Disclosure SLA public
Usual (USD0 / bUSD0 / USUAL)'s assessment for RD-F-176 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No public acknowledgment-time SLA found. Sherlock bug-bounty page does not state a specific SLA (e.g., 72h acknowledgment). tech.usual.money/security-and-audits/bug-bounty page does not specify a response timeline. security@usual.company contact exists but has no published SLA. Sherlock's platform standard triage terms apply but are not Usual-specific commitments. Scored yellow: disclosure channel exists (F175 green) but SLA not published.
Sources #
- URLSherlock — Usual Labs Bug BountySherlock bug bounty #56 — no Usual-specific SLA statedretrieved 2026-05-17
- Usual Tech Docs — Bug Bountytech.usual.money/security-and-audits/bug-bounty — no SLA found in content retrievedretrieved 2026-05-17
Methodology #
Determine whether the protocol publishes an acknowledgment-time SLA for disclosed vulnerabilities (e.g., 72h ack).
See the full factor methodology and distribution across all protocols →