In brief. Metric is a bug bounty program on Immunefi. 3 assets are listed in scope, 3 of them bounty-eligible. As of Nov 10, 2026. Markdown for agents

NR Unrated

Metric

Metric Immunefi

3 more reviews needed for a grade

Write a review

Program page immunefi.com ↗

Claim this company profile

Work at Metric? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.

Ask BugRater to submit it

Reports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.

Reviews

0 published

No reviews yet.

Be the first to review

Program profile Immunefi, imported

Immunefi published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade. Last checked 10 Nov 2026.

Submissions

Open

Launched

Nov 2026

Scope

3 assets

Asset	Type	Eligibility	Max severity
https://github.com/Metricxyz/oracle-contracts	SOURCE CODE	✓ bounty	not set
https://github.com/Metricxyz/periphery-contracts	SOURCE CODE	✓ bounty	not set
https://github.com/Metricxyz/pool-contracts	SOURCE CODE	✓ bounty	not set