Bug Bounty
Bug Bounty Program
Reward program for finding and reporting security vulnerabilities
Definition
Bug bounty programs reward security researchers for finding and responsibly disclosing vulnerabilities in protocols before they can be exploited maliciously.
Example
Immunefi hosts bug bounties where researchers can earn up to $1M+ for finding critical vulnerabilities in major DeFi protocols.
What to check
Treat it as a risk term: identify the failure mode, who can be harmed, and what evidence would reduce that risk. The main checks are: Incomplete coverage; Delayed fixes; Public disclosure timing.
Risks to Consider
- Incomplete coverage
- Delayed fixes
- Public disclosure timing
Common Questions
What does Bug Bounty mean in DeFi?
Bug Bounty means Reward program for finding and reporting security vulnerabilities. The useful question is not only the definition, but how the mechanism changes risk, return, liquidity, or governance for the user.
How is Bug Bounty used in practice?
A practical example: Immunefi hosts bug bounties where researchers can earn up to $1M+ for finding critical vulnerabilities in major DeFi protocols.
What should I check before relying on Bug Bounty?
Check incomplete coverage, delayed fixes, public disclosure timing. Also verify liquidity, oracle assumptions, admin controls, and whether the protocol has been tested during stressed markets.