Does Derive have a bug bounty program?

Yes, Derive runs a public bug bounty program on Immunefi, with rewards up to $50K. It currently lists 0 in-scope assets.

How much does Derive pay for bug bounties?

Derive's published reward range on Immunefi is up to $50K. Actual payouts depend on severity and scope.

programs/Immunefi/derive

Derive

immunefiImmunefi·updated 90d ago

bounty

Discord → RSS

max reward: $50K
scope: 0 in · 0 out
safe harbor: unknown
response: no reports

open program

76

hunt score

$$$cash

formula →

payout

41/55

bounty

20/20

freshness

15/25

how we sort the index, not an estimate of what you’ll earn

Scope

In scope

000

none listed

Out of scope

000

none listed

Change history

1 event

2026-08-08
first indexed
91d ago · 0 in-scope assets

// only one snapshot on record, changes appear from the next ingest onward

Community reports

0 reports

No reports yet. Be the first to share your triage timing for Derive.

// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.

Your notes

▸ raw source payload

{
  "kyc": false,
  "logo": "https://images.ctfassets.net/t3wqy70tc3bv/60S3l21WgTXVpkeEf6mRBO/3ca066168039dc5319d5b6d972300617/derive__1_.png",
  "launchDate": "2021-08-23T14:00:00.000Z",
  "stage1Hash": "86f0761a02587fd985d309e35860e9941fd1900b61ef5e3b9da420e1cdf49695"
}

programs/Immunefi/derive

Derive

immunefiImmunefi·updated 90d ago

bounty

Discord → RSS

max reward: $50K
scope: 0 in · 0 out
safe harbor: unknown
response: no reports

open program

76

hunt score

$$$cash

formula →

payout

41/55

bounty

20/20

freshness

15/25

how we sort the index, not an estimate of what you’ll earn

Scope

In scope

000

none listed

Out of scope

000

none listed

Change history

1 event

2026-08-08
first indexed
91d ago · 0 in-scope assets

// only one snapshot on record, changes appear from the next ingest onward

Community reports

0 reports

No reports yet. Be the first to share your triage timing for Derive.

// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.

Your notes

▸ raw source payload

{
  "kyc": false,
  "logo": "https://images.ctfassets.net/t3wqy70tc3bv/60S3l21WgTXVpkeEf6mRBO/3ca066168039dc5319d5b6d972300617/derive__1_.png",
  "launchDate": "2021-08-23T14:00:00.000Z",
  "stage1Hash": "86f0761a02587fd985d309e35860e9941fd1900b61ef5e3b9da420e1cdf49695"
}