Bug bounty scope gap on highest-TVL contracts

Convex Finance's assessment for RD-F-183 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

F183 measures bug bounty scope gap on highest-TVL contracts within an existing bounty program. Convex Finance has no active bug bounty program (confirmed red on F007). Without a bounty program, there is no scope to have a gap in. The more fundamental absence is captured by F007. Not applicable by construction.

Sources #

Docs
Convex Finance FAQ (confirms no active bug bounty program)Convex FAQ - no bug bounty programretrieved 2026-05-16
Curator note
Curator note: F183 not applicable when F007 is red (no bounty program to have a scope gap within)F007 red: no bounty program exists; F183 not_applicable by constructionretrieved 2026-05-16

Methodology #

Determine whether the highest-TVL contracts of this protocol (especially shared primitives: OFT adapters, ZK verifiers, bridge inbox) are explicitly excluded from the protocol's active bug bounty scope.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol convex-finance factor RD-F-183 score not_applicable collected_at 2026-05-16 02:41:28