Stargate bug bounty on Immunefi: up to $10,000,000
Stargate pays up to $10,000,000 on Immunefi for critical bugs in its cross chain bridge contracts. Rolling, live since September 2024.
Stargate, a cross chain native asset bridge built on LayerZero, runs a bug bounty on Immunefi. It covers 15 Solidity smart contract assets.
Critical bugs pay 10% of the funds directly affected, between $100,000 and $10,000,000. High severity bugs pay $10,000 to $100,000 and medium bugs a flat $5,000.
Rewards are paid in USDC on Ethereum by the Stargate Foundation. KYC is required for payout, and employees, official contributors and auditors cannot take part.
Researchers report through the Immunefi page. Every report needs a proof of concept, and testing must be done on local forks. Unfixed issues from listed prior audits are not eligible.
The program has been live since September 2024 and was last updated on 1 October 2026.
Quick answers
How are rewards paid?
In USDC on Ethereum, denominated in USD.
Is a proof of concept needed?
Yes, for every severity level.