Ignored bounty disclosure

Evidence summary #

Four historical incidents documented; none show a case where a disclosed vulnerability was reported to Yearn and then ignored pre-exploit. The 2021 yDAI incident was discovered at execution time. The 2023 Fulcrum misconfiguration exploits involved legacy immutable contracts where no advance disclosure is documented. No evidence of ignored bounty disclosure pattern.

Sources #

Methodology #

Determine whether any prior post-mortem documents a disclosed vulnerability that was reported to the team and not actioned before exploit.

See the full factor methodology and distribution across all protocols →