Ignored bounty disclosure

Hyperliquid's assessment for RD-F-008 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No evidence in public post-mortems that a disclosed vulnerability was reported and not actioned before an exploit. The bridge outage (Oct 2024) was an RPC edge case, not a prior-disclosed bug. JELLY incident was a market manipulation exploit, not a code vulnerability.

Sources #

URL
Hyperliquid bridge outage incident reportBridge outage incident report (The Block)retrieved 2026-04-28
Docs
Hyperliquid JELLY incident post-mortemJELLY incident post-mortem wikiretrieved 2026-04-28

Methodology #

Determine whether any prior post-mortem documents a disclosed vulnerability that was reported to the team and not actioned before exploit.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol hyperliquid factor RD-F-008 score green collected_at 2026-04-28 13:58:49