Disclosure SLA public
mETH Protocol's assessment for RD-F-176 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No public acknowledgment-time SLA found for disclosed vulnerabilities. The Immunefi program specifies 'Responsible Publication Category 3' (team approval required) and 'Primacy of Rules' governance, but no specific SLA (e.g., 72h acknowledgment, 14-day fix window) is published in the Immunefi program text, docs.mantle.xyz, or any protocol-authored document. Scored red.
Sources #
- DocsmETH Protocol Documentationdocs.mantle.xyz/meth — no disclosure SLA page found in security sectionretrieved 2026-05-16
- mETH Protocol Bug Bounties — ImmunefiImmunefi mETH program page — 'Responsible Publication Category 3', 'Primacy of Rules'; no acknowledgment SLA text presentretrieved 2026-05-16
Methodology #
Determine whether the protocol publishes an acknowledgment-time SLA for disclosed vulnerabilities (e.g., 72h ack).
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol meth-protocol factor RD-F-176 score red collected_at 2026-05-16 02:17:50