Request for Bounty Payout - December 2023
01Summary
Release 23,600 DAI from the Aave Ethereum Collector to three white-hat bug bounty recipients ($1,000, $10,000, and $10,000) and to Immunefi platform ($2,600 for fees and pending January payout), using aDAI v3 Ethereum as the asset.
- Type
- treasury allocation
- Funding
- $$23,600
Key changes
- Transfer $1,000 DAI to white-hat address 0x2af2144429a7eAe5fB3999B2059f246ffab6c90A(low)
- Transfer $10,000 DAI to white-hat address 0xEb8b275F05423566C95AbCCdD92d860B758cF08a(medium)
- Transfer $10,000 DAI to white-hat address 0x6248E2481c3d80C05F49a185D9BAEE515f0E7F2C(medium)
- Transfer $2,600 DAI to Immunefi (0x2BC5fFc5De1a83a9e4cDDfA138bAEd516D70414b) for platform fees and pending January bounty(medium)
Generated by Kvorum
02Description
Simple Summary
Proposal to release a grand total of 23’600 DAI, for periodic Aave <> Immunefi bounty payouts and Immunefi fee.
Motivation
As disclosed in this post, we think it is appropriate to split bug bounty payouts from disclosure and fix stages, for Low, Medium and High reports. The objectives are not creating unnecessary interdependencies, and keep a healthy and frequent payment schedule for white-hats participating securing Aave.
Specification
This proposal, will release the following funds to white-hat addresses and the Immunefi platform, from the Aave Ethereum Collector:
-
$1’000 to
0x2af2144429a7eAe5fB3999B2059f246ffab6c90A -
$10’000 to
0xEb8b275F05423566C95AbCCdD92d860B758cF08a -
$10’000 to
0x6248E2481c3d80C05F49a185D9BAEE515f0E7F2C -
$2’600 to
0x2BC5fFc5De1a83a9e4cDDfA138bAEd516D70414b(immunefi.eth). This amount is slightly above the expected $2’100 (10% of bounties), because an extra pending bounty of $5’000 will be paid in January, while the Immunefi component should be included now.
After checking with a financial contributor to the DAO (TokenLogic & Karpatkey), the asset used for the transfers is aDAI v3 Ethereum.
References
- Implementation: AaveV3Ethereum
- Tests: AaveV3Ethereum
- Snapshot: N/A
- Discussion
Copyright
Copyright and related rights waived via CC0.
03Mismatch analysis
The proposal follows Aave Governance v3's standard two-step execution pattern: the top-level on-chain action simply forwards execution to a separate 'payload' contract (via forwardPayloadForExecution), which is where the actual DAI/aDAI transfers to the white-hat addresses and Immunefi would be encoded. The decoded calldata provided here only shows this forwarding call and does not expose the internal transfer instructions of the referenced payload contract, so it is not possible to directly verify the specific dollar amounts, recipient addresses, or the aDAI asset claim against on-chain calldata. This is normal and expected for Aave V3 governance proposals of this type, and does not by itself indicate any manipulation or mismatch — the description references an audited, linked implementation contract (AaveV3Ethereum_RequestForBountyPayoutDecember2023.sol) which is the standard verification path for such proposals. Because the calldata available for review is insufficiently granular to confirm or contradict the specific claims in the description (amounts, recipients, asset type), confidence in this comparison is low, and no specific discrepancy can be substantiated from the data provided. No red flags (such as a forwarding target that looks anomalous or duplicated) are apparent in the single decoded action itself.
Generated by Kvorum
04Actions
- Target
- 0x9aee…2bc7
- Value
- 0 wei
- Function
- forwardPayloadForExecution((uint256,uint8,address,uint40))
- Arguments
{ "0": [ "1", "1", "0xdAbad81aF85554E9ae636395611C58F7eC1aAEc5", "41" ] }- Calldata
05Tally
Summed from votes
06Voters
No votes recorded yet.
07Forum
No forum thread is confidently linked to this proposal.
08Similar proposals
- aaveexecutedRequest for Bounty Payout - January 202495%
- aaveexecutedRequest for Bounty Payout - June 202491%
- aaveexecutedRequest for Bounty Payout - August 202591%
- aaveexecutedRetroactive Bug Bounty Pre-Immunefi89%
- aaveexecutedRequest for Bounty Payout - Feb 202588%
- aaveexecutedRequest for Bounty Payout - March 202587%
- aaveexecutedStable Rate Bug Bounty82%
- aaveexecutedBug Bounty May 202378%
- aaveexecutedAave <> Immunefi program activation77%