Immunefi and Plume Network Partner to Secure the Modular Future of DeFi

We’re thrilled to announce our latest mainnet Attackathon in collaboration with Plume Network, the first modular blockchain built specifically for real-world asset (RWA) tokenization. This Attackathon invites whitehats to probe Plume's live smart contract code and help secure the future of onchain RWAs.

Plume is a modular blockhain built on the Arbitrum rollup, purpose-built for real-world assets. By streamlining compliance, onboarding, and tokenization infrastructure, Plume makes it easy for asset originators to bring RWAs like real estate, credit, and art onchain.

Plume's modular architecture enables high scalability, faster settlement, and reduced gas costs, all while maintaining security.

Why This Mainnet Attackathon Matters

This Attackathon is live on mainnet, which means every bug found is protecting real user funds and infrastructure.

Researchers who submit impactful vulnerabilities can earn from a reward pool of $200,000, with the possibility of additional rewards through a dynamic mitigation competition that runs simultaneously.

As Plume fixes bugs during the competition, more of the mitigation pool gets unlocked, encouraging fast response and greater ecosystem resilience. If no public fixes are made during the Attackathon window, the mitigation competition will launch within 30 days post-competition.

Here are the details: 

• Start Date: 14 July 2025
• End Date: 11 August 2025
• Reward Pool: Up to $200,000 USD

Find the full rules and conditions on the Plume Attackathon program page.

Education at the Core

Good news, security researchers! You don’t need to start from scratch. We’ve curated educational materials to help you ramp up quickly.

Explore Plume’s architecture, documentation, security practices, and more through the Plume Attackathon Academy. Whether you’re a seasoned whitehat or new to the space, the Academy will get you ready to dive deep.

What is an Attackathon?

Immunefi Attackathons are time-bound, education-first security competitions. Unlike traditional bug bounty programs, Attackathons foster an environment of collaboration and knowledge-sharing. 

Researchers race against the clock (and each other) to uncover critical vulnerabilities, all with high-quality support, duplicate rewards, and direct communication with project teams.

Every Attackathon ends with a leaderboard, public report disclosures, and community celebration.

Secure the Future of Plume Network and Earn Big

By participating in the Plume Attackathon, you’ll help stress test one of the most promising projects in the RWA space while getting rewarded for your impact. Your findings will make DeFi safer for everyone.

Ready to hunt on the Plume Network Attackathon.