Post-exploit response score

Evidence summary #

No production exploit against mainnet users has occurred in either v1 (61 months) or v2 (12 months). Post-exploit response score requires a reference incident. The Feb 2025 pre-launch Stability Pool disclosure (zero user loss) provides favorable qualitative evidence: same-day disclosure, transparent multi-stage communication, full redeploy after extensive re-auditing — but is classified as pre-launch, not a production exploit per invocation brief U2.

Sources #

Methodology #

Curator-score (1–5) the most recent incident response on: compensation completeness, transparency of disclosure, root-cause analysis depth, and operational recovery speed.

See the full factor methodology and distribution across all protocols →