[Temperature Check] - Enzyme Bug Bounty Cooperation

Summary

This Temperature Check gauges the community sentiment on the proposal to refund $25k in $IDLE to Enzyme Finance for the bug bounty paid to the reporter of a potential vulnerability in our partners’ integrations.

If the proposal passes the Temperature Check, it will be merged with the next IIP.

Motivation

On November 18th, the Enzyme Finance team notified us regarding a potential vulnerability that was affecting their integration with Idle Protocol. As reported in the Medium article, this vulnerability could have put funds of Idle Protocol’s integrators at risk.

Enzyme has an active bug bounty program launched on Immunefi. Rewards are distributed according to the impact of the vulnerability based on the Immunefi Vulnerability Severity Classification System. All payouts are done by the Enzyme Finance team directly and are denominated in USD. Payouts are done in USDC up to $400,000.

The final reward amount for critical smart contract vulnerabilities is capped at 10% of the funds at risk based on the vulnerability reported. In this case, the issue would have impacted 3 vaults on Enzyme and up to $400k worth of funds.

Due to the quality and professionalism of the report and the potential/scope of the issue as well, they found it inappropriate to pay out less than their “high” tier ($80k). For this reason, Enzyme rewarded the bug hunter with $90k.

Following this payout, Idle Leagues proposes to indemnify Enzyme with 6250 $IDLE ($25k using 20-day average rate).

Details

Actions:

• Send 6250 $IDLE from Ecosystem Fund to Enzyme wallet: 1 action

Voting Options

Please cast your vote on one of the following options: FOR: Approve Enzyme Bug Bounty Cooperation AGAINST: Vote against Enzyme Bug Bounty Cooperation DISCUSS MORE: Discuss more the proposal

This poll is available for both $IDLE token holders and stkIDLE holders. The final $IDLE voting weights will be calculated using the approved calculator.