Offchain Labs (Arbitrum) · Vulnerability Disclosure

Offchain Labs Arbitrum Vulnerability Disclosure

Vulnerability disclosure

Offchain Labs (Arbitrum) publishes a vulnerability disclosure policy for reporting security issues.

CompanyCryptoBlockchainEthereumLayer 2RollupWeb3Smart ContractsDeveloper ToolsStylus
Program:

Disclosure Policy

Policy

Security Contact

Source

Vulnerability Disclosure

offchain-labs-arbitrum-vulnerability-disclosure.yml Raw ↑
generated: '2026-07-20'
method: searched
probe: false
source: https://immunefi.com/bug-bounty/arbitrum/
program: Immunefi bug bounty (Arbitrum)
official: true
policy:
  - https://immunefi.com/bug-bounty/arbitrum/
max_reward_usd: 2000000
scope: >-
  Arbitrum One and Arbitrum Nova and their underlying technologies (Arbitrum
  Rollup and Arbitrum AnyTrust). Focus on smart contracts: fund theft, fund
  freezing, contract unavailability, network shutdown, gas drainage.
details:
  reward_currency: USDC on Ethereum
  poc_required: true
  kyc_required: true
  live_since: '2021-08-31'
evidence:
  - source: https://immunefi.com/bug-bounty/arbitrum/
    kind: bug-bounty
    note: Official Offchain Labs / Arbitrum program, verified 2026-07-20.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/offchain-labs-arbitrum-vulnerability-disclosure"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.