KuCoin
Log In
language_currency
Home
Blog
Crypto Report
Details
img

KuCoin Project Updates: Immunefi Ecosystem 2026 Q1 Update

2026/05/05 04:09:02

Summary

Custom
This is an update on the Immunefi Platform and IMU, which is the central value creation asset of the Immunefi security ecosystem. Immunefi is the leading security platform for the onchain economy, protecting $190B+ in TVL across 230 active bug bounty programs, processing 93% of all critical crypto vulnerability disclosures industrywide, and with over $25B in hacks prevented to date. The IMU token, launched by the Immunefi Foundation on January 22, 2026, is the onchain incentive layer that aligns the three groups determining ecosystem security: protocols that fund coverage, security researchers who surface vulnerabilities, and the community that backs them.

Key Metrics

Q1 2026 was a step-change quarter for the platform. Researcher payouts rose from $2.40M in Q4 2025 to $7.87M in Q1, a 228% quarter-over-quarter increase across 1,104 paid bug bounty reports. Average payout per report nearly tripled from $2,516 in Q4 2025 to $7,131 in Q1 2026 (+178%), reflecting a heavier mix of critical and high-severity vulnerabilities surfaced.
 
A single $3M payout accounts for 38% of all Q1 2026 researcher payouts on its own. The top 5 reports alone sum to ~$4.5M, over half the quarter's total. Average payout minus the $3M payout - per report average drops from $7,131 back down to ~$4,406, still a meaningful step up.
 
Metric
Q4 2025
Q1 2026
QoQ Change
Paid bug bounty reports
953
1,104
+151 (+16%)
Total paid to researchers (USD)
$2,399,948
$7,872,078
+$5.4M (+228%)
Average payout per report
$2,518
$7,131
+$4,613 (+183%)
Unique researchers paid (quarter)
355
403
+48 (+13.5%)
Active programs (period end)
218
230
+12 (+5.5%)
Registered researchers (period end)
73,162
81,828
+8,666 (+12%)
Active researchers with at least one non-spam report (period end)
2,077
2,370
+293 (+14%)
 
April momentum: registered researchers reached 85,303 by April 28 (+3,475 net new in April alone). Cumulative all-time researcher payouts crossed $134M by end of March. IMU pledged via Hacker Pledging stands at 16.34M IMU.

IMU Token Metrics

Field
Value
Market Cap
$2.15M
Fully Diluted Valuation (FDV)
$25.03M
Circulating Supply
859,369,446 IMU (8.59% of total)
Total Supply
10,000,000,000 IMU
OnchainToken Holders
1,920

Performance Highlights

1. IMU launched and immediately reached Tier-1 exchange distribution.
On January 22, 2026, IMU went live as the onchain incentive layer for the Immunefi ecosystem. Within days of launch, IMU was tradable on Coinbase, KuCoin, Bybit, Bitget, Crypto.com, Gate, MEXC, Bitvavo, BingX, and BitMart.
2. Anchorage Digital, America's first federally chartered crypto bank, bought IMU and adopted Immunefi as security infrastructure.
In March, Anchorage Digital made a strategic Ventures Portfolio Company purchase of IMU and selected the Immunefi platform to secure Porto, its self-custody wallet for institutional firms deploying onchain investment strategies. As CEO Mitchell Amador put it, "The IMU token ensures that every participant in this ecosystem, from security researchers to protocol teams, is aligned around the shared mission of protecting user funds." This was the first major institutional integration where IMU acquisition and Immunefi platform infrastructure adoption happened as a single decision.
3. Record-breaking platform quarter: $7.3M paid to researchers across 1,268 reports.
Q1 2026 ($7.3M) is the strongest quarter since 2024 Q2, and a significant step up from the prior three quarters (Q2–Q4 2025 averaged ~$3.5M). Notable Q1 critical severity payouts included $300K to bpop23293, $125K to adnanthekhan, $100K to gregoai, and additional payouts across other major projects. Cumulative all-time researcher payouts crossed $134M by end of March, with 166 Elite-tier researchers now active on the platform.
4. The 2026 State of Onchain Security Report set the industry agenda.
In March, Immunefi published the most comprehensive analysis of crypto hack data ever produced, covering 425 publicly known hacks between 2021 and 2025 and $11.9B in total losses. The headline finding, that more than 90% of crypto projects still carry critical, exploitable vulnerabilities, was picked up by The Block, CoinTelegraph, CoinMarketCap, crypto.news, and dozens of other outlets, establishing the report as the reference dataset for crypto security and accelerating institutional inbound interest into Q2.
5. Hacker Pledging Season 2 launched with 3x the incentive scale.
Hacker Pledging allows pledgers to pledge IMU tokens behind Security Researchers they believe in. When the SR finds bugs and earns bounties, both the SR and their pledgers receive bonus IMU rewards.
Season 1 closed on March 9 with 14.3M IMU pledged. Season 2 launched the same day with a 4.5M IMU bonus pool (3x Season 1) and a $3.5M payout target running through July 7. Researchers and their backers now split incentives 50/50, with researchers requiring at least 10,000 IMU in backing to unlock full bonuses on a critical report. Pledged IMU reached 16.34M by late April, with each pledge incentivizing researchers to find more bugs and power training data for Immunefi AI.

Future Outlook / Roadmap

Future focus is to double down on the Immunefi platform’s core security stack. Q1 proved continued growth amidst a backdrop of increasing hacks: payouts up 221% QoQ and average per-report payout nearly tripled, while April's $606M+ in DeFi losses underlined that the market needs continuous coverage, not one-shot audits. Q2 focus is on concentrating investment in our five core offerings:
  • Audit Competitions. Base Azul is live now with a $250K prize pool, pressure-testing Coinbase's first independent L2 upgrade ahead of May 13 mainnet activation.
  • Audits. Defined-scope expert review at the entry point for new code, tightening integration with the audit competition pipeline.
  • Bug Bounty Programs. The continuous coverage layer running 230 active programs and growing, including Lido, Wormhole, The Graph, Ethena, ZKsync, among others.
  • PR Reviews. Embeds Immunefi's security researchers directly into GitHub pull requests, enabling human-powered vulnerability detection before code hits production.
  • Managed Triaging. Immunefi handles the operational load of report triage on behalf of protocols, filtering noise and routing valid findings so internal security teams resolve real issues faster.
For IMU-specific developments, Hacker Pledging Season 2 runs through July 7 with a bonus structure designed to compound IMU demand alongside the platform's growing share of critical vulnerability disclosures. More pledges feed sharper AI-driven threat detection, sharper detection drives stronger protocol protection, and stronger protection drives more protocol participation, which feeds more researchers, more reports, and more pledges in turn.

Additional Information

Social Media

Useful Links

 
Trade IMU on KuCoin here.
 
 
Disclaimer:This content is for informational purposes only and does not constitute investment advice. Cryptocurrency investments carry risk. Please do your own research (DYOR).