defirisk.co
rubric v1.7.0

Bug bounty presence & max payout

Jupiter's assessment for RD-F-007 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Active bug bounty program on ooosec.com/programs/jupiter (Raccoons Security). Max payout: $20,000 for critical vulnerabilities. Program launched approximately March–April 2026 (~1 month old at assessment). Total paid: $35,300 across 10 resolved reports. Average response time: 2d 6h. $20K cap is below the green threshold (≥$500K) and below the yellow floor ($50K). Grading yellow because the program is active and very recently launched; may increase payout. Program exists so not red.

Sources #

Methodology #

Check whether a public bug bounty program is active for this protocol and record the maximum payout in USD.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol jupiter factor RD-F-007 score yellow collected_at 2026-04-29 11:51:25