Jito Foundation Launches a $250K Bug Bounty Program on Immunefi


We’re excited to announce that Jito Foundation has launched a new Bug Bounty Program on Immunefi — with rewards up to $250,000.
Jito is a merkle-based token distributor for the Solana network that allows distributing a combination of unlocked and linearly unlocked tokens. By joining the Jito Foundation Bug Bounty Program, you’ll be part of an effort to enhance the security of cutting-edge blockchain technology and have the chance to earn.
Here are the program details:
- Maximum Bounty: $250,000
- Payouts: Rewards are denominated in USD but paid out in JTO on the Solana network.
- KYC Requirements: Researchers must complete KYC verification to receive rewards. Required information includes full name, date of birth, proof of address, and a copy of a government-issued ID.
The Jito Foundation BBP focuses on critical components of the Jito ecosystem:
- Jito-Solana: Their modified Solana Labs validator client, available here.
- Jito-Relayer: The relayer that protects validators from network spam, found here.
- Jito Programs: Jito’s suite of smart contracts, available here.
- Stakenet: Jito’s smart contract-based staking solution, found here.
In the Jito Foundation BBP, rewards are distributed based on the severity of the vulnerabilities discovered:
- Critical: Up to $250,000 for issues such as network shutdowns, unintended chain splits, or permanent fund freezing.
- High: $100,000 for issues like unintended chain splits or significant transaction delays.
- Medium (Blockchain/DLT): $25,000 for impacts like increased network resource consumption or partial network node shutdowns.
- Low (Blockchain/DLT): $10,000 for issues like transaction fee modifications.
Researchers are required to submit a Proof of Concept (PoC) demonstrating the bug’s impact, in accordance with Immunefi’s guidelines. Jito Foundation will not consider reports of known issues without verifiable evidence.
For more details and to participate, please visit the Jito Foundation Bug Bounty Program page on Immunefi. Let’s work together to make the Jito-Solana ecosystem safer and more secure for everyone.