Bug bounty presence & max payout

Aave v3's assessment for RD-F-007 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Active Immunefi program with $1,000,000 maximum payout for critical smart contract vulnerabilities. Also active on Sherlock. Exceeds the $500K green threshold. T-10 notes 83 in-scope assets and monthly payouts evidenced.

Sources #

URL
Aave Immunefi Bug BountyImmunefi Aave bug bounty — $1M max payoutretrieved 2026-04-27
URL
Aave Sherlock Bug BountySherlock bug bounty (Aave)retrieved 2026-04-27

Methodology #

Check whether a public bug bounty program is active for this protocol and record the maximum payout in USD.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol aave-v3 factor RD-F-007 score green collected_at 2026-04-27 23:28:46