Cosmos reduced bug bounty reward tiers across all three levels, cutting high-tier payouts from $12.5K to $4K (68% decrease).
Tech & Launches ·
Cosmos has reduced its bug bounty reward structure across all severity tiers, with the highest-tier payout cut from $12.5K to $4K—a 68% decrease. The three-tier reduction totals $10.5K in aggregate cuts to the program's maximum payouts. The updated bounty details are available on the program's official page.
The program, managed through Immunefi, targets vulnerabilities in the Cosmos Stack's core components—including distributed systems protocols, cryptography, consensus mechanisms, and interoperability infrastructure. Rewards are determined by factors such as impact, exploitation likelihood, and submission quality, with the program adhering to what Cosmos calls "Primacy of Rules," meaning all determinations follow the program's stated terms strictly.
The rationale for the reduction has not been disclosed in available sources. It remains unclear whether the changes reflect a reassessment of threat severity, a shift in program priorities, or budgetary constraints. The adjustment affects researchers and security contributors who rely on these bounties to offset the cost of finding and reporting critical flaws.