defirisk.co
rubric v1.7.0

Disclosure channel exists

USDD (Decentralized USD)'s assessment for RD-F-175 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No public security-disclosure channel exists for USDD. Immunefi search returned no USDD listing — confirmed absence (profile §9 Phase-0 confirmed 404, not anti-bot). No Sherlock program. No dedicated security email, HackerOne, or responsible-disclosure page on usdd.io or trondao.org. Data cache confirms bug_bounty.platform: null, bug_bounty.url: null. $1.475B TVS with zero public disclosure channel is a significant hygiene gap.

Sources #

  • Docs
    USDD Official Siteusdd.io official site — no security disclosure page or bug bounty link foundretrieved 2026-05-17
  • URL
    Immunefi Bug Bounty ProgramsImmunefi bug bounty listings page — no USDD program found in 2026-05-17 searchretrieved 2026-05-17

Methodology #

Determine whether the protocol publishes a public security disclosure channel (security@ email, Immunefi program, in-house disclosure page).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol usdd factor RD-F-175 score red collected_at 2026-05-17 11:34:18