Title: [ARFC] Modify Retroactive bug bounties proposal (pre-Immunefi)
Author: ACI ( Aave Chan Initiative)
Date: 2024-01-26
Summary
Modify Request for bounties pending from before the setup of the Aave <> Immunefi official bug bounty program, as previous Snapshot didn't get Quorum.
The objective of this ARFC is to pre-authorise such payments, to be processed via an on-chain AIP, if its finally the preferred option.
Motivation
The results of ARFC Snapshot Retroactive bug bounties proposal (pre-Immunefi) ended with FOR as winning option but Quorum was not reached.
Therefore, ACI propose another Snapshot, and also to ensure decision granularity, there will be 3 YAE options to represent better community feedback on Forum.
Specification
There are currently 3 bounties.
1. Inconsistent validation on Aave v2/v3
Proposed bounty: 10’000 USD
2. Inconsistent HF (Health Factor) behaviour swap borrow rate mode
Proposed bounty: 5’000 USD
3. Price manipulation of asset listed on Aave
Proposed bounty: 65’000 USD. Additionally, 6’500 USD as Immunefi fee.
New Options:
ACI propose the following options:
Option A : Payout Bounty: Bounty 1 & 2 ( do not Payout Bounty 3) Option B: Payout Bounty 1 & 2 and reduce payout of bounty 3 to 50k$, keeping Immunefi fee. Option C: Payout bounty 1, 2 & 3 as originally presented by @bgdlabs
Next steps
If this ARFC is positive, afterwards we will proceed with an on-chain governance proposal, releasing the funds to the corresponding addresses.
Copyright
Copyright and related rights waived under Creative Commons Zero (CC0).
Off-Chain Vote
YAE: Option A
154.18 AAVE0%
YAE: Option B
231.06K AAVE32.7%
YAE: Option C
434.54K AAVE61.6%
NAY
5.83 AAVE0%
ABSTAIN
39.98K AAVE5.7%
Timeline
Jan 26, 2024Proposal created
Jan 27, 2024Proposal vote started
Jan 30, 2024Proposal vote ended
Jan 31, 2026Proposal updated