The new policy ensures that researchers receive credits equal to their submission fees without impacting their core bounty rewards. This change specifically targets the friction points where hunters invest time and capital into discovery, only to find the bug was already registered. Eligibility extends back to March 24 for bug bounties and April 10 for audit competitions, with balances applied automatically to over 700 accounts. Each credit is pegged to one dollar and remains valid for 12 months, applicable toward future submissions, mediation, and account verification.
In section Cryptocurrency
Immunefi Refunds Bug Hunters for Duplicate and Known Vulnerability Reports
Security researchers who previously paid submission fees for valid bug reports now face a more equitable landscape. Immunefi has introduced a credit system that retroactively refunds hunters whose findings were dismissed as duplicates or private known issues, acknowledging the frustration of identifying vulnerabilities already documented by protocols.
Immunefi reported that unique valid findings doubled between January and September, a surge partially driven by AI-assisted reporting. This growth created a bottleneck, as protocols were flooded with duplicate reports for single vulnerabilities—one high-severity bug recently triggered 24 separate submissions. While submission fees remain necessary to cover the overhead of triaging this high volume, the platform aims to mitigate the financial risk for independent researchers. Community feedback has been largely positive, with hunters noting that the move effectively resolves long-standing complaints regarding negative balances in audit contests. Alongside this rollout, the platform launched a new $80,000 audit competition for the Arbitrum-based project Plether.
Comments (0)
No comments yet. Be the first!