Symbiotic Bug Bounty

@symbioticfi

Live

Maximum reward

$500,000

Severity

Max. Reward

Critical

$500,000

High

$100,000

Medium

$10,000

No deposit required

Findings submitted

Start date

1 Feb 2026

KYC

Required to join

Please sign in as a researcher to join the bounty.

Instructions Scope

In scope

Core Contracts Web Interface / Application Other In-Scope Assets

Severity

Min and Max Reward

Critical

$20,000

High

$5,000

MediumDiscretionary

LowDiscretionary

Public web interfaces for Symbiotic (landing page and web application).

If you discover a vulnerability in any component not explicitly listed but which poses a risk to user funds, user data, or system integrity, you may submit it for consideration. Our team will review such submissions on a case-by-case basis.

Note: Actual reward amounts are determined at Symbiotic's sole discretion. Factors influencing payout include report quality, completeness, and severity/exploitability.

Name	Description	Asset
Symbiotic Landing Page	Production landing page for Symbiotic.	https://symbiotic.fi/
Symbiotic Web App	Production web application for Symbiotic.	https://app.symbiotic.fi/

Out of scope

Non-issue: Any already described issue from audits (find all audits here - https://docs.symbiotic.fi/get-started/resources/audits), or described in documentation, or described in codebase’s NatSpec.