Lido

Immunefi live contractgit_repoweb

Bug bounty program on Immunefi. Official listing: https://immunefi.com/bug-bounty/lido/information/. Scope and rules are controlled by the program — always verify against the official listing before testing.

Max bounty

$2M

Starts

2021-05-22

In-scope assets

Last updated

2026-06-21

In-scope assets

Type	Asset	Detail
repo	lidofinance/aave-delivery-infrastructure
repo	lidofinance/aragon-apps
repo	lidofinance/core
repo	lidofinance/dual-governance
repo	lidofinance/easy-track
repo	lidofinance/governance-crosschain-bridges
repo	lidofinance/lido-council-daemon
repo	lidofinance/lido-keys-api
repo	lidofinance/lido-l2
repo	lidofinance/lido-l2-with-steth
repo	lidofinance/lido-oracle
repo	lidofinance/lido-vesting-escrow
repo	lidofinance/mev-boost-relay-allowed-list
repo	lidofinance/onchain-mon
repo	lidofinance/oz-merkle-tree
repo	lidofinance/stonks
repo	lidofinance/validator-ejector
repo	lidofinance/community-staking-module
repo	lidofinance/circuit-breaker
web	http://dao.lido.fi/
web	http://stvaults.lido.fi/
web	https://blog.lido.fi
web	https://csm.lido.fi
web	https://docs.lido.fi
web	https://lido.fi
web	https://operators.lido.fi
web	https://stake.lido.fi
web	https://trp.lido.fi
web	https://docs.lido.fi/deployed-contracts

Watching Lido? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.

Track this program