Kucoin Immunefi Takes Over Code4rena Users Amid Platform Shutdown
Article Content
- •Code4rena has ceased operations, transferring its users to Immunefi.
- •Immunefi will maintain existing bounty program structures during migration.
- •The shutdown occurs amid a record number of DeFi exploits and declining market activity.
Code4rena, a competitive smart contract auditing platform, has announced its shutdown, with Immunefi stepping in to absorb its users and security researchers. The transition will ensure that existing bug bounty programs, including their scopes, rules, and reward structures, remain unchanged. Code4rena's closure follows a challenging period for decentralized finance (DeFi) protocols, marked by a surge in crypto exploits. In April 2026 alone, over 20 incidents were reported, contributing to a total of $16.521 billion compromised in DeFi. The platform had previously raised $6 million in funding and was acquired by Zellic in 2024. Immunefi aims to facilitate a seamless migration for Code4rena's clients, preserving the integrity of ongoing bounty programs. This consolidation reflects a broader trend in the blockchain security sector as firms strive to maintain robust security measures.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (9)
Following this threat?
Track Code4rena in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…