Bug Bounties
Last updated
Was this helpful?
Last updated
Was this helpful?
ALEX maintains the quality and security of the ecosystem through different means. One of them is the . If you are interested in participating and detecting vulnerabilities to earn rewards, head over to the ALEX section on Immunefi, or continue reading to find out more.
The Immunefi Bug Bounty Program is designed to incentivize security researchers to find and report vulnerabilities in the ALEX ecosystem. By participating, ethical hackers help ensure the integrity and safety of ALEX’s smart contracts, infrastructure, and overall platform security.
The bounty rewards are paid in ALEX, and they are based on the severity of the discovered vulnerability. Immunefi follows the industry-standard Common Vulnerability Scoring System (CVSS) to classify bugs into different levels:
Critical: Highest payout, affecting key smart contracts or assets at risk
High: Affects platform stability or user funds, but with mitigations
Medium: Potential exploits with limited impact
Low: Minor vulnerabilities with little to no security risk
Exact reward amounts may vary based on the severity, impact, and quality of the report.
Proof of Concept (POC): A clear explanation and working proof-of-concept (PoC) demonstrating the impact of the vulnerability must be provided.
Official disclosure: Report vulnerabilities through the official Immunefi platform. Public disclosure before resolution disqualifies the submission.
Testing on local forks: No testing should be done on either the ALEX mainnet or testnet. Use local forks of either of those networks
Novelty of vulnerabilities: Vulnerabilities must not have been included in
For additional requirements and prohibitions, please refer to the .