Immunefi is the security infrastructure layer of crypto.
We protect 70% of all DeFi TVL today.
Our track record:
- We work with virtually every major DeFi project: Aave, Arbitrum, Optimism, Sei, LayerZero, Ethena, Jito, ENS, The Graph, and so many more
- Multiple $10M+
In retrospect, the most important shift in Web3 security maybe what happened on Immunefi in the first half of 2026.
In April, a security researcher used an AI agent to help uncover a $100,000 critical vulnerability in production. In June, a team won a $500,000 audit competition
🚨🤯 Five figure paydays this week alone.
🥇 thomasvangurp → $65,000
🥈 @TrustSecAudits → $25,000
🥉 @pwing → $10,000
🏅 @_blockian → $10,000
Dozens more SR Summer payouts sitting in the pipeline waiting to be announced!
Hacker Pledging Season 3 is live.
Season 2 closed with $8,760,341 in bounty payouts. 250% of target. 49 hackers and 30 backers split 1,468,636 IMU.
Season 3 starts now.
The pool: 4,500,000 IMU.
To unlock all of it, the community needs to generate $3,500,000 in bounty payouts.
Something we respect about @_blockian is they do not talk much. They just keep showing up on the payouts list.
This is their third big payout in a matter of weeks.
Well deserved!
🚨 New bug bounty alert! 🚨
@1inch is now live on Immunefi with a bug bounty of up to $500,000 USD for security researchers who can uncover vulnerabilities in their DeFi ecosystem.
Start hunting on their different BBPs:
- SmartContracts: immunefi.com/bug-bounty/1in…
-
It's been a year since Plume made the boldest(and wisest) security move a protocol can make:
They handed their entire codebase to hundreds of hackers and said: break it.
$200,000 on the table.
5,708 lines of Solidity.
Four weeks of open season.
The result?
952 submissions.
365
Dear security researcher
From January to June 2026, Immunefi paid out 1,576 bug reports. That is a valid bug found, confirmed, and paid roughly every 3 hours, for six months straight.
The bugs are out there. Researchers are finding them every single day and getting paid.
And
🤯 $65,000
That's what thomasvangurp just made in crypto. Not trading. Not memecoins.
ONE Critical bug report on @immunefi.
He started his journey May 13th 2026. That's 62 days ago.
