Orca pays up to $500,000 (in USDC, ORCA) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract. Ecosystem: Solana.
Facts from Immunefi's public program data, program last updated Aug 18, 2026. The full scope, severity table and rules are on the official program page.
Chainlink pays up to $3,000,000 (in USDC) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: websites and applications, smart contract. Ecosystem: Arbitrum, Base, Celo, ETH, Fantom, Gnosis and 8 more. Payouts require KYC.
Ondo Finance pays up to $1,000,000 (in USDC) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract. Ecosystem: ETH, Solana. Payouts require KYC.
0x pays up to $1,000,000 (in USDC) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract, websites and applications. Ecosystem: Polygon, Avalanche, Arbitrum, Base, BSC, ETH and 6 more. Payouts require KYC.