Agglayer

@agglayer

Live

Maximum reward

$1,000,000

Severity

Max. Reward

Critical

$1,000,000

High

$20,000

Medium

$5,000

No deposit required

Findings submitted

Start date

14 Oct 2025

Please sign in as a researcher to join the bounty.

Severity

Min and Max Reward

Critical

$50,000 to $1,000,000

High

Up to $20,000

Medium

Up to $5,000

In-Scope Targets:

Asset Name	Description
0x580b…3cfb	[Ethereum] Agglayer Contracts - PolygonGlobalExitRoot
0x2a3D…2EDe	[Ethereum] Agglayer Contracts - PolygonBridgeV2
0x5132…7aB2	[Ethereum] Agglayer Contracts - PolygonRollupManager
0x2DC7…4DFF	[Ethereum] Vault Bridge - vbETH
0x53E8…765e	[Ethereum] Vault Bridge - vbUSDC
0x6d4f…45CC	[Ethereum] Vault Bridge - vbUSDT
0x2C24…374F	[Ethereum] Vault Bridge - vbWBTC
0x3DD4…4855	[Ethereum] Vault Bridge - vbUSDS
0x417d…9e02	[Ethereum] Vault Bridge - Migration Manager
0xb2ec…45f5	[Ethereum] Vault Bridge - VaultBridgeTokenInitializer
0x1C85…8E80	[Ethereum] Vault Bridge - VaultBridgeTokenPart2

Previous reports:
- https://github.com/agglayer/agglayer-contracts/tree/main/audits
- https://github.com/agglayer/vault-bridge/tree/main/audits
Please refer to the docs for default out of scope guidelines
Currently only smart contracts are in scope. Any issue requiring physical access to assets/devices, environment manipulation, or changing config files/non-default settings.