Disclosure channel exists
Usual (USD0 / bUSD0 / USUAL)'s assessment for RD-F-175 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Active public disclosure channel exists: (1) Sherlock bug bounty program at audits.sherlock.xyz/bug-bounties/56 — live since 2025-04-08, max payout $16M USDC, Sherlock handles triage independently of Usual Labs; (2) security@usual.company email contact published at tech.usual.money. The Sherlock program covers core stablecoin protocol, RWA wrapper contracts, and token distribution modules on Ethereum mainnet. Both channels are verifiable.
Sources #
- DocsUsual Tech Docs — Security & Auditssecurity@usual.company security contact listed at tech.usual.money/security-and-audits/auditsretrieved 2026-05-17
- Sherlock — Usual Labs Bug BountySherlock bug bounty #56 live since 2025-04-08, max payout $16M USDCretrieved 2026-05-17
Methodology #
Determine whether the protocol publishes a public security disclosure channel (security@ email, Immunefi program, in-house disclosure page).
See the full factor methodology and distribution across all protocols →