Ignored bounty disclosure
Lista DAO's assessment for RD-F-008 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No evidence found that the Dec 2022 Ankr/Helio incident was preceded by an unactioned bounty disclosure. The incident was an external cascade (Ankr deployer key compromise causing aBNBc price collapse) that exploited Helio oracle latency. Halborn post-mortem confirms mechanics as cascade rather than pre-disclosed bug. No other ignored-disclosure incidents found.
Sources #
- URLHalborn Ankr and Helio Hacks Post-mortemHalborn Ankr/Helio incident post-mortem — confirms cascade mechanics, no pre-disclosure ignoredretrieved 2026-05-12
Methodology #
Determine whether any prior post-mortem documents a disclosed vulnerability that was reported to the team and not actioned before exploit.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol lista-dao factor RD-F-008 score green collected_at 2026-05-12 17:54:05