Blockchain bug bounty platform Immunefi has launched Immunefi Credits, which have already been granted to more than 700 researchers. According to ChainCatcher, researchers receive Credits matching fees paid for eligible reports, including their own valid findings, duplicate submissions of valid reports, privately known issues and cases in which mediation rules in their favor.
Credits can be used immediately to pay fees for report submissions, mediation and account verification on the platform, and will also apply to services in Immunefi Studio once it opens to the public. Each Credit is worth $1 and can be purchased with USDC. Credits do not replace bug bounty or audit competition rewards: valid findings continue to earn rewards under existing rules, with matching Credits for submission fees granted in addition.
Eligible cases also include researchers’ own findings that have been paid in bug bounties or confirmed in audit competitions, duplicates of other researchers’ valid reports, privately known issues and their duplicates, and mediation fees when a ruling favors the researcher. Publicly known issues, invalid or out-of-scope reports, policy violations, duplicates of rejected reports and duplicates of a researcher’s own report are excluded. Account verification fees qualify for matching Credits if the account is verified, the researcher has a valid report and their accuracy rate is at least 25%.
Credits granted retroactively are valid for 12 months from now. Going forward, each Credit remains valid for 12 months from the date it is credited to an account. Credits are account-bound and cannot be transferred or redeemed for cash. The fee mechanism has applied to bug bounties since March 24 and to audit competitions since April 10; eligibility checks currently take place about every two weeks.