Bug bounty presence & max payout

stHYPE (Valantis Labs)'s assessment for RD-F-007 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No active bug bounty program. Immunefi directory search returns no stHYPE or Valantis program. Cache confirms bug_bounty.platform: null. docs.valantis.xyz/stakedhype/transparency-and-risks explicitly states 'no active bug bounty program.' Legacy stakedhype.fi claimed a bounty but it is not republished on current Valantis docs. The Hyperliquid L1 bug bounty is a separate program and does not cover stHYPE contracts.

Sources #

Internal
Data cache confirming no bug bounty platform.research/protocols/staked-hype/00-data-cache.json bug_bounty.platform: nullretrieved 2026-05-17
Docs
Valantis stHYPE Transparency and Risks pagedocs.valantis.xyz/stakedhype/transparency-and-risks — 'no active bug bounty program'retrieved 2026-05-17
URL
Immunefi bounty directory — stHYPE not listedimmunefi.com/explore — Valantis/stHYPE not foundretrieved 2026-05-17

Methodology #

Check whether a public bug bounty program is active for this protocol and record the maximum payout in USD.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol staked-hype factor RD-F-007 score red collected_at 2026-05-17 13:02:38