Bounties
Security bug bounties from leading protocols, plus community, content and development bounties hosted on CoinGeography.
Running a bounty or quest? Host it on CoinGeography with tracked links for every participant.
Host a bountyA bug bounty is a reward a project pays to security researchers who responsibly report vulnerabilities in its smart contracts, websites or infrastructure. Rewards depend on the severity and impact of the bug.
Among the open programs listed here, LayerZero offers the highest maximum reward, up to $15 million for critical smart-contract vulnerabilities. Stargate and Sky each offer up to $10 million.
Read the program's scope and rules on its official page, test only on local forks or testnets as the rules require, and submit a report with a proof of concept through the platform. Never exploit a live system.
These pay participants for tasks such as creating videos, writing threads or articles, or bringing new users. On CoinGeography, each participant gets a personal tracked link so the host can measure clicks and results fairly.
4 programs · Bug bounty data from Immunefi's public API, updated 2026-10-28.
LayerZero pays up to $15,000,000 (in USDC, USDT and BUSD) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract. Ecosystem: Arbitrum, Astar zkEVM, Aurora, Avalanche, BSC, Base and 40 more. Payouts require KYC.
GMX pays up to $5,000,000 (in ETH or USDC) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract, websites and applications. Ecosystem: Arbitrum, Avalanche.
Olympus pays up to $3,333,333 (in OHM) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract, websites and applications. Ecosystem: Arbitrum, Avalanche, Boba Network, ETH, Fantom, Optimism and 1 more.
0x pays up to $1,000,000 (in USDC) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract, websites and applications. Ecosystem: Polygon, Avalanche, Arbitrum, Base, BSC, ETH and 6 more. Payouts require KYC.