StackingDAO bug bounty on Immunefi
StackingDAO pays up to $100,000 on Immunefi for critical bugs in its Stacks smart contracts. No KYC and applications are open all year.
The StackingDAO bug bounty pays for security bugs in the project's smart contracts on the Stacks blockchain. Immunefi shows the program as live since 4 February 2024 and gives 2 September 2026 as the last update.
A critical smart contract report pays up to $100,000. The reward is set at 10 percent of the funds at risk, with a minimum of $20,000. A high severity smart contract report pays up to $20,000.
The program covers 37 assets. Rewards are paid in USDC on the Ethereum network. KYC is not required to take part.
Every report needs a working proof of concept, whatever the severity. Critical and high severity smart contract reports follow the Primacy of Impact rule, so the effect on the protocol decides the reward rather than the exact contract that was hit.