For Whitehats

Bug Report Was Closed

• Is my bug really out-of-scope?

I've Spotted A Bug

• What if I find a bug on a project that doesn't have an Immunefi bug bounty?
• Web3 PoC guidelines
• Web2 PoC guidelines
• What if I find the same bug on multiple projects?
• What if my bug causes multiple impacts across different severity levels?
• What if my bug report can bypass a "fix"?

See all 7 articles

Payment Processing

• What if the project's payout token isn't liquid enough to match the reward?
• KYC requirements

Bug Report Submitted

• Audits & known issues
• What to do when a project is not responding to your bug report
• Is Immunefi on my side or the project's side?
• When a project updates their bug bounty program after you submit

Assessing Bug Impact

• How to know if my bug is in scope?
• PoC Required

Getting Started

• I was hunting on a project and their bug bounty program disappeared. Why?
• I need support, who can I contact?
• I've been banned. What can I do?
• Rules That Projects On Immunefi Must Follow
• Prohibited Behaviour When Bug Hunting

Bug Report Submissions and Resolutions

• Bug Report Evaluation Standards
• Bug Report Submission Checklist
• Bug Report Submission Form
• Bug Report Template
• Proof of Concept (PoC) Guidelines and Rules
• Severity Classification System

See all 12 articles

General Information + Policies

• Duplicate Reports
• Reported Subdomain Takeovers
• Immunefi Standard Badge
• Enabling Two-Factor Authentication
• Whitehat Leaderboard
• Bug Bounty Program Updates and Active Reports

FAQs

• General FAQs
• Bug Bounty Program and Report FAQs

Feature Updates

• Vaults System
• Public Project Performance Metrics
• Re-opened Submissions
• PoC Submission Update