Disclosure channel exists

Evidence summary #

Immunefi bug bounty program is active at immunefi.com/bug-bounty/sushiswap/. Live since 2021-03-26, last updated 2025-10-16. Public, operational security-disclosure intake channel. ~$584K total paid historically. Five-level severity scale with mandatory PoC. In scope: Constant Product AMM, Concentrated Liquidity AMM, RedSnapper.

Sources #

Methodology #

Determine whether the protocol publishes a public security disclosure channel (security@ email, Immunefi program, in-house disclosure page).

See the full factor methodology and distribution across all protocols →