For Whitehats

Audits

• Audit Project Material Guidelines

Immunefi All Stars

• Immunefi All Stars: Everything You Need to Know

Getting Started

• Connecting Your Account to Discord
• I was hunting on a project and their bug bounty program disappeared. Why?
• I need support, who can I contact?
• I've been banned. What can I do?
• Rules That Projects On Immunefi Must Follow
• Prohibited Behaviour When Bug Hunting

See all 11 articles

I've Spotted A Bug

• What if I find a bug on a project that doesn't have an Immunefi bug bounty?
• Web3 PoC guidelines
• Web2 PoC guidelines
• What if I find the same bug on multiple projects?
• What if my bug causes multiple impacts across different severity levels?
• What if my bug report can bypass a "fix"?

See all 12 articles

Assessing Bug Impact

• How to know if my bug is in scope?
• PoC Required
• Reported Subdomain Takeovers
• Severity Classification System

Bug Report Submitted

• Audits & known issues
• What to do when a project is not responding to your bug report
• Is Immunefi on my side or the project's side?
• When a project updates their bug bounty program after you submit
• Bug Report Statuses
• How & When to Request Help or Mediation

See all 7 articles

Bug Report Was Closed

• Is my bug really out-of-scope?
• Duplicate Reports
• Report Closed for Known Issues

I've Been Paid

• Whitehat Leaderboard
• Post-Report Reviews
• What to Do After Your Report Has Been Paid

Payment Processing

• What if the project's payout token isn't liquid enough to match the reward?
• KYC requirements

Safe Harbor

• Safe Harbor Overview for Whitehats

Feature Updates

• Wallet Management
• How the Whitehat Scoring System Works
• Setting Up Your Security Researcher Profile Page
• How to Use Immunefi AI on Your CLI
• How many mediations can I request at a time?
• Vaults System

See all 9 articles