Bug bounty presence & max payout

Ethena's assessment for RD-F-007 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Active Immunefi bug bounty program live since April 4 2024. Max payout $3M for critical smart contract vulnerabilities (10% of affected funds, min $100K). 27 assets in scope. Core contracts (USDe, EthenaMinting V2, StakedUSDeV2, ENA, USDeSilo, EthenaLPStaking, StakingRewardsDistributor) confirmed in scope.

Sources #

URL
Ethena Bug Bounties | ImmunefiImmunefi Ethena bug bountyretrieved 2026-04-28
URL
Ethena Bug Bounty ScopeImmunefi Ethena scoperetrieved 2026-04-28

Methodology #

Check whether a public bug bounty program is active for this protocol and record the maximum payout in USD.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol ethena factor RD-F-007 score green collected_at 2026-04-28 13:58:51