Distribute 37,465,830.6 SDL and $3M FRAX from the protocol treasury to pro-rata to affected LP’s, establish a security fund, and make a bounty offer to the exploiter to return funds.
This SIP seeks to:
As a result of the exploit on Apr-30th, 2022, ~$11.9M was lost (see an additional transaction here) from Saddle’s sUSD metapool.
Fast and effective remuneration has proven to bolster the morale of communities impacted by exploits in the past. A common response to an attack by afflicted protocols, in addition to remuneration, has been to “bribe” the attacker– that is to say; offer them some amount in return for their cooperation and compassion. While this has not always been successful, no solution should be ignored. The proposed security fund (to be managed by the Delos HQ multisig) would be used to finance future audits, increase the Immunefi bug bounty awards, bring auditing firms on retainer, run Code4rena contests, and other security initiatives.
In order to secure the 3M FRAX for distribution to affected users, Saddle will enter a deal with Frax, the terms of which are as follows:
In addition to the FRAX– 37,465,830.6 SDL will be set aside for affected LP’s, division of said SDL is proposed as follows:
10% set aside for a protocol security fund
90% to be distributed to affected LP’s pro-rata
For: Distribute the 3M FRAX to affected LP’s pro-rata. Also set aside 37,465,830.6 SDL for distribution, of which 90% is for affected LP’s pro-rata and 10% for establishing a security fund.
Against: No change.