FIP-93-2: The Future of Bug Bounties for the Tribe DAO
Summary Following outcome vote in FIP-93 part 1, this aims to finalize the bug bounty payout for the individuals involved in the Fuse vulnerability.
https://medium.com/@JackLongarzo/rari-capital-fuse-security-upgrade-report-e5d154c16250
Specification As the owner of the Rari Capital bug bounty program, the Tribe DAO has an obligation to pay out a minimum of 1.1m to the owed parties. This vote will decide if the DAO will pay out the previous ($1.1m) or current ($2.2m) bug bounty retroactively to the individuals who identified the Fuse vulnerability.
Voting As the DAO has an outstanding liability it is obligated to pay, there will be only two choices and this vote will use multiple choice style voting.
- Pay the previous bug bounty (1.1m) to the owed parties
- Pay the current bug bounty (2.2m) to the owed parties
Off-Chain Vote
Pay 1.1m to the owed parties
2.5M TRIBE10.7%
Pay 2.2m to the owed parties
20.77M TRIBE89.3%
Quorum:233%
Timeline
Apr 18, 2022Proposal created
Apr 18, 2022Proposal vote started
Apr 21, 2022Proposal vote ended
Oct 26, 2023Proposal updated