Lido · Crypto · Instrument: Prize
Lido Bug Bounty
Lido runs a bug bounty on Immunefi for vulnerabilities in its smart contracts and applications, live since 22 May 2021 and last updated on its Immunefi page on 29 June 2026. The maximum bounty is $2,000,000. Smart contract rewards run from a flat $1,000 for low severity up to $2,000,000 for critical, and websites and applications run from a flat $500 for low severity up to $100,000 for critical. Critical smart contract rewards are 10% of the funds directly affected, up to the cap. No KYC is required, and payouts are denominated in USD and paid in USDC, USDS, DAI or USDT at the researcher's choice. A proof of concept is required for every severity, and testing on mainnet or public testnet deployed code is prohibited; as of August 19, 2026 Lido's documentation reports 43 reports rewarded and more than $395,000 paid.
Who can apply
- Eligibility
No separate eligibility field is recorded. Check the program summary and the funder's terms.
- Location
No separate location field is recorded. Check the program summary and the funder's terms.
- Funding
No separate funding field is recorded. Check the program summary and the funder's terms.
Funding classification
- Instrument
No separate instrument field is recorded. Check the program summary and the funder's terms.
- Capital form
No separate capital form field is recorded. Check the program summary and the funder's terms.
- Allocation method
No separate allocation method field is recorded. Check the program summary and the funder's terms.
- Selection
No separate selection field is recorded. Check the program summary and the funder's terms.
Round history
No rounds on file.
Past rounds stay on the page, so you can see how often this program opens.
Funding evidence
Detailed funding records are not yet recorded for this program.
Read the program’s recorded facts and sourcesSources
Awards
none linkedNo award records linked to this profile yet.