Bug bounty scope gap on highest-TVL contracts

Euler V2's assessment for RD-F-183 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Active Cantina bounty explicitly covers EVK (vaults returned by verifiedArray() from perspective contracts), EVC, Euler Price Oracle, Reward Streams, Fee Flow, Euler Earn, EulerSwap. EVK and EVC are highest-TVL contracts ($337M on Ethereum). Only development branches and third-party integrations are out of scope. No scope gap for highest-TVL contracts.

Sources #

URL
Cantina Euler Bug Bounty ScopeCantina bounty scope — EVK, EVC, EPO, EulerSwap all in scope; max $7.5Mretrieved 2026-05-04

Methodology #

Determine whether the highest-TVL contracts of this protocol (especially shared primitives: OFT adapters, ZK verifiers, bridge inbox) are explicitly excluded from the protocol's active bug bounty scope.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol euler-v2 factor RD-F-183 score green collected_at 2026-05-04 19:56:06