Bug bounty presence & max payout

Jupiter Perpetual Exchange's assessment for RD-F-007 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Jupiter announced a bug bounty program in collaboration with Meteora AG via X post (JupiterExchange, 2025). Program hosted on OOOSEC/Raccoon Labs platform (security.raccoons.dev redirects to ooosec.com/programs/jupiter). Immunefi API returns null for Jupiter (data-cache bug_bounty.platform: null, max_payout_usd: null). OOOSEC page returned 403; max payout and exact scope unverifiable from public sources. Program exists but is not on a publicly-verified platform with published max payout.

Sources #

Internal
00-data-cache.json jupiter-perpsData cache bug_bounty.platform: null, bug_bounty.max_payout_usd: null, bug_bounty.url: null — Immunefi API returned no Jupiter listingretrieved 2026-05-16
URL
Jupiter bug bounty announcement on XJupiter bug bounty announcement on X — collaboration with Meteora AG, program at security.raccoons.devretrieved 2026-05-16

Methodology #

Check whether a public bug bounty program is active for this protocol and record the maximum payout in USD.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol jupiter-perps factor RD-F-007 score yellow collected_at 2026-05-16 01:53:11