Disclosure SLA public
Babylon Protocol's assessment for RD-F-176 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
SECURITY.md explicitly states: 'We will confirm receipt of your report within 48 hours.' This is a published SLA under the 72-hour green threshold. However, no public record exists of this SLA being tested and verified under a real-world disclosure scenario (OZ 2026 disclosure was actioned but no timestamps published). Yellow = SLA stated but not verified through prior instances.
Sources #
- URLOpenZeppelin Security Research on BabylonOZ research publication — notes 'triaged reports quickly, communicated clearly, shipped fixes promptly' but no specific timestampsretrieved 2026-05-04
- Babylon SECURITY.md — 48h acknowledgment SLASECURITY.md — states 'We will confirm receipt of your report within 48 hours'retrieved 2026-05-04
Methodology #
Determine whether the protocol publishes an acknowledgment-time SLA for disclosed vulnerabilities (e.g., 72h ack).
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol babylon-protocol factor RD-F-176 score yellow collected_at 2026-05-04 19:43:27