Disclosure channel exists

Evidence summary #

security@aave.com published on aave.com/security. Immunefi program active ($1M max, 83 in-scope assets). Sherlock secondary program active. Multiple redundant disclosure channels. BGD departure creates transition risk but channels remain active through at minimum June 2026 retainer period.

Sources #

Methodology #

Determine whether the protocol publishes a public security disclosure channel (security@ email, Immunefi program, in-house disclosure page).

See the full factor methodology and distribution across all protocols →