Arbitrum pays up to $2,000,000 (in USDC) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract. Ecosystem: Arbitrum, ETH. Payouts require KYC.
Facts from Immunefi's public program data, program last updated Sep 24, 2026. The full scope, severity table and rules are on the official program page.
LayerZero pays up to $15,000,000 (in USDC, USDT and BUSD) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract. Ecosystem: Arbitrum, Astar zkEVM, Aurora, Avalanche, BSC, Base and 40 more. Payouts require KYC.
Sky pays up to $10,000,000 for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract, websites and applications. Ecosystem: ETH.
GMX pays up to $5,000,000 (in ETH or USDC) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract, websites and applications. Ecosystem: Arbitrum, Avalanche.