Ignored bounty disclosure

Evidence summary #

No evidence of any prior bounty disclosure that was ignored before an exploit. Protocol has no documented smart contract exploits (confirmed across Rekt.news, DeFiLlama hacks database, and protocol blog as of 2026-04-26). Only incident was the August 2022 Lazarus Group phishing attempt — no funds lost, no smart contract vector involved, and deBridge disclosed it within 24 hours.

Sources #

Methodology #

Determine whether any prior post-mortem documents a disclosed vulnerability that was reported to the team and not actioned before exploit.

See the full factor methodology and distribution across all protocols →