Ethena bug bounty on Immunefi: up to $3,000,000
Ethena pays up to $3,000,000 for a critical smart contract bug. The bounty runs on Immunefi and has no closing date.
The Ethena bug bounty program pays security researchers who find vulnerabilities in the Ethena protocol. It runs on Immunefi, has been live since 4 April 2024, and the program page was last updated on 11 August 2026.
A critical smart contract report pays up to $3,000,000, with a minimum of $100,000. A high report pays $10,000 to $75,000. A medium report pays a flat $10,000 and a low report a flat $2,500. On the web and app side, a critical report pays $20,000 to $50,000. There are 28 assets in scope.
Rewards are paid in USDC on Ethereum mainnet and denominated in US dollars. KYC is required before Ethena processes a payout, so researchers have to identify themselves to be paid.
Reports are submitted through the Immunefi program page, which also holds the full scope, the severity rules and the list of assets.