Folks Finance bug bounty on Immunefi
Folks Finance pays up to $200,000 in USDC for critical smart contract bugs, through Immunefi. The program expires on 31 December 2026.
The Folks Finance bug bounty on Immunefi pays security researchers for bugs in Folks Finance smart contracts. Folks Finance describes itself as a community driven DeFi protocol for digital asset management. The program has been live since 31 March 2022 and was last updated on 2 October 2026. It expires on 31 December 2026.
Rewards are paid in USDC on Ethereum and denominated in USD. Critical bugs pay from $50,000 to $200,000. High bugs pay from $10,000 to $50,000. Medium bugs pay a flat $5,000 and low bugs pay a flat $1,000. High and critical rewards are capped at 10% of the economic damage, with those minimums.
Every report needs a proof of concept and a suggested fix. Code is required. A report that is only about external incentives is moved down one severity level. Issues already listed in https://github.com/Folks-Finance/audits are not eligible. Previously discovered bugs are not eligible.
KYC is required before a payout. For critical and high smart contract reports, Folks Finance asks for a full name, a residential address, and passport details. Every researcher must also certify that they are not acting for anyone on the US Treasury specially designated nationals list.
Testing is allowed only on local forks. The program uses Immunefi's Primacy of Rules. Payouts are handled by the Folks Finance team.
Quick answers
How much does it pay?
Up to $200,000. It is paid as prizes to the winning entries.
When is the deadline?
The deadline is 31 December 2026.
Who can apply?
Security researchers. A runnable proof of concept is required for all severities. KYC is required for payout. Critical and high smart contract reports need a full name, residential address, and passport details. Researchers must certify they are not acting for anyone on the OFAC SDN list. Known issues in https://github.com/Folks-Finance/audits are not eligible. Applicants from anywhere in the world can enter, unless the eligibility rules say otherwise.
How do I apply?
Through the official page at immunefi.com. The link is at the top of this page.