Prior known-ignored disclosure

Evidence summary #

No evidence of a disclosed vulnerability being ignored prior to any exploit. For V1: the donateToReserves vulnerability was not reported via bug bounty or responsible disclosure before the exploit. It was an audit gap — Sherlock audited eIP-14 and missed the health check omission; Omniscia explicitly noted the function was out of their scope. No 'disclosed but ignored' pattern. V2 has no prior incidents. Green.

Sources #

Methodology #

Determine whether evidence exists in prior-incident post-mortems that a disclosed vulnerability was reported to the team and not actioned before exploit.

See the full factor methodology and distribution across all protocols →