defirisk.co
rubric v1.7.0

Disclosure SLA public

Aave v3's assessment for RD-F-176 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No explicit acknowledgment-time SLA (e.g., '72h ack guaranteed') found on aave.com/security or the Immunefi program page. Immunefi platform publishes standard payout SLAs but the protocol itself has not declared a named ack-SLA. Yellow: SLA not published. Consistent with T-10 finding.

Sources #

Methodology #

Determine whether the protocol publishes an acknowledgment-time SLA for disclosed vulnerabilities (e.g., 72h ack).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol aave-v3 factor RD-F-176 score yellow collected_at 2026-04-27 23:28:46