PAL Community Report 2025 / Q4
Date: 26.05.2026
This Community report summarizes the activity of the Polkadot Assurance Legion (PAL) during the period October-December 2025.
PAL
The Polkadot Assurance Legion (PAL) is a community-driven initiative that aims to make Polkadot a safer and more attractive place for both builders and users by allocating funds from the Polkadot Treasury (bounty #22) to advance security in Rust / Polkadot SDK.
PAL provides funding for audits (Rust and Solidity), security tooling, bug bounties, and common-good security initiatives. Find out more about the various funding opportunities on PAL’s homepage.
Summary
In the period of October through December 2025, PAL provided funding for 3 audits covering 2 different teams, co-funded 2 bug bounty payouts, and supported the first delivery milestone of the ecosystem monitoring tool.
The highlight of Q4 was the kick-off and first milestone delivery of RFP 2501 - the ecosystem monitoring tool built by Ocelloids, the vendor selected at the end of Q3. Milestone 1 was paid out in December 2025, marking the official start of execution on PAL’s largest tooling initiative to date.
On the audit side, PAL co-funded a comprehensive review of Acurast by Monethic, split across two engagements. The completed engagement uncovered 1 critical, 5 high, 9 medium and 9 low severity issues across 10,500 LOC, the highest number of high-severity findings in a single quarter; the second 8,408 LOC engagement is still pending. PAL also co-funded a focused audit of Bifrost by Beosin (362 LOC, 1 medium-severity finding).
Finally, Q4 saw PAL co-fund two bug bounty payouts on Hydration, continuing its support for ecosystem-wide responsible disclosure.
Spending breakdown:
| What | How much |
|---|---|
| Audits | 12,720 DOT |
| Tooling | 23,713 DOT |
| Bug bounties | 19,867 DOT |
| Curator salaries | 23,461 DOT |
| Total | 79,761 DOT |
Overview
Audits
| ID | Audit | Co-funded | LOC | Critical | High | Med | Low | Report |
|---|---|---|---|---|---|---|---|---|
| 39 | audit-beosin-bifrost-2510 | 245 DOT | 362 LOC | 0 | 0 | 1 | 0 | Report |
| 40 | audit-monethic-acurast-2510 | 9,142 DOT | 10,500 LOC | 1 | 5 | 9 | 9 | Report |
| 50 | audit-monethic-acurast-2511 | 3,333 DOT | 8,408 LOC | ? | ? | ? | ? | TBA |
Tooling
| ID | Tooling | Paid out | Category | Project | Report |
|---|---|---|---|---|---|
| 57 | Ocelloids - Monitoring Tool, Milestone 1 | 23,713 DOT | Monitoring | RFP 2501, Ocelloids | Report |
Bug bounties
| ID | Bug bounty | Co-funded | Referendum | Report |
|---|---|---|---|---|
| 41 | bugbounty-hydration-2508-1 | 16,556 DOT | #119 | Report |
| 42 | bugbounty-hydration-2508-2 | 3,311 DOT | #164 | Report |
Other
The PAL curators have received in total 23,461 DOT as remuneration for their work. This corresponds to $3,000 per curator per month, using the 7d EMA DOT price.