Bug bounty presence & max payout

Hyperliquid's assessment for RD-F-007 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Self-hosted bug bounty at bugbounty@hyperfoundation.org. Critical up to 1M USDC, High up to 50k USDC, Medium up to 10k USDC. KYC/KYB required. NOT on Immunefi or Cantina — no third-party verification of payout history or scope enforcement.

Sources #

Docs
Hyperliquid Bug Bounty ProgramHyperliquid bug bounty program pageretrieved 2026-04-28

Methodology #

Check whether a public bug bounty program is active for this protocol and record the maximum payout in USD.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol hyperliquid factor RD-F-007 score yellow collected_at 2026-04-28 13:58:49