{
  "atlas": "Earning Paths Atlas",
  "id": "immunefi",
  "name": "Immunefi (Web3 Bug Bounty)",
  "last_verified": "2026-10-19",
  "atlas_url": "https://earningpaths.dev/platforms/immunefi",
  "markdown_url": "https://earningpaths.dev/platforms/immunefi.md",
  "playbook_url": null,
  "license": {
    "id": "CC-BY-4.0",
    "name": "Creative Commons Attribution 4.0 International",
    "url": "https://creativecommons.org/licenses/by/4.0/"
  },
  "disclaimer": {
    "de": "Keine Rechts- oder Steuerberatung. Fakten aus den verlinkten Quellen, Stand siehe geprueft_am; vor Entscheidungen Originalquelle prüfen.",
    "en": "No legal or tax advice. Facts from linked sources as of geprueft_am; verify the original source before acting."
  },
  "summary": {
    "id": "immunefi",
    "name": "Immunefi (Web3 Bug Bounty)",
    "url": "https://immunefi.com",
    "category": "bounties",
    "category_label": "Bounties",
    "summary": "Bug bounty platform for web3/smart contracts; rewards mostly in USDC.",
    "ai_content": {
      "value": "bedingt",
      "rule": "AI-generated/automated-scanner reports are prohibited if they lack the required impact information for the reported asset; PoC required depending on program.",
      "label": "Conditional"
    },
    "bot_operation": {
      "value": "bedingt",
      "api_upload": null,
      "rule": "Prohibited: automated testing that generates significant traffic and any testing on mainnet/public testnet (immediate permanent ban). Submission only via the Immunefi dashboard.",
      "label": "Conditional"
    },
    "human_steps": {
      "count": 3,
      "minutes": 25,
      "estimated": true,
      "steps": [
        "Create account",
        "KYC for the specific program if required",
        "Provide wallet for USDC payout"
      ]
    },
    "kyc": {
      "value": "conditional",
      "details": "Per program: some require ID and proof of address, some only for critical findings, some none. Missing KYC can forfeit the reward.",
      "label": "Conditional"
    },
    "fees": null,
    "payout_minimum": {
      "amount": null,
      "currency": null,
      "label": "Unknown"
    },
    "payout_methods": [
      "USDC wallet (crypto)"
    ],
    "vat": {
      "value": "na",
      "details": "Rewards, not sales.",
      "label": "N/A"
    },
    "top_ban_reason": "Testing on mainnet or public testnet",
    "last_checked": "2026-10-19",
    "source": "https://immunefi.com/rules/",
    "sources_total": 2,
    "has_playbook": false,
    "has_documented_risks": false
  },
  "raw": {
    "ki_inhalte_erlaubt": {
      "wert": "bedingt",
      "regel": {
        "de": "KI-/Scanner-Berichte verboten, wenn ihnen die geforderten Angaben zur Auswirkung auf das gemeldete Asset fehlen; PoC je nach Programm Pflicht.",
        "en": "AI-generated/automated-scanner reports are prohibited if they lack the required impact information for the reported asset; PoC required depending on program."
      }
    },
    "bot_bedienung": {
      "wert": "bedingt",
      "api_upload": null,
      "regel": {
        "de": "Verboten: automatisiertes Testen mit erheblichem Traffic sowie jedes Testen auf Mainnet/öffentlichem Testnet (sofortige, dauerhafte Sperre). Einreichung nur über das Immunefi-Dashboard.",
        "en": "Prohibited: automated testing that generates significant traffic and any testing on mainnet/public testnet (immediate permanent ban). Submission only via the Immunefi dashboard."
      }
    },
    "menschliche_schritte": [
      {
        "schritt": {
          "de": "Konto anlegen",
          "en": "Create account"
        },
        "minuten": 5,
        "minuten_geschaetzt": true
      },
      {
        "schritt": {
          "de": "KYC beim jeweiligen Programm, falls verlangt",
          "en": "KYC for the specific program if required"
        },
        "minuten": 15,
        "minuten_geschaetzt": true
      },
      {
        "schritt": {
          "de": "Wallet für USDC-Auszahlung angeben",
          "en": "Provide wallet for USDC payout"
        },
        "minuten": 5,
        "minuten_geschaetzt": true
      }
    ],
    "kyc": {
      "erforderlich": "bedingt",
      "details": {
        "de": "Je Programm: manche verlangen Ausweis und Adressnachweis, manche nur bei kritischen Funden, manche keins. Ausbleibendes KYC kann die Prämie kosten.",
        "en": "Per program: some require ID and proof of address, some only for critical findings, some none. Missing KYC can forfeit the reward."
      }
    },
    "gebuehren": null,
    "mindestauszahlung": null,
    "auszahlungswege": [
      "USDC-Wallet (Krypto)"
    ],
    "wer_macht_ust": {
      "merchant_of_record": "nicht_zutreffend",
      "details": {
        "de": "Prämien, keine Verkäufe.",
        "en": "Rewards, not sales."
      }
    },
    "laender_einschraenkungen": {
      "de_moeglich": true,
      "abgeleitet": true,
      "details": {
        "de": "Ausgeschlossen: von OFAC/UN-Sicherheitsrat sanktionierte Länder (Programm-Beispiel Immunefi).",
        "en": "Excluded: countries restricted by OFAC/UNSC (Immunefi program example)."
      }
    },
    "bekannte_sperrgruende": [
      {
        "de": "Testen auf Mainnet oder öffentlichem Testnet",
        "en": "Testing on mainnet or public testnet"
      },
      {
        "de": "Automatisiertes Testen mit viel Traffic",
        "en": "Automated testing generating significant traffic"
      },
      {
        "de": "KI-/Scanner-Berichte ohne Impact-Angaben, Spam, Platzhalter-Berichte",
        "en": "AI/scanner reports without impact info, spam, placeholder reports"
      },
      {
        "de": "Mehrere Konten; falsche KYC-Angaben",
        "en": "Multiple accounts; inauthentic KYC information"
      }
    ],
    "quellen": [
      "https://immunefi.com/rules/",
      "https://immunefi.com/bug-bounty/immunefi/information"
    ],
    "geprueft_am": "2026-10-19",
    "hinweise": null,
    "id": "immunefi",
    "name": "Immunefi (Web3 Bug Bounty)",
    "kategorie": "bounties",
    "url": "https://immunefi.com",
    "kurzbeschreibung": {
      "de": "Bug-Bounty-Plattform für Web3/Smart Contracts; Prämien meist in USDC.",
      "en": "Bug bounty platform for web3/smart contracts; rewards mostly in USDC."
    },
    "notes": {
      "gebuehren": {
        "de": "Gebühren für Whitehats nicht belegt.",
        "en": "Fees for whitehats not documented."
      },
      "mindestauszahlung": {
        "de": "Keine Mindestauszahlung belegt; Prämien je Fund laut Programm.",
        "en": "No payout minimum documented; rewards per finding per program."
      }
    },
    "nicht_zutreffend": []
  }
}