Ignored bounty disclosure

Evidence summary #

No evidence of an ignored disclosure. The 2022 $10M payout demonstrates the team actively acted on responsible disclosure. The 2022-02-02 exploit ($320M) originated in Solana program code and was distinct from a prior disclosure (it was a 0-day in production); the uninitialized proxy bug was caught pre-exploit and paid out. No post-mortem documents a "team knew and ignored" pattern.

Sources #

Methodology #

Determine whether any prior post-mortem documents a disclosed vulnerability that was reported to the team and not actioned before exploit.

See the full factor methodology and distribution across all protocols →