Filecoin

Immunefi live git_repocontract

Bug bounty program on Immunefi. Official listing: https://immunefi.com/bug-bounty/filecoin/information/. Scope and rules are controlled by the program — always verify against the official listing before testing.

Max bounty
$50K
Starts
2023-04-14
In-scope assets
25
Last updated
2026-07-21

In-scope assets

TypeAssetDetail
repo filecoin-project/bellperson
repo filecoin-project/boost
repo filecoin-project/builtin-actors
repo filecoin-project/go-address
repo filecoin-project/go-amt-ipld
repo filecoin-project/go-bitfield
repo filecoin-project/go-cbor-util
repo filecoin-project/go-crypto
repo filecoin-project/go-data-transfer
repo filecoin-project/go-f3
repo filecoin-project/go-fil-commcid
repo filecoin-project/go-padreader
repo filecoin-project/go-statemachine
repo filecoin-project/go-statestore
repo filecoin-project/lotus master
repo filecoin-project/merkletree
repo filecoin-project/ref-fvm
repo filecoin-project/rust-fil-proofs
repo filecoin-project/rust-filecoin-proofs-api
repo ipfs/go-graphsync
repo ipfs/go-ipld-cbor
repo lurk-lab/neptune
repo lurk-lab/neptune-triton
repo whyrusleeping/cbor-gen
web https://filecoin.io

Watching Filecoin? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.

Track this program