Ignored bounty disclosure
QuickSwap's assessment for RD-F-008 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No post-mortem evidence documenting a disclosed vulnerability reported to the team that was ignored before a DEX-level exploit. The October 2022 incident affected Market.xyz lending surface (not QuickSwap DEX); root cause was a Curve LP oracle vulnerability in the lending product, not a withheld disclosure. Hack database: 0 QuickSwap DEX entries. Rekt leaderboard: 0 entries.
Sources #
- URLTheBlock: QuickSwap Lending Exploit Oct 2022October 2022 oracle exploit — Market.xyz lending surface, not DEXretrieved 2026-05-16
Methodology #
Determine whether any prior post-mortem documents a disclosed vulnerability that was reported to the team and not actioned before exploit.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol quickswap factor RD-F-008 score green collected_at 2026-05-16 08:48:31