defirisk.co
rubric v1.7.0

Disclosure SLA public

Curve Finance's assessment for RD-F-176 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No publicly documented acknowledgment-time SLA found. Docs page inaccessible (403). No stated triage window, 90-day disclosure window, or response-time commitment found in accessible sources. The Marco Croc payout (May 2024) confirms the channel works in practice, but no published SLA process was located. Yellow: channel operational but SLA transparency absent.

Sources #

Methodology #

Determine whether the protocol publishes an acknowledgment-time SLA for disclosed vulnerabilities (e.g., 72h ack).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol curve-v2 factor RD-F-176 score yellow collected_at 2026-04-28 19:48:40