Immunefi, which helps crypto services create bug bounty programs, raised a $24M Series A led by Framework Ventures
- Immunefi has raised $24 million in Series A funding led by Framework Ventures. — The startup hosts bug bounty programs by crypto projects and earns a 10% commission on bounty payouts.
Context & Ripple Effects
Immunefi sits between crypto projects and white-hat researchers, hosting their bug bounty programs and taking a 10% cut of payouts — a commission model that got its proof point when Immunefi awarded a researcher $1M for finding a vulnerability across three Polkadot parachains that could have been exploited for roughly $200M. Framework Ventures' $24M Series A is a bet on that take-rate scaling with crypto's hack losses.
The raise also lands in a market where generalist bug bounty intermediaries are pulling in serious capital: Bugcrowd went from a $30M Series D in 2020 to a $102M Series E by early 2024, signaling that investors see crowdsourced vulnerability disclosure as durable infrastructure rather than a niche service.
First-order effects
- Immunefi gets growth capital to sign more crypto projects onto its platform, while Framework Ventures takes an early position in the commission layer of crypto security spending.
- Crypto projects running Immunefi-hosted bounties gain a better-capitalized intermediary whose payouts — like the $1M Polkadot award — are large enough to attract top-tier researchers.
Second-order effects
- Generalist platforms like Bugcrowd face a crypto-native competitor that specializes in the sector's largest payouts, pressuring them to build dedicated web3 practices or cede that vertical.
- As bounty sizes grow, security researchers rationally concentrate effort where commissions clear highest, shifting talent toward crypto disclosure work and away from lower-paying traditional software targets.
Third-order effects
- If the pattern holds, crypto security budgets structurally shift from one-off audits toward standing bounty markets run by commissioned intermediaries, making platforms like Immunefi recurring toll-takers on vulnerability disclosure.
- Investor appetite for security intermediaries — Bugcrowd's later-stage rounds alongside this Series A — points toward consolidation of the bug bounty market into a few capitalized platforms per vertical.
The trend: Bug bounty platforms are specializing by vertical and scaling on commission economics, with crypto's outsized exploit losses making it the premium market for crowdsourced security research.