Ignored bounty disclosure

Evidence summary #

No formal bug-bounty channel disclosure was ignored (no bounty program is confirmed). However, Code4rena 2023 M-10 audit finding was dismissed without remediation — the functional equivalent of an ignored disclosure. Two resulting exploits confirm the consequential nature of the dismissal. Applied to the audit-channel equivalent per factor spirit.

Sources #

Methodology #

Determine whether any prior post-mortem documents a disclosed vulnerability that was reported to the team and not actioned before exploit.

See the full factor methodology and distribution across all protocols →