Prior known-ignored disclosure
Save (formerly Solend)'s assessment for RD-F-177 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No evidence found that a disclosed vulnerability was reported to the Solend/Save team and not actioned before an exploit. Aug 2021 incident was discovered by an attacker, not a prior responsible disclosure. Nov 2022 oracle incident was an opportunistic market attack, not a pre-reported vulnerability. Neither post-mortem references an ignored prior disclosure. Green threshold: no evidence of ignored disclosure.
Sources #
- URLSLND-INCDT-01 Report (Public)SLND-INCDT-01 — no mention of prior ignored disclosureretrieved 2026-05-17
- USDH Price Manipulation — Impact on Isolated PoolsSolend Nov 2022 post-mortem — no mention of prior ignored disclosureretrieved 2026-05-17
Methodology #
Determine whether evidence exists in prior-incident post-mortems that a disclosed vulnerability was reported to the team and not actioned before exploit.
See the full factor methodology and distribution across all protocols →