The vulnerability bounty platform Immunefi has launched Credits, and over 700 researchers have received allocations
The blockchain vulnerability bounty platform Immunefi announced the launch of Immunefi Credits. Since the submission fee mechanism was initiated, researchers will receive an equivalent amount of Credits for effective reports, covering valid discoveries, valid reports of duplicate submissions, privately known issues, and situations where the mediation results are favorable to the researchers. The platform stated that over 700 researchers have already received Credits without needing to apply separately, and the amount can be viewed on the Credits page associated with the console balance.Immunefi stated that starting today, Credits can be used to pay for submission reports, mediation, account verification, and other fees within the platform, and will be used for related services once Immunefi Studio is open to the public. One Credit is worth 1 US dollar and can be purchased with USDC. Credits do not replace vulnerability bounties or audit competition rewards; valid discoveries will still receive rewards according to the original rules, and additionally receive Credits equivalent to the submission fees. The Credits issued retroactively will be valid for 12 months from today, and thereafter each Credit will be valid for 12 months from the date of crediting, bound to the account, and non-transferable or redeemable.Eligible situations also include valid discoveries already paid in vulnerability bounties or confirmed in audit competitions, duplicates of valid reports by others, privately known issues and their duplicates, as well as mediation fees when mediation is won. Publicly known issues, invalid reports, out-of-scope submissions, policy violations, duplicates of rejected reports, and duplicates of self-reports are not counted. Account verification fees can earn equivalent Credits when there is a valid report after verification and the accuracy rate reaches at least 25%. The fee mechanism has been applicable to vulnerability bounties since March 24 and to audit competitions since April 10, with relevant verifications currently conducted approximately every two weeks.