All programs
Meridian DAO
LiveDisclosure programby Meridian DAO
Governance portal and treasury dashboard for the Meridian ecosystem.
Web2 / SaaSTypeScriptEthereum
Rewards
Recognition
Unfunded
Assets in scope
Only these assets are eligible. Each report selects exactly one.
| ID | Asset | Type | Target |
|---|---|---|---|
| MRD-1 | Governance portal | Website / app | https://gov.meridian.example |
| MRD-2 | Treasury API | API | https://api.meridian.example |
Out-of-scope & exclusions
Any out-of-scope closure must cite one of these ids.
- EXCL-1Missing security headers or best practices without demonstrated impact.
- EXCL-2Attacks requiring physical access to a victim's unlocked device.
- EXCL-3Rate-limiting or brute-force issues on non-authentication endpoints.