Offchain Labs (Arbitrum) · Vulnerability Disclosure

Offchain Labs Arbitrum Vulnerability Disclosure

Vulnerability disclosure

Offchain Labs (Arbitrum) publishes a vulnerability disclosure policy for reporting security issues.

CompanyCryptoBlockchainEthereumLayer 2RollupWeb3Smart ContractsDeveloper ToolsStylus
Program:

Disclosure Policy

Policy

Security Contact

Source

Vulnerability Disclosure

offchain-labs-arbitrum-vulnerability-disclosure.yml Raw ↑
generated: '2026-07-20'
method: searched
probe: false
source: https://immunefi.com/bug-bounty/arbitrum/
program: Immunefi bug bounty (Arbitrum)
official: true
policy:
  - https://immunefi.com/bug-bounty/arbitrum/
max_reward_usd: 2000000
scope: >-
  Arbitrum One and Arbitrum Nova and their underlying technologies (Arbitrum
  Rollup and Arbitrum AnyTrust). Focus on smart contracts: fund theft, fund
  freezing, contract unavailability, network shutdown, gas drainage.
details:
  reward_currency: USDC on Ethereum
  poc_required: true
  kyc_required: true
  live_since: '2021-08-31'
evidence:
  - source: https://immunefi.com/bug-bounty/arbitrum/
    kind: bug-bounty
    note: Official Offchain Labs / Arbitrum program, verified 2026-07-20.