In brief. Optimism Fault Proofs is a bug bounty program on Sherlock. 2 assets are listed in scope, 2 of them bounty-eligible.
Optimism Fault Proofs
Work at Optimism Fault Proofs? Claim it to respond to reviews as the verified owner.
Found a vulnerability?
If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.
Ask BugRater to submit itReports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.
Reviews
0 publishedNo reviews yet.
Sherlock published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade. Last checked 19 Oct 2026.
Scope
2 assets| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| https://github.com/ethereum-optimism/optimism | SOURCE CODE | ✓ bounty | not set |
| https://github.com/sherlock-audit/2024-02-optimism-2024 | SOURCE CODE | ✓ bounty | not set |
Known vulnerabilities in in-scope packages
1 from OSV.devPublished vulnerabilities in the packages and repositories this program lists in scope, from the open OSV.dev database. They are already public, so they are context for where the code has broken before, not findings to report.
| Advisory | Package | Severity | Published |
|---|---|---|---|
|
CVE-2022-24916
Optimism before @eth-optimism/l2geth@0.5.11 allows economic griefing because a balance is duplicated upon contract self-destruction. |
github.com/ethereum-optimism/optimism | not set | 10 Feb 2022 |