Proposal for the community to pre-approve the distribution of a set of bug bounties submitted to Aave by independent security researchers.
An extensive analysis of the findings and recommended bounties can be found on the Aave governance forum HERE, but as a recap:
Flash loan premium not passed correctly to the receiver. 5'000 USD to Emanuele Ricci
Misusage of e-mode oracle feed after an asset is removed from e-mode.10'000 USD to Emanuele Ricci
Griefing risk with LTV0 and isolated collateral assets. Total of 40'000 USD, 20'000 USD for Emanuele Ricci and 20'000 USD for cmichel
Risk of price manipulation on GUNI USDC/UDST due to illiquidity. 20'000 USD for kankodu
Inconsistent amount on aToken transfer events. 10'000 USD for watchpug
On the final on-chain proposal releasing the funds, the amounts will be taken in USD stablecoins, to avoid price volatility.