Instadapp pays up to $500,000 (in USDC, USDT, DAI) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract, websites and applications. Ecosystem: Avalanche, BSC, ETH, Optimism, Polygon.
Facts from Immunefi's public program data, program last updated Oct 23, 2026. The full scope, severity table and rules are on the official program page.
LayerZero pays up to $15,000,000 (in USDC, USDT and BUSD) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract. Ecosystem: Arbitrum, Astar zkEVM, Aurora, Avalanche, BSC, Base and 40 more. Payouts require KYC.
Sky pays up to $10,000,000 for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract, websites and applications. Ecosystem: ETH.
GMX pays up to $5,000,000 (in ETH or USDC) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract, websites and applications. Ecosystem: Arbitrum, Avalanche.