Bounties
Security bug bounties from leading protocols, plus community, content and development bounties hosted on CoinGeography.
Running a bounty or quest? Host it on CoinGeography with tracked links for every participant.
Host a bountyA bug bounty is a reward a project pays to security researchers who responsibly report vulnerabilities in its smart contracts, websites or infrastructure. Rewards depend on the severity and impact of the bug.
Among the open programs listed here, LayerZero offers the highest maximum reward, up to $15 million for critical smart-contract vulnerabilities. Stargate and Sky each offer up to $10 million.
Read the program's scope and rules on its official page, test only on local forks or testnets as the rules require, and submit a report with a proof of concept through the platform. Never exploit a live system.
These pay participants for tasks such as creating videos, writing threads or articles, or bringing new users. On CoinGeography, each participant gets a personal tracked link so the host can measure clicks and results fairly.
4 programs · Bug bounty data from Immunefi's public API, updated 2026-10-28.
Chainlink pays up to $3,000,000 (in USDC) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: websites and applications, smart contract. Ecosystem: Arbitrum, Base, Celo, ETH, Fantom, Gnosis and 8 more. Payouts require KYC.
Ondo Finance pays up to $1,000,000 (in USDC) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract. Ecosystem: ETH, Solana. Payouts require KYC.
0x pays up to $1,000,000 (in USDC) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract, websites and applications. Ecosystem: Polygon, Avalanche, Arbitrum, Base, BSC, ETH and 6 more. Payouts require KYC.
Raydium pays up to $505,000 (in RAY, SOL, USDC) for valid security vulnerabilities through its bug bounty on Immunefi. In scope: smart contract. Ecosystem: Solana.