Document bug bounty program track record

[TheDZhon]

📝 Describe your changes

1. Records that the Lido bug bounty program has operated on Immunefi since May 2021.
2. Updates the cumulative track record to 43 rewarded reports and more than $395,000 paid as of August 19, 2026.
3. Explains the assessment criteria and the use of discretionary payments for valuable reports outside formal scope.
4. Adds links to the current Immunefi program and published security disclosures.

🔎 Source of truth and evidence

1. The public Immunefi program data records a launch date of May 22, 2021 and the current program terms: https://immunefi.com/bug-bounty/lido/information/
2. The cumulative figures come from the All Time view in Immunefi program analytics captured on August 19, 2026. The displayed severity cells independently sum to 625 reports and 43 rewarded reports; the displayed payout total is $395k+. The docs round that total down.
3. The PR contains no report identifiers, individual amounts, affected-component details, or unresolved findings.

[Copilot]

Pull request overview

Documents Lido’s Immunefi bug bounty history, results, assessment process, and reporting guidance.

Changes:

• Adds program launch date and cumulative reward statistics.
• Clarifies report assessment and discretionary payments.
• Links current program terms and security disclosures.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.