Immunefi credits return valid-report fees to over 700 researchers

Immunefi has launched a credits system that returns submission fees on valid bug reports to more than 700 researchers, including hunters whose findings were closed as duplicates or private known issues. Summary Valid reports qualify for credits equal to submission fees, without replacing researchers’ bounty rewards. Each credit is worth $1, expires after 12 months, and cannot be withdrawn or transferred. Unique valid findings doubled between January and September, according to Immunefi’s announcement. Plether’s audit competition has opened with an $80,000 USDC reward pool for security researchers. According to Immunefi’s announcement on Nov. 2, the program covers eligible reports submitted since fees began earlier this year, with balances credited automatically. Researchers do not need to submit a claim or complete a separate application. The policy addresses a complaint from hunters who paid to report a real vulnerability, only to learn that someone else had already found it or that the protocol privately knew about it. “You found a valid bug, and someone else reported it first,” Immunefi wrote. “From today, you receive credits equal to that fee, ready for your next submission.” I...