Request for Bounty Payout - Feb 2025
01Summary
Proposal to distribute $67,100 in GHO bounties: $61,000 to four white-hat bug hunters for valid Immunefi submissions and $6,100 (10% fee) to Immunefi platform.
- Type
- treasury allocation
- Funding
- $$67,100
Key changes
- Transfer 10,000 GHO to 0x75a1151D38885461CfA27f8f66927D4fCAD25b55 for bug bounty(medium)
- Transfer 50,000 GHO to 0x0Dca0FDC170baA4CA9c1dCd37Ffe01f97bCfD504 for two bug bounties (10,000 and 40,000)(medium)
- Transfer 1,000 GHO to 0x299e532172cce5230192d413D47C6739DB9338fE for bug bounty(medium)
- Transfer 6,100 GHO to 0x7119f398b6C06095c6E8964C1f58e7C1BAa79E18 (immunefi.eth) as 10% platform fee(low)
Generated by Kvorum
02Description
Simple Summary
Proposal to release a total of $61’000 as bounty for four outstanding Aave <> Immunefi valid submissions, together with $6’100 as the fee to the Immunefi platform; amounting to a grand total of $67’100.
The asset of payment will be GHO.
Motivation
After the previous Request for Bounty Payout on September 2024, there have been only four valid bug submissions on the Aave <> Immunefi program, which should be paid now with the month finished, cleaning up the pipeline.
Specification
This proposal will release the following funds to white-hat addresses and the Immunefi platform:
- 10’000 GHO to 0x75a1151D38885461CfA27f8f66927D4fCAD25b55
- 50’000 GHO to 0x0Dca0FDC170baA4CA9c1dCd37Ffe01f97bCfD504 (one bounty of 10'000 GHO and another of 40'000)
- 1’000 GHO to 0x299e532172cce5230192d413D47C6739DB9338fE
- 6’100 GHO to 0x7119f398b6C06095c6E8964C1f58e7C1BAa79E18 (immunefi.eth). This is the fee corresponding to the 10% of the previous bounties.
References
- Implementation: AaveV3Ethereum
- Tests: AaveV3Ethereum
- Discussion
- Snapshot: Direct To AIP
Copyright
Copyright and related rights waived via CC0.
03Mismatch analysis
The decoded on-chain data consists of a single opaque execute() call to a payload/executor contract address, which is the standard pattern for Aave governance proposals: the actual logic (GHO transfers to the four addresses and the Immunefi fee) is encoded inside the deployed payload contract's execute() function body, not as explicit calldata arguments visible to this analysis. Because no transfer amounts, recipient addresses, or token details appear in the decoded action, it is not possible to directly verify the specific dollar/GHO amounts and recipients claimed in the description against on-chain parameters. This is a known limitation of governance proposals structured this way (delegatecall to a payload contract) rather than an indication of a mismatch. The description itself is internally consistent (10,000 + 50,000 + 1,000 + 6,100 = 67,100 total, and 6,100 is indeed 10% of 61,000), and the referenced Solidity implementation link corroborates the standard 'Request for Bounty Payout' pattern used in prior similar proposals. Given the lack of visibility into the payload's internal calls, confidence in this comparison is low, and per instructions this should not be surfaced as a discrepancy or warning to users, but rather flagged as an assessment made with limited certainty due to calldata opacity.
Generated by Kvorum
04Actions
- Target
- 0x4d44…9dab
- Value
- 0 wei
- Function
- fallback()
- Arguments
{}- Calldata
05Tally
Summed from votes
06Voters
No votes recorded yet.
07Forum
No forum thread is confidently linked to this proposal.
08Similar proposals
- aaveexecutedRequest for Bounty Payout - March 202599%
- aaveexecutedRequest for Bounty Payout - August 202595%
- aaveexecutedRequest for Bounty Payout - June 202493%
- aaveexecutedRequest for Bounty Payout - January 202489%
- aaveexecutedRequest for Bounty Payout - December 202388%
- aaveexecutedRetroactive Bug Bounty Pre-Immunefi85%
- aaveexecutedStable Rate Bug Bounty79%
- aaveexecutedAave <> Immunefi program activation78%
- aaveexecutedBug Bounty May 202373%