SSV Network bug bounty on Immunefi
SSV Network pays up to $250,000 for critical smart contract bugs in its distributed validator network, through a rolling program on Immunefi.
The SSV Network bug bounty on Immunefi rewards researchers who find vulnerabilities in the ssv.network smart contracts. SSV describes itself as a fully decentralized, open source and trustless DVT network that provides a reusable infrastructure solution for decentralizing Ethereum validators. The program has been live since September 11, 2023 and was last updated on April 9, 2026.
Smart contract rewards follow Immunefi severity levels. Critical bugs pay a minimum of $50,000 and a maximum of $250,000, calculated as 10 percent of the funds directly affected and capped at the maximum. High severity pays a flat $30,000, medium a flat $10,000 and low a flat $1,500.
Rewards are denominated in USD but paid in SSV tokens, at the average market price from CoinMarketCap and CoinGecko at the time of submission.
A functional proof of concept is a condition for any reward. Testing must happen on local forks only; testing on mainnet or public testnets is prohibited, as is testing with pricing oracles or third party smart contracts. Vulnerabilities identified in earlier audits that remain unfixed are not eligible.
KYC is required to receive a payout, with a government issued ID and proof of address. Reports are submitted through the Immunefi program page.