defirisk.co
rubric v1.7.0

Bug bounty presence & max payout

Falcon Finance's assessment for RD-F-007 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No active bug bounty program on Immunefi, Cantina, or any other platform as of 2026-05-12. Protocol docs and security guide confirm no bounty. Data cache bug_bounty.platform: null. Red at $1.618B TVL.

Detail #

Searched Immunefi for 'Falcon Finance' bug bounty on 2026-05-12 — no results returned. Protocol docs security/audits page and the transparency security guide (falcon.finance/news/a-guide-to-transparency-and-security-in-falcon-finance) make no mention of a bug bounty program. Data cache field `bug_bounty.platform: null`. The methodology red threshold is 'no active bounty program.' At $1.618B TVL with closed-source contracts and only 3 pre-TGE audits, the absence of a bug bounty removes the last external security incentive layer.

Sources #

Methodology #

Check whether a public bug bounty program is active for this protocol and record the maximum payout in USD.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol falcon-finance factor RD-F-007 score red collected_at 2026-05-12 04:06:37