Bug bounty presence & max payout

Lombard Finance's assessment for RD-F-007 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Active Immunefi bug bounty program, live since 2024-09-04, last updated 2026-04-15. Maximum payout $250,000 (10% of funds affected, minimum $50K). Vault holds ~$39,990 USDC on Ethereum. 40 contracts reported in scope. Max payout of $250K falls in the yellow band ($50K-$499K). The $500K green threshold is not met. Protocol also ran an Immunefi audit competition (Dec 2024-Jan 2025, $100K pool).

Sources #

URL
Lombard Finance Immunefi Bug BountyImmunefi bug bounty program — live, last updated 2026-04-15, max payout $250Kretrieved 2026-05-05

Methodology #

Check whether a public bug bounty program is active for this protocol and record the maximum payout in USD.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol lombard factor RD-F-007 score yellow collected_at 2026-05-05 12:03:08