Disclosure SLA public
SUNSwap (sun.io)'s assessment for RD-F-176 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No acknowledgment-time SLA published in any accessible primary source. No Immunefi program (which would carry SLA). sunswap.com/docs and docs.sun.io both return 403. No governance forum post references a disclosure policy or SLA. The absence of a disclosure channel (F175 red) is the structural prerequisite; no secondary SLA evidence exists independently. A protocol with no disclosure channel has no SLA by definition.
Sources #
- URL
- Immunefi Bug Bounty ProgramsImmunefi bug bounty search — no sunswap program (no SLA carrier exists)retrieved 2026-05-17
Methodology #
Determine whether the protocol publishes an acknowledgment-time SLA for disclosed vulnerabilities (e.g., 72h ack).
See the full factor methodology and distribution across all protocols →