Alchemix reduced bug bounty maximums by 50%, cutting critical tier from $300K to $150K and total program spend by $196K.
Tech & Launches ·
Alchemix has reduced its bug bounty program's maximum reward for critical-level vulnerabilities from $300,000 to $150,000, representing a 50% cut to that tier. The adjustment is part of a broader restructuring that lowered total program payouts across four reward tiers by $196,000 combined. The protocol's bug bounty terms now cap critical smart contract bugs at $150,000, calculated as 10% of directly affected funds, with a $20,000 minimum to discourage delayed disclosure.
The changes affect Alchemix's vulnerability disclosure framework for mainnet assets across Ethereum, Arbitrum, and Optimism. High-level reports remain capped at a separate maximum, with payouts determined by the severity of impact—whether funds face theft, permanent freezing of yield, or temporary lockup. The program restricts submissions to researchers at intermediate level or higher due to architectural complexity.
It remains unclear whether the reductions were prompted by budget constraints, shifting risk assessments, or strategic changes to the protocol's security posture. The timing and rationale behind the specific 50% cut to the critical tier have not been disclosed.