Bug bountyImmunefi
Sky Bug Bounty
Sky pays up to $10,000,000 for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract, websites and applications. Ecosystem: ETH.
- Max reward
- $10.00M
- Ecosystem
- ETH
LayerZero Bug Bounty
Immunefi · up to $15,000,000
Bug bountyKYC required
LayerZero pays up to $15,000,000 (in USDC, USDT and BUSD) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract. Ecosystem: Arbitrum, Astar zkEVM, Aurora, Avalanche, BSC, Base and 40 more. Payouts require KYC.
What is in scope
- Smart Contract
Ecosystems
ArbitrumAstar zkEVMAuroraAvalancheBSCBaseBlastCantoCeloConfluxDOSETHFantomFraxtalFuseGnosisHarmonyHorizen EONInjectiveKavaLineaMantaMantleMerit CircleMetisModeMoonbeamMoonriverOptimismOrderlyPolygonPolygon zkEVMScrollShimmerEVMTelosTenetVictionXPLAXaiZoraopBNBAptosCronosRootstockSeiTON
Facts from Immunefi's public program data, program last updated Oct 2, 2026. The full scope, severity table and rules are on the official program page.
Risk warnings
- Test only as the program's rules allow (usually local forks or testnets). Exploiting a live system is illegal and voids any reward.
- Report privately through the official platform. Do not disclose the bug publicly before it is fixed and you are permitted to.
- Reward amounts are maximums; the program decides the payout based on severity and impact.
Related bounties
Bug bountyImmunefi
GMX Bug Bounty
GMX pays up to $5,000,000 (in ETH or USDC) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract, websites and applications. Ecosystem: Arbitrum, Avalanche.
- Max reward
- $5.00M
- Ecosystem
- Arbitrum, Avalanche
Bug bountyImmunefi
Spark Bug Bounty
Spark pays up to $5,000,000 (in DAI) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract, websites and applications. Ecosystem: ETH.
- Max reward
- $5.00M
- Ecosystem
- ETH