Anchorage Digital has taken a strategic stake in Immunefi and its IMU token, directly linking a US-chartered crypto bank to an on-chain bug bounty infrastructure for DeFi security.
Summary
- Anchorage Digital invested in Immunefi and bought IMU, strengthening ties between a US-chartered crypto bank and one of crypto’s largest bug bounty platforms.
- The deal signals that institutions are now considering on-chain security as core infrastructure, with Immunefi’s bug bounties positioned as a way to reduce exploit tail risk in DeFi and L1s.
- Anchorage can move banks and asset managers toward standardized incentive programs and security SLAs, while Immunefi gains a regulated partner to legitimize IMU’s role in its security operating system.
Anchorage Digital, the first federally chartered crypto bank in the United States, has made a strategic investment in security infrastructure provider Immunefi and purchased its proprietary IMU token, strengthening the link between regulated financial institutions and on-chain bug bounty markets. The move underscores how institutional players are increasingly viewing protocol security as critical infrastructure rather than an afterthought, especially as capital flows back into the riskier DeFi and L1 ecosystems.
The timing is important. After multiple cycles of bridge hacks, board takeovers, and oracle failures, institutional allocators have become acutely sensitive to smart contract risk, often demanding audit trails, bug bounty coverage, and clear incident response procedures before implementing scope into a protocol. Anchorage’s support gives Immunefi a regulated, US-chartered partner that can open doors with banks, asset managers and corporations that need robust counterparties before embarking on on-chain security workflows. In practice, this could translate into larger, more structured bounty programs and standardized security SLAs around large DeFi and infrastructure projects.
For Immunefi, Anchorage’s involvement also helps legitimize IMU as part of a broader security ecosystem, rather than as a speculative side symbol. As the relationship deepens, a plausible route is closer integration between Anchorage’s custody stack and Immunefi’s bounty coordination layer, allowing institutional clients to budget in advance for security programs or set aside funds for quick payouts if vulnerabilities are uncovered. Such tools would mirror traditional cyber insurance and incident response holders, but enforced and handled on-chain
At the ecosystem level, the deal signals a slow but decisive shift: instead of just insuring against outside crypto risks, regulated entities are now buying the core primitives that mitigate that risk at the protocol level. Whether that bet pays off will be immediately apparent from the frequency of exploits, recovery rates and the willingness of large, regulated capital pools to DeFi is an investable infrastructure rather than a speculative afterthought.
Read more: The entire protocol takes into account a shift from tokens to equities in the pursuit of legal clarity and institutional capital