Arbitrum
Leading Ethereum L2 scaling solution using optimistic rollups, processing transactions faster and cheaper while inheriting Ethereum security.
https://arbitrum.ioMax Reward
$200,000
Total Paid
$1,600,000
Resolved
89
Avg Response
4 days
In-Scope Assets
Arbitrum One
Optimistic rollup chain and sequencer
Arbitrum Nova
AnyTrust chain for gaming and social
Arbitrum Bridge
L1-L2 bridge contracts
Stylus
WASM smart contract execution environment
Out of Scope
- ✕ Third-party dApps on Arbitrum
- ✕ Arbitrum DAO governance
- ✕ Orbit chains
Severity Levels & Rewards
RCE, authentication bypass, privilege escalation, fund extraction
Stored XSS, CSRF with impact, API abuse, data manipulation
Reflected XSS, data leakage, logic flaws, information disclosure
Verbose errors, minor config issues, low-impact info disclosure
Active Bounties (1)
| ID | Title | Severity | Status | Reward | Submissions |
|---|---|---|---|---|---|
| ARB-001 | Sequencer censorship via crafted transaction batching | High | Open | $10,000–$50,000 | 0 |
Rules of Engagement
• Do not access, modify, or delete data belonging to other users.
• Do not perform denial-of-service attacks or automated scanning at high volume.
• Report vulnerabilities promptly and provide sufficient detail to reproduce.
• Allow reasonable time for fix before public disclosure (90 days).
• Safe harbor: We will not pursue legal action against researchers acting in good faith within these rules.