Disclosure SLA public

Morpho V1 (Morpho Blue + MetaMorpho)'s assessment for RD-F-176 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No publicly-stated acknowledgment SLA found in Immunefi program description, docs.morpho.org, or governance forum. Immunefi Approval Required (Category 3) sets publication norms but not a response-time SLA. Channel exists but no SLA stated.

Sources #

URL
https://immunefi.com/bug-bounty/morpho/retrieved 2026-04-27
Docs
https://docs.morpho.org/learn/resources/risks/retrieved 2026-04-27

Methodology #

Determine whether the protocol publishes an acknowledgment-time SLA for disclosed vulnerabilities (e.g., 72h ack).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol morpho-v1 factor RD-F-176 score yellow collected_at 2026-04-30 21:19:13