Extra Finance bug bounty on Immunefi
Extra Finance pays up to $100,000 for a critical smart contract bug on Immunefi. The program has no closing date and was last updated on 16 September 2026.
The Extra Finance bug bounty pays researchers who find vulnerabilities in Extra Finance, a leveraged yield farming and lending protocol on Optimism. The program runs on Immunefi, has been live since 8 September 2023, and the information page was last updated on 16 September 2026.
A critical smart contract report pays 10 percent of the funds directly affected, up to $100,000, with a minimum of $15,000. A high report pays $3,000 to $15,000. A medium report pays $1,000 to $3,000. Rewards are paid in USDC on Optimism and stated in US dollars. Optimism also matches Extra Finance payouts with a pool of 52,500 OP tokens.
A working proof of concept is required for critical, high and medium smart contract reports. Extra Finance uses Primacy of Impact for those three levels, so a report can still be in scope when the affected asset is owned by the project even if that asset is not listed. Testnet and mock files are not covered. KYC is not required for payout.
Reports are submitted on the Immunefi program page. The information page holds the reward table, the known issues list, including items dated 15 September 2026, and the rules for testing. Testing on mainnet or public testnet is not allowed.