Disclosure SLA public
Circle USYC's assessment for RD-F-176 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No published acknowledgment SLA for USYC vulnerability disclosures found in USYC docs, Circle developer docs, or any public security page. Circle Arc BBP references a 5-business-day first-response target but only for Arc testnet submissions. No SLA text confirmed for USYC smart contract reports. Threshold: red = no SLA published. Expected for an RWA issuer; factor measures published-SLA presence, not regulatory compliance.
Sources #
- URLCircle Developer Docs -- USYC OverviewCircle developer docs USYC overview -- no SLA mentionedretrieved 2026-05-16
- Circle Arc BBP Coverage -- SLA scope limited to ArcCircle Arc BBP mentions 5-business-day first-response for Arc testnet only -- not confirmed for USYCretrieved 2026-05-16
- USYC Documentation -- no SLA foundUSYC documentation -- no security SLA page found at usyc.docs.hashnote.com/overview/security (404)retrieved 2026-05-16
Methodology #
Determine whether the protocol publishes an acknowledgment-time SLA for disclosed vulnerabilities (e.g., 72h ack).
See the full factor methodology and distribution across all protocols →