GMX pays up to $5,000,000 (in ETH or USDC) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract, websites and applications. Ecosystem: Arbitrum, Avalanche.
Facts from Immunefi's public program data, program last updated Sep 30, 2026. The full scope, severity table and rules are on the official program page.
LayerZero pays up to $15,000,000 (in USDC, USDT and BUSD) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract. Ecosystem: Arbitrum, Astar zkEVM, Aurora, Avalanche, BSC, Base and 40 more. Payouts require KYC.
Olympus pays up to $3,333,333 (in OHM) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract, websites and applications. Ecosystem: Arbitrum, Avalanche, Boba Network, ETH, Fantom, Optimism and 1 more.
Chainlink pays up to $3,000,000 (in USDC) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: websites and applications, smart contract. Ecosystem: Arbitrum, Base, Celo, ETH, Fantom, Gnosis and 8 more. Payouts require KYC.