Disclosure channel exists
Midas's assessment for RD-F-175 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Active dual-platform bug bounty launched 2026-03-24: Sherlock (audits.sherlock.xyz/bug-bounties/122, status LIVE as of 2026-05-12, max $500,000 USDC) and Cantina (cantina.xyz/code/d77405e5-99ce-4ba5-846c-885820b030e1/overview). Scope covers full Midas contract suite including mToken contracts, access control, deposit/redemption vaults, DataFeeds, LayerZero OFT adapters, Axelar vault, and web interface. The program is actively maintained (~7.5 weeks live at assessment date). This constitutes an active, publicly-documented disclosure channel with active monitoring by two security platforms.
Sources #
- URLSherlock — Midas Bug BountySherlock bug bounty — Midas, status LIVE, max $500K USDC, last updated 2026-05-12retrieved 2026-05-16
- Midas Bug Bounty Programme — LinkedInLinkedIn announcement — Midas bug bounty programme launched 2026-03-24 via Sherlock + Cantina, scope descriptionretrieved 2026-05-16
Methodology #
Determine whether the protocol publishes a public security disclosure channel (security@ email, Immunefi program, in-house disclosure page).
See the full factor methodology and distribution across all protocols →