Optimism expanded its Immunefi bug bounty program scope, adding 5 new vulnerability categories and removing 2.
Tech & Launches ·
Optimism has expanded its bug bounty program scope on Immunefi, adding five new vulnerability impact categories while removing two from eligible bounty claims. The net expansion brings three additional vulnerability types into scope for potential rewards. The program continues to require proof of concept demonstrations and know-your-customer verification, with critical vulnerabilities capped at 10% of economic damage up to a maximum of $2,000,042 for mainnet asset impacts.
The adjustment reflects a shift in which security threats the Optimism team prioritizes for external researcher submissions. The program's focus remains on preventing theft of assets held in smart contracts and loss of funds due to vulnerabilities, with governance proposal code also eligible if it has moved to onchain voting or been officially designated by OP Labs or the Optimism Foundation. The specific vulnerability categories added and removed have not been disclosed in publicly available program documentation.