Disclosure SLA public
Ethena's assessment for RD-F-176 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No protocol-level acknowledgment SLA is published in Ethena's own documentation or Immunefi program page. Immunefi provides its own platform-level SLA framework and requires Category 3: Approval Required for responsible publication of critical findings, but Ethena has not published a specific 72h acknowledgment or triage timeline commitment. Scored yellow: disclosure channel exists but no explicit published SLA from the protocol.
Sources #
- URLEthena Immunefi program information page — no explicit SLA statedhttps://immunefi.com/bug-bounty/ethena/information/retrieved 2026-04-28
Methodology #
Determine whether the protocol publishes an acknowledgment-time SLA for disclosed vulnerabilities (e.g., 72h ack).
See the full factor methodology and distribution across all protocols →