Ignored bounty disclosure

Pendle Finance's assessment for RD-F-008 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No evidence of a disclosed vulnerability ignored prior to exploit. Rekt database shows no Pendle core incidents. Penpie exploit (Sept 2024) was against Penpie's own reentrancy bug, not Pendle core.

Sources #

URL
Explained: The Penpie Hack (Sept 2024) — HalbornHalborn Penpie hack analysisretrieved 2026-04-29
URL
Rekt database — no Pendle core incident00-data-cache.json rekt.incidents: []retrieved 2026-04-29

Methodology #

Determine whether any prior post-mortem documents a disclosed vulnerability that was reported to the team and not actioned before exploit.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol pendle factor RD-F-008 score green collected_at 2026-04-28 21:09:40