Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

In brief. Metric is a bug bounty program on Sherlock. 4 assets are listed in scope, 4 of them bounty-eligible. As of Aug 20, 2026. Markdown for agents

NR Unrated

Metric

Metric Sherlock
3 more reviews needed for a grade
Write a review Claim this company profile

Work at Metric? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.

Ask BugRater to submit it

Reports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.

Reviews

0 published

No reviews yet.

Be the first to review

Program profile Sherlock, imported

Sherlock published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade. Last checked 7 Nov 2026.

Submissions
Open
Launched
Jul 2026

Scope

4 assets
AssetTypeEligibilityMax severity
https://github.com/Metric-OMM/metric-core SOURCE CODE ✓ bounty not set
https://github.com/Metric-OMM/metric-periphery SOURCE CODE ✓ bounty not set
https://github.com/Oracle-Based-Pool/smart-contracts-poc SOURCE CODE ✓ bounty not set
https://github.com/sherlock-audit/2026-07-metric SOURCE CODE ✓ bounty not set