Blockchain bug bounty platform Immunefi has launched Immunefi Credits, a new system that gives researchers Credits equal to the fees they paid for qualifying reports since the submission fee mechanism went live.
According to the platform, eligible cases include a researcher’s own valid findings, duplicate submissions of valid reports, privately known issues, and mediation outcomes decided in the researcher’s favor. Immunefi said more than 700 researchers have already received Credits. No separate application is required, and balances can be checked on the Credits page linked to the balance section in the dashboard.
How the Credits can be used
Immunefi said the Credits can now be used to pay fees on the platform for report submissions, mediation, and account verification. Once Immunefi Studio opens to the public, the Credits will also be available for related services there.
Each Credit is worth $1 and can be purchased with USDC. The company said Credits do not replace bug bounty payouts or audit competition rewards. A valid finding will still receive rewards under the existing rules, while also earning Credits equal to the submission fee paid.
Validity period and restrictions
The retroactively issued Credits announced in this round are valid for 12 months starting immediately. After that, each new Credit grant will remain valid for 12 months from the date it is credited. The Credits are tied to the account and cannot be transferred or redeemed for cash.
What counts and what does not
Immunefi said eligible cases also include a researcher’s own findings that have already been paid in bug bounty programs or confirmed in audit competitions, duplicates of valid reports submitted by others, privately known issues and their duplicates, and mediation fees when the researcher wins the case.
Cases that do not qualify include publicly known issues, invalid reports, out-of-scope submissions, policy violations, duplicates of rejected reports, and duplicates of the researcher’s own report.
For account verification fees, Immunefi said researchers can receive equivalent Credits after verification if they have a valid report and an accuracy rate of at least 25%.
When the fee mechanism took effect
The platform said the fee mechanism has applied to bug bounty programs since March 24 and to audit competitions since April 10. Related verification is currently carried out about once every two weeks.
