Bug bounty scope gap on highest-TVL contracts

Kinetiq's assessment for RD-F-183 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Cantina bug bounty (September 15 2025) explicitly in-scopes all 7 core kHYPE contracts: kHYPE, StakingManager, StakingAccountant, ValidatorManager, PauserRegistry, OracleManager, OracleAdapter. No scope gap on highest-TVL contracts. $5M Critical payout.

Sources #

URL
Kinetiq Cantina Bug BountyCantina bounty page — full in-scope contract list verifiedretrieved 2026-05-17

Methodology #

Determine whether the highest-TVL contracts of this protocol (especially shared primitives: OFT adapters, ZK verifiers, bridge inbox) are explicitly excluded from the protocol's active bug bounty scope.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol kinetiq factor RD-F-183 score green collected_at 2026-05-17 15:29:57