OpenZeppelin Security Partnership - 2023 Q2 Compensation
01Summary
OpenZeppelin quarterly security services payment of 23,617 COMP (~$1M) to be transferred from Timelock for Q2 2023 continuous audit, security advisory, and monitoring services.
- Type
- treasury allocation
- Funding
- $1000000
Key changes
- Transfer 23,617 COMP tokens to OpenZeppelin (0x57C970568668087c05352456a3F59B58B0330066) from Timelock for Q2 2023 security services(high)
Notable concerns
- Payment based on fixed quarterly agreement structure
- Services governed by external Terms of Service document
Generated by Kvorum
02Description
OpenZeppelin Security Partnership - 2023 Q2 Compensation
Background
Starting on Dec 21st, 2021, OpenZeppelin was selected to offer the Compound DAO security services including continuous audit, security advisory, and monitoring. At the start of every quarter, OpenZeppelin creates a proposal to perform the next service fee payment.
Compensation Structure
We receive our quarterly payments in a lump-sum of COMP. Based on the last week's average price, this would be $42.34 per COMP for a total quarterly payment of 23,617 COMP equaling $1M per the original agreement. This COMP will be transferred from the Timelock's existing balance. More detail in this forum post.
By approving this proposal, you agree that any services provided by OpenZeppelin shall be governed by the Terms of Service available here
03Mismatch analysis
The proposal describes a single action: a quarterly COMP payment of 23,617 COMP to OpenZeppelin from the Timelock's balance. The decoded calldata contains exactly one action: a transfer call on the COMP token contract sending 23617045401959900000000 wei (≈23,617.05 COMP, accounting for 18 decimals) to a single recipient address. The amount matches the stated 23,617 COMP figure within rounding, and the action type (a token transfer) matches the description's claim that COMP will be transferred from the Timelock. There is no indication in the calldata of any additional or missing actions, no target mismatch (the call targets the well-known COMP token contract), and no value mismatch after accounting for decimal formatting. I could not independently verify that the recipient address is OpenZeppelin's official address, but this is consistent with the standard pattern for these recurring OpenZeppelin compensation proposals and there's no on-chain evidence suggesting otherwise. Overall, the description accurately and completely represents the single on-chain action being executed.
Generated by Kvorum
04Actions
- Target
- 0xc00e…6888
- Value
- 0 wei
- Function
- transfer(address,uint256)
- Arguments
{ "0": "0x57C970568668087c05352456a3F59B58B0330066", "1": "23617045401959900000000" }- Calldata
05Tally
Summed from votes
06Voters
No votes recorded yet.
07Forum
- OpenZeppelin Security Updates for Q1 2023 & Q2 Compensation Proposal ↗discourse · high confidence
Arguments for
- OpenZeppelin has delivered substantial security work including three audits, security advisory contributions like CIP-2, and multi-chain Pause Guardian solutions that are critical to Compound's protocol safety.— cylon
- Recent market failures in other DeFi lending protocols demonstrate that security partnerships are essential, and OpenZeppelin has proven to be a valuable partner on this front.— allthecolors
Arguments against
None surfaced.
Notable participants
- cylonOpenZeppelin representative proposing the Q2 2023 security partnership compensation and providing detailed initiative updates.
- allthecolorsCommunity member expressing full support for the proposal and raising transparency about additional audit requests from the grants program.
Generated by Kvorum
08Similar proposals
- compoundexecutedOpenZeppelin Security Partnership - 2023 Q3 Compensation100%
- compoundexecutedOpenZeppelin Security Partnership - 2023 Q1 Compensation99%
- compounddefeatedOpenZeppelin Security Partnership - 2024 Q2 Compensation97%
- compoundexecutedOpenZeppelin Security Partnership - 2024 Q2 Compensation97%
- compoundexecutedOpenZeppelin Security Partnership - 2023 Q4 Compensation97%
- compoundexecutedOpenZeppelin Security Partnership - 2024 Q1 Compensation97%
- compoundexecutedOpenZeppelin Security Partnership - 2022 Q4 Adjustment96%
- compoundcanceled"# OpenZeppelin Security Partnership - 2023 Q4 Compensation ## Background Starting on Dec 21st, 2021, OpenZeppelin was [selected](https://compound.finance/governance/proposals/76) to offer the Compo…95%
- compoundexecutedOpenZeppelin Security Partnership - 2022 Q3 Adjustment92%
- compoundexecutedComet Vulnerability Disclosure (Patched) - Bug Bounty Program Reward67%