Hunt Bedrock bug bounties

What is a Contribution Opportunity?

A Contribution Opportunity is a concrete task that you can work on to contribute to the Optimism Collective.

Summary

The smart contracts for Optimism’s upcoming Bedrock launch will be included in Optimism’s $2m Immunefi bug bounty program before Bedrock is deployed to OP Mainnet. Successful bug bounty reports are paid directly through the Immunefi bounty program, but the resources that you produce while hunting for bugs can also be immensely valuable.

Examples of valuable output, even in the absence of a successful report, include:

• A detailed document describing your approach to reviewing the Bedrock contracts
• A detailed document describing confusing or undocumented elements of the Bedrock contracts
• Tooling that you may have used while reviewing the Bedrock contracts
• Any of the types of output also found in the “Review Bedrock Contracts” section above

Impact

Optimism’s smart contracts form the backbone of the OP Stack. Successful bug reports are clearly valuable in keeping the OP Stack safe for its users. Output that you generate, even if you aren’t able to find a bug, is also immensely valuable in improving the security of the Stack and is generally underappreciated by other bounty programs. We highly value this sort of content because it allows us to improve our security tooling and processes.

Resources

• Bedrock
• Optimism on Immunefi