Ignored bounty disclosure

Evidence summary #

No evidence of pre-exploit bounty disclosure that was ignored. The May 2025 $43K USD0++ exploit was detected by BlockSec (external monitoring), not via a bounty report. The team paused within one hour and stated no user funds were drained. No post-mortem evidence of prior disclosure rejection.

Sources #

Methodology #

Determine whether any prior post-mortem documents a disclosed vulnerability that was reported to the team and not actioned before exploit.

See the full factor methodology and distribution across all protocols →