Bug bounty presence & max payout

Stake DAO's assessment for RD-F-007 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Stake DAO operates an in-house bug bounty program (not Immunefi). Maximum critical payout: $100,000. Yellow: active program exists but max payout $100K is in the $50K-$499K yellow band (well below the $500K green threshold). No Immunefi listing confirmed by search.

Sources #

URL
Immunefi — No Stake DAO ListingImmunefi search — Stake DAO not listed; StackingDAO is a different protocolretrieved 2026-05-16
Docs
Stake DAO Bug Bounty ProgramBug bounty program — Critical: $100K, High: $25K, Medium: $5Kretrieved 2026-05-16

Methodology #

Check whether a public bug bounty program is active for this protocol and record the maximum payout in USD.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol stake-dao factor RD-F-007 score yellow collected_at 2026-05-16 12:29:20