Disclosure SLA public

BENQI's assessment for RD-F-176 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

BENQI does not publish a specific acknowledgment-time SLA. docs.benqi.fi/resources/risks reviewed — no SLA timeframe stated. Immunefi program description does not state a BENQI-specific ack SLA. Immunefi platform provides implicit response-time norms under its standard terms (projects are expected to respond within standard business-day windows and whitehats can escalate to Immunefi mediation), but BENQI has not independently committed to an explicit <=72h acknowledgment window. Threshold: yellow = SLA stated but not tested or >72h (here: SLA not explicitly published by BENQI, channel exists, implicit Immunefi platform norms apply).

Sources #

URL
BENQI Immunefi Bug BountyImmunefi BENQI program page — no BENQI-specific ack SLA statedretrieved 2026-05-16
URL
BENQI Risks & AuditsBENQI risks & audits docs — no SLA timeframe foundretrieved 2026-05-16

Methodology #

Determine whether the protocol publishes an acknowledgment-time SLA for disclosed vulnerabilities (e.g., 72h ack).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol benqi factor RD-F-176 score yellow collected_at 2026-05-16 11:02:12