Disclosure SLA public

Evidence summary #

Cantina program terms require reporters to submit within 24 hours of discovery — this is a reporter obligation, not a team acknowledgment SLA. No explicit team acknowledgment-time SLA (e.g., 72h ack) was found in the Cantina program terms or docs.dydx.xyz/policies/security. Yellow: disclosure window established but no published team-response SLA.

Sources #

Methodology #

Determine whether the protocol publishes an acknowledgment-time SLA for disclosed vulnerabilities (e.g., 72h ack).

See the full factor methodology and distribution across all protocols →