to $1,000,000 (in AAVE and stablecoins) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract. Ecosystem: ETH. Payouts require KYC.
Facts from Immunefi's public program data, program last updated Apr 17, 2026. The full scope, severity table and rules are on the official program page.
LayerZero pays up to $15,000,000 (in USDC, USDT and BUSD) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract. Ecosystem: Arbitrum, Astar zkEVM, Aurora, Avalanche, BSC, Base and 40 more. Payouts require KYC.
Sky pays up to $10,000,000 for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract, websites and applications. Ecosystem: ETH.
Spark pays up to $5,000,000 (in DAI) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract, websites and applications. Ecosystem: ETH.