Ignored bounty disclosure

Compound V3 (Comet)'s assessment for RD-F-008 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No evidence of ignored disclosure. 2023 Comet vulnerability patched before public disclosure with no user funds at risk. Tally Proposal 203 rewarded responsible discloser. Rekt DB shows zero V3 incidents.

Sources #

Governance
https://www.comp.xyz/t/comet-vulnerability-disclosure-patched/4854retrieved 2026-04-28
URL
https://www.tally.xyz/gov/compound/proposal/203retrieved 2026-04-28

Methodology #

Determine whether any prior post-mortem documents a disclosed vulnerability that was reported to the team and not actioned before exploit.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol compound-v3 factor RD-F-008 score green collected_at 2026-04-28 00:20:50