Web3 bug bounty platform Immunefi imposes a 90-day suspension on white-hat security firm Trust Security

ChainCatcher news, the Web3 vulnerability bounty platform Immunefi has imposed a 90-day suspension on the white hat security company Trust Security. This decision was made after the latter accused Immunefi of unfairly refusing to pay a bounty for a critical vulnerability that could lead to funds being stolen.

On November 12, Trust Security revealed on X that its bounty team had discovered a significant fund theft vulnerability on the forked mainnet of an unnamed project. The proof of concept for the vulnerability has been shared with Immunefi, which acts as an intermediary between white hats and projects to ensure bounties are paid for credible vulnerability identification.

However, Immunefi stated that Trust Security detected a vulnerability that was out of scope. Trust claimed that Immunefi erroneously sided with the project’s "nonsense," only offering a "meager goodwill bounty" without providing the full reward for identifying the critical vulnerability.

Immunefi rebutted Trust's claims of unfair compensation and issued a 90-day suspension order on the grounds of "misrepresentation of the current issue." Immunefi stated that if Trust commits any further violations, it will impose a permanent ban.