In brief. NUVA is a bug bounty program on Immunefi. 11 assets are listed in scope, 9 of them bounty-eligible.
NUVA
Work at NUVA? Claim it to respond to reviews as the verified owner.
Found a vulnerability?
If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.
Ask BugRater to submit itReports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.
Reviews
0 publishedNo reviews yet.
Immunefi published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade. Last checked 19 Oct 2026.
Scope
11 assets| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| http://app.nuva.finance | URL | ✓ bounty | not set |
| http://nuva.finance | URL | ✓ bounty | not set |
| https://etherscan.io/address/0x50AE1e4A612A4623b747aEeFb30aFBA82804e12c | SMART CONTRACT | ✓ bounty | not set |
| https://etherscan.io/address/0xBB2f90A20AbC107161c0C66e2f7015bdb1D2c2f9 | SMART CONTRACT | ✓ bounty | not set |
| https://etherscan.io/address/0xC360e625F19A7ea47e47810B13E386221d5187D1 | SMART CONTRACT | ✓ bounty | not set |
Show all 11 assets
| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| https://etherscan.io/address/0xCB74517bfDe9Af6692C5C7D4A125b20bA7FA14D5 | SMART CONTRACT | ✓ bounty | not set |
| https://etherscan.io/token/0x5965f8e28eC14B58E49569f382A50F4f0B238327 | SMART CONTRACT | ✓ bounty | not set |
| https://zonescan.io/provenance/accounts/pb15y0f2zkc9a2cgyqkhpp3z9u6fmvtegf92s7ndx | SMART CONTRACT | ✓ bounty | not set |
| https://zonescan.io/provenance/contracts/pb10yzuaqqjsf4pwv6wkp87dqka0scrcgf92k92j6qkz9msc6qyzt3qqgl7e4 | SMART CONTRACT | ✓ bounty | not set |
| https://github.com/ProvLabs/nuva-evm-contracts | SOURCE CODE | not set | not set |
| https://github.com/provlabs/vault | SOURCE CODE | not set | not set |