Disclosure channel exists
Curve Finance's assessment for RD-F-175 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Active security disclosure channel confirmed: security@curve.fi. Program operational and functional — confirmed by $250K payout to Marco Croc (May 2024) for reentrancy vulnerability disclosure. Docs page (docs.curve.finance/security/security/) returns 403 but redirect confirmed to docs.curve.finance domain; channel confirmed via third-party coverage.
Sources #
- DocsCurve Finance security documentationCurve Finance security docs (403) — channel inferred from payout confirmationretrieved 2026-04-28
- Curve Finance rewards dev $250K for vulnerability discoveryCryptoTimes — $250K payout confirmed; Marco Croc disclosure via security channelretrieved 2026-04-28
Methodology #
Determine whether the protocol publishes a public security disclosure channel (security@ email, Immunefi program, in-house disclosure page).
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol curve-v2 factor RD-F-175 score green collected_at 2026-04-28 19:48:40