JBP-324 - Payout to Bernd for auditing the Juice V3 migration contracts

Status: Draft

Author: Bernd (berndartmueller#1928, https://twitter.com/berndartmueller)
Date: (2023-01-10)

Synopsis

One-time payment of 6,000$ in ETH + 100k JBX from dao.jbx.eth to Bernd as compensation for auditing the Juice V3 migration contracts.

Motivation

In order for existing projects to migrate to V3, smart contracts have been developed by Juicebox to help make this process efficient & seamless. To ensure the contracts are safe to use and do not impose any security threats, Bernd was asked by Jango to audit the JBV3Token.sol and JBV3TokenDeployer.sol contracts in the https://github.com/jbx-protocol/juice-v3-migration repository.

Bernd conducted the audit over the course of the last ~2 weeks and provided the dev team with an audit report (https://hackmd.io/@berndartmueller/2023-01-juice-v3-migration).

The security audit identified 0 critical issues, 0 high severity issues, 1 medium severity issue, 6 minor issues, and 6 informational issues.

Specification

Send a one-time payment of 6,000 $ worth of ETH + 100k JBX from dao.jbx.eth to 0x6A897b32996D342535791a74B8a40E75DDf2486e

Rationale

Bernd audited the Juice V3 migration contracts in regard to security vulnerabilities and bugs and crafted an audit report. In return, Bernd asks for compensation of 6,000 $ in ETH + 100k JBX from dao.jbx.eth for the time and resources spent auditing.

Risks

There could still be unidentified vulnerabilities or bugs in the contracts in the scope of the audit.

Timeline

Immediate effect

---

Discussion Thread | IPFS