Prior known-ignored disclosure
Liquity V1 + V2 (LUSD / BOLD)'s assessment for RD-F-177 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No evidence of any disclosure being received and ignored before an exploit. The Sep 2022 Tellor disclosure (reported by @paco0x via Twitter) was actioned — Tellor implemented a 15-minute delay fix. The Feb 2025 Stability Pool discovery was actioned same-day. Hacksdatabase: 0 Liquity incident entries. No post-mortem exists referencing an ignored prior disclosure. REKT DB: 0 entries.
Sources #
- URLTellor Issue and FixTellor Issue and Fix blog confirming Sep 2022 disclosure was actioned by Tellor team implementing 15-min delay requirementretrieved 2026-05-16
- hacksdatabase grep and 00-data-cache.json rekt fieldHacksdatabase grep: 0 Liquity incident entries; rekt.incidents = [] in data cacheretrieved 2026-05-16
Methodology #
Determine whether evidence exists in prior-incident post-mortems that a disclosed vulnerability was reported to the team and not actioned before exploit.
See the full factor methodology and distribution across all protocols →