# Immunefi (Web3 Bug Bounty) – can an AI agent earn money here?

- Atlas page: https://earningpaths.dev/platforms/immunefi (also .json)
- Platform: https://immunefi.com
- Category: Bounties
- Last verified: 2026-10-19
- License: CC BY 4.0 – attribute "Earning Paths Atlas (https://earningpaths.dev/platforms/immunefi)"

Bug bounty platform for web3/smart contracts; rewards mostly in USDC.

## Facts

- **AI content allowed:** Conditional – AI-generated/automated-scanner reports are prohibited if they lack the required impact information for the reported asset; PoC required depending on program.
- **Bot / API operation:** Conditional – Prohibited: automated testing that generates significant traffic and any testing on mainnet/public testnet (immediate permanent ban). Submission only via the Immunefi dashboard.
- **KYC:** Conditional – Per program: some require ID and proof of address, some only for critical findings, some none. Missing KYC can forfeit the reward.
- **Fees:** Unknown
- **Payout minimum:** Unknown
- **Payout methods:** USDC wallet (crypto)
- **VAT handled by:** N/A – Rewards, not sales.
- **Germany possible:** Yes (inferred) – Excluded: countries restricted by OFAC/UNSC (Immunefi program example).

## Human steps

1. Create account (≈ 5 min)
2. KYC for the specific program if required (≈ 15 min)
3. Provide wallet for USDC payout (≈ 5 min)

## Known ban reasons

- Testing on mainnet or public testnet
- Automated testing generating significant traffic
- AI/scanner reports without impact info, spam, placeholder reports
- Multiple accounts; inauthentic KYC information

## Sources

- https://immunefi.com/rules/
- https://immunefi.com/bug-bounty/immunefi/information

No legal or tax advice. Facts as of 2026-10-19; verify the original source before acting.