IB
BugcrowdOffers Rewards
Immutable Bug Bounty
Immutable Bug Bounty appears to run a bug bounty or vulnerability disclosure program on Bugcrowd. It also offers rewards for valid security reports.
Created: February 15, 2026
Last Updated: October 5, 2026
In Scope (7)
https://passport.immutable.com/
https://auth.immutable.com
https://github.com/immutable/ts-immutable-sdk/tree/main/packages/passport/
https://hub.immutable.com/
https://play.immutable.com
https://api.immutable.com
https://api.x.immutable.com/
Out of Scope (8)
*.godsunchained.com
*.gogbackend.com
gogbackend.com
godsunchained.com
Anything that does not belong to Immutable
Any data exposure bug that are classified as Public Data such as Ethereum Wallet Address, NFT Purchase activity, or other public blockchain activity.
*.dev.x.immutable.com, *.sandbox.x.immutable.com, *.dev.x.immutable.com, *.sandbox.imtbl.com, *.dev.imtbl.com, *.ropsten.x.immutable.com, ropsten.imx.community (see brief for exceptions)
*.guildofguardians.com