Immunefi
Immunefi runs bug bounty programmes and security services for cryptocurrency and smart contract projects.
- Categories
- Bug bounty and crowdsourced testing, Penetration testing, Incident response, Managed security services
- Based in
- Singapore, Singapore
- Founded
- 2020
- Ownership
- Private
About Immunefi
Immunefi is a crowdsourced security platform for Web3. It connects protocol teams with a large community of security researchers who find and report vulnerabilities in smart contracts and web infrastructure. The company sells bug bounty programmes, audit competitions, attackathons, invite-only reviews, audits, and PR reviews. It serves blockchain protocols and Web3 projects. Its platform has paid over $140 million in rewards across more than 650 protocols, with 85,000 researchers in its community. It says it has prevented over $25 billion in hacks and that most critical vulnerability disclosures in crypto come through it. Immunefi also offers Immunefi Magnus, a security operations centre for the onchain economy. Magnus aggregates security tools, orchestrates automated threat detection and mitigation, uses role-specific security agents, and draws on Codexa, a dataset of onchain vulnerabilities. The company was founded in 2020 and has over 50 employees.
Products
- Bug Bounty ProgramA programme where security researchers report vulnerabilities in a protocol's code and receive rewards for valid findings.
- Audit CompetitionsTime-limited code reviews conducted by a group of security researchers.
- AttackathonsLarge educational competitions where researchers form a long-term security community around an ecosystem and compete for a reward pool.
- Invite-Only ProgramsTime-limited code reviews by a selected group of researchers suited to a specific programme.
- AuditsSecurity audits performed by a matched group of proven Web3 security researchers.
- PR ReviewsContinuous security reviews integrated into the development process.
Ownership and deals
- Raised $24m in a Series A roundInvestor Framework VenturesReport on the Immunefi funding round of September 2022 (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.