Cosmos
Immunefi live git_repocontractBug bounty program on Immunefi. Official listing: https://immunefi.com/bug-bounty/cosmos/information/. Scope and rules are controlled by the program — always verify against the official listing before testing.
Max bounty
$50K
Starts
2026-06-22
In-scope assets
22
Last updated
2026-09-11
In-scope assets
| Type | Asset | Detail |
|---|---|---|
| repo | cometbft/cometbft | |
| repo | cosmos/cosmos-sdk | |
| repo | cosmos/evm | |
| repo | cosmos/gaia | |
| repo | cosmos/iavl | |
| repo | cosmos/ibc-go | |
| repo | cosmos/ics23 | |
| repo | cosmos/ledger-cosmos | |
| repo | cosmos/solidity-ibc-eureka | |
| repo | CosmWasm/cosmwasm | |
| repo | CosmWasm/cw-storage-plus | |
| repo | CosmWasm/cw-utils | |
| repo | CosmWasm/rust-optimizer | |
| repo | CosmWasm/serde-json-wasm | |
| repo | CosmWasm/wasmd | |
| repo | CosmWasm/wasmvm | |
| repo | informalsystems/hermes | |
| web | https://crates.io/crates/ibc-chain-registry | |
| web | https://crates.io/crates/ibc-relayer | |
| web | https://crates.io/crates/ibc-relayer-cli | |
| web | https://crates.io/crates/ibc-relayer-rest | |
| web | https://crates.io/crates/ibc-telemetry |
Watching Cosmos? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.
Track this program