Gearbox
Gearbox is a DeFi protocol deployed on ethereum. Bug bounty program with rewards up to $100,000 for verified smart contract vulnerabilities.
ETHDeFiKYC RequiredPoC Required
Verified ProgramKYC RequiredPoC RequiredPrimacy of Impact
Max Bounty$100,000
Min Bounty$500
PayoutUSDC
Findings0
Accepted0
Chains1
TVL$47.0M
Live SinceFeb 2022
1 Audit Report Available
01Severity & Rewards
02Program Rules
- 01Proof of Concept is required for all submissions. Reports without a working PoC demonstrating the vulnerability will not be considered.
- 02KYC verification is required before bounty payout. Researchers must complete identity verification to receive rewards.
- 03This program follows Primacy of Impact โ valid findings are rewarded based on demonstrated impact regardless of whether the specific attack vector was previously known.
- 04Only previously unreported vulnerabilities are eligible. Duplicate submissions will be closed.
- 05Vulnerabilities must be reported through the WhiteClaws platform. Public disclosure before resolution disqualifies the submission.
- 06Testing must not disrupt live protocol operations. Use mainnet forks or testnets for Proof of Concept execution.
โ IN SCOPE
- โCore protocol smart contracts
- โToken contracts (ERC-20, ERC-721, etc.)
- โAccess control and admin functions
- โProxy and upgrade patterns
- โIntegration and adapter contracts
โ OUT OF SCOPE
- โFrontend applications
- โOff-chain infrastructure
โ Protocol Information
Security Contacts
Bounty program indexed and verified by WhiteClawsProgram data sourced from on-chain analysis and public bounty disclosures.