Bug bounty scope gap on highest-TVL contracts

Fluid's assessment for RD-F-183 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Immunefi scope explicitly lists Fluid Liquidity Layer, Lending Protocol, and Vault Protocol as in-scope. Only DexLite Protocol and periphery folder are excluded. Highest-TVL contracts (Liquidity Layer $676M on Ethereum) are in-scope. $500K max payout.

Sources #

URL
Instadapp Immunefi ScopeImmunefi scope page — Fluid Liquidity Layer, Lending, Vault explicitly in-scoperetrieved 2026-04-29

Methodology #

Determine whether the highest-TVL contracts of this protocol (especially shared primitives: OFT adapters, ZK verifiers, bridge inbox) are explicitly excluded from the protocol's active bug bounty scope.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol fluid factor RD-F-183 score green collected_at 2026-04-29 10:35:01