Bug bounty presence & max payout

Babylon Protocol's assessment for RD-F-007 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Active Immunefi bug bounty since September 2024. Maximum payout $500,000 (Critical). Covers 17 assets including Genesis chain, Bitcoin Indexer, Finality Provider, Vigilante, Covenant Emulator. KYC required. Notable exclusion: centralization risks and covenant committee compromise explicitly out of scope. $500K max is below peer expectation for $4.16B TVL.

Sources #

URL
Babylon Labs Launches Bug Bounty on ImmunefiImmunefi launch announcement ($1M program)retrieved 2026-05-04
URL
Babylon Labs Bug Bounties | ImmunefiImmunefi bug bounty scope pageretrieved 2026-05-04

Methodology #

Check whether a public bug bounty program is active for this protocol and record the maximum payout in USD.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol babylon-protocol factor RD-F-007 score yellow collected_at 2026-05-04 19:43:27