Aave <> Immunefi program activation

Simple Summary

This proposal approves the activation of the Aave <> Immunefi bug bounty program.

All the details about the program can be found on the associated governance forum post, and on the draft document HERE.

Motivation

Having a continuous and updated bug bounty program is a really important component regarding security procedures of an ecosystem like Aave.

The Immunefi platform is a leader in the bug bounty space, adopted by multiple other blockchain protocols, and with a quite active network of security researches submitting reports.

Following the pre-approval on Snapshot, and within the context of our engagement, BGD has been working with Immunefi representatives to define and activate the program, respecting all the decentralized procedures of the Aave DAO, while keeping the maximum quality possible.

Specification

The proposal event only emits an event, in order to leave on-chain trace of the binding agreement between the Aave DAO and Immunefi, to formally activate the bounty program.

The activation will happen once all operational details are finished by Immunefi, in coordination with the entities defined as reviewers of the DAO in this specific context.

As defined on the Aave governance forum, the reviewers will be ourselves (BGD Labs) for all non-GHO aspects of Aave (Aave v2, v3, Safety Module, Aave Governance), and Aave Companies for GHO.

References

• Implementation: Ethereum
• Tests: Ethereum
• Snapshot
• Discussion

Copyright

Copyright and related rights waived via CC0.