Ignored bounty disclosure

Evidence summary #

No prior exploits of the Orca Whirlpools protocol documented (Rekt DB empty, DefiLlama hacks empty per cache). No evidence of any disclosed vulnerability being ignored pre-exploit. Four years of operation with zero protocol hacks provides strong corroborating evidence. Factor is effectively N/A (no prior incidents to assess ignored disclosure against) but scored green per the methodology (no evidence of ignored disclosure).

Sources #

Methodology #

Determine whether any prior post-mortem documents a disclosed vulnerability that was reported to the team and not actioned before exploit.

See the full factor methodology and distribution across all protocols →