Chainlink
Immunefi live git_repowebcontractBug bounty program on Immunefi. Official listing: https://immunefi.com/bug-bounty/chainlink/information/. Scope and rules are controlled by the program — always verify against the official listing before testing.
Max bounty
$3M
Starts
2021-05-11
In-scope assets
16
Last updated
2026-07-24
In-scope assets
| Type | Asset | Detail |
|---|---|---|
| repo | smartcontractkit/ccip-owner-contracts | main |
| repo | smartcontractkit/chainlink | develop |
| repo | smartcontractkit/chainlink-aptos | develop |
| repo | smartcontractkit/chainlink-ccip | main |
| repo | smartcontractkit/chainlink-common | main |
| repo | smartcontractkit/chainlink-evm | develop |
| repo | smartcontractkit/chainlink-solana | develop |
| repo | smartcontractkit/chainlink-sui | main |
| repo | smartcontractkit/external-adapters-js | |
| repo | smartcontractkit/libocr | |
| repo | smartcontractkit/operator-ui | |
| web | https://chain.link/ | |
| web | https://cre.chain.link | |
| web | https://data.chain.link/ | |
| web | https://faucets.chain.link/ | |
| web | https://immunefi.com |
Watching Chainlink? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.
Track this program