Disclosure channel exists
Jito's assessment for RD-F-175 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Active public disclosure channel via Immunefi (https://immunefi.com/bug-bounty/jito/information/). Live since 2024-08-28, managed by Asymmetric Research. Covers 8 in-scope asset classes. jito-solana SECURITY.md directs to Immunefi. JIP-5 DAO proposal passed establishing program with 3-of-5 multisig fund control. Active monitoring inferred from Asymmetric Research management agreement. Channel existence and structural monitoring satisfy green condition.
Sources #
- GitHubjito-solana SECURITY.mdSECURITY.md: 'The bug bounty program for Jito-Solana is managed by Immunefi'retrieved 2026-04-29
- Immunefi — Jito Bug BountiesImmunefi Jito bug bounty — live since 2024-08-28, max $250K Criticalretrieved 2026-04-29
- JIP-5: Bug Bounty Program — Jito ForumJIP-5 — DAO-passed bug bounty proposal; 1M JTO allocated; 3-of-5 multisigretrieved 2026-04-29
Methodology #
Determine whether the protocol publishes a public security disclosure channel (security@ email, Immunefi program, in-house disclosure page).
See the full factor methodology and distribution across all protocols →