defirisk.co
rubric v1.7.0

Ignored bounty disclosure

Cap (cUSD / stcUSD)'s assessment for RD-F-008 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No prior security incidents confirmed for Cap protocol (zero exploits; web search for 'cap labs exploit 2025 2026' returned no incident results). Data cache rekt entries (Radiant, Rari, Midas) are name-collision false positives per profile §10. No post-mortem to evaluate.

Sources #

  • Internal
    Cap Protocol Profile §1000-profile.md §10 — Known incidents: none; rekt cache entries confirmed false positivesretrieved 2026-05-17
  • URL
    Cap Protocol — No Known IncidentsWeb search: 'cap labs cUSD stcUSD security exploit hack incident 2025 2026' — no resultsretrieved 2026-05-17

Methodology #

Determine whether any prior post-mortem documents a disclosed vulnerability that was reported to the team and not actioned before exploit.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol cap factor RD-F-008 score green collected_at 2026-05-17 10:56:24