KVORUM
compoundSource: Compound governor oz · #522

Immunefi Bug Bounty Program Renewal

executedJan 24, 2026, 10:05 AM UTCby3F0x3fb1…4c8a

01Summary

AISummary by Kvorumclaude-haiku-4-5

Renew Compound's 1-year bug bounty partnership with Immunefi for $57,500 (33% discount from $86,000), providing premium managed triage, audit competition support for V4 launch, AI PR reviews, and safe harbor emergency response services.

Type
treasury allocation
Funding
$$57,500

Key changes

  • Transfer $57,500 USDC to Immunefi for 1-year bug bounty program renewal(high)
  • Activate premium managed triage service with 24/7 expert assessment(high)
  • Include audit competition support for Compound V4 mainnet launch with no fees for pools up to $50k(high)
  • Provide 5 AI-powered PR reviews via Codexa platform(medium)
  • Include Safe Harbor emergency response capability at no additional cost(medium)
  • Grant access to Magnus Platform Tools (Codexa, Radar, Guardian)(medium)
Contracts0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb480x075173765C7d7c354e0Aac46101b00F66fe41447
Generated by Kvorum
model: claude-haiku-4-5
provider: anthropic
profile: anthropic-fast-v1
prompt: v1.0
generated: 2mo ago
Read the description ↗

02Description

241 words

Immunefi Bug Bounty Program Renewal

Immunefi Bug Bounty Program Renewal

Overview

This proposal renews Compound's bug bounty partnership with Immunefi for 1 year, building on

proven Year One results. The renewal is strategically timed to support Compound V4's

mainnet launch with enhanced security services.

Year One Results (2024-2025)

  • 69 reports received from Security Researcher community
  • 61 reports closed by expert triagers (noise removed)
  • 8 priority reports escalated to Compound team
  • $6,000 in rewards distributed

What's Included

  • Premium Bug Bounty Program with Expert Assessment Managed Triage (24/7)
  • Audit Competition for V4 launch readiness (no fees for pools up to $50k)
  • 5 AI PR Reviews powered by Codexa
  • Safe Harbor emergency response capability
  • Magnus Platform Tools (Codexa, Radar, Guardian)

Pricing

Service ComponentRate CardFinal PriceDiscount
BBP Subscription (Managed Triage + Premium BBP)$86,000$57,50033%
Audit Competition27.5% of pool$0No fees ≤ $50k
5 AI PR Reviews$6,250$0Included
Safe Harbor Module$0$0Included
Total (1 Year)$86,000$57,50033%

Full Proposal: <u>View Complete Document</u>

Contacts

  • Joe Suzuki - Senior Account Executive
  • Unai L - Client Relationship Manager
  • Mateus Paderes - Head of Customer Success

03Mismatch analysis

AIMismatch analysis by Kvorummedium confidenceclaude-sonnet-5
Minor discrepancy

The USDC transfer amount (57,500,000,000 units = $57,500 given 6 decimals) exactly matches the 'Final Price' and 'Total (1 Year)' figures in the pricing table, so the core financial claim is consistent. The recipient address in action 0 matches the target of action 1, which calls initialize() on that same address — an action never mentioned in the description. This could plausibly be a benign setup step for a service like the Safe Harbor module mentioned in the proposal, but because the description gives no indication that a second on-chain call (contract initialization) is part of this proposal, a delegate reviewing the description alone would not know this occurs. Given the amount otherwise matches and no funds appear misdirected, this is a moderate but not severe gap in transparency, so I rate it a minor discrepancy with medium confidence due to the ambiguity of what initialize() actually configures.

Discrepancies

  • mediumomitted in description

    The calldata includes a second action calling initialize() on the recipient contract immediately after it receives the $57,500 USDC transfer. The description never mentions that the recipient is a contract requiring initialization, nor what this initialize() call does (e.g., activating a Safe Harbor module or escrow). This is a material on-chain action not described in the prose, even though it may be routine setup for one of the listed services (e.g., Safe Harbor).

Generated by Kvorum
model: claude-sonnet-5
provider: anthropic
profile: anthropic-strong-v1
prompt: v1.0
generated: 2mo ago
Review the decoded actions ↗

04Actions

2 total
#0transfer(address,uint256)chain 0x1
Target
0xa0b8…eb48
Value
0 wei
Function
transfer(address,uint256)
Arguments
{
  "amount": "57500000000",
  "address": "0x075173765C7d7c354e0Aac46101b00F66fe41447"
}
Calldata
#1initialize()chain 0x1
Target
0x0751…1447
Value
0 wei
Function
initialize()
Arguments
{}
Calldata

05Tally

Summed from votes

Voters42
VP participating710.8K
Outcome (current)For
Current support100%

06Voters

42 total
Filter:
VoterChoice% of totalRationale
3F0x3fb1…4c8aFor104.8K14.74%—10mo ago
050x0579…ca09For60.3K8.48%—10mo ago
B30xb356…c826For60.1K8.45%—10mo ago
B90xb933…8dd1For60K8.44%—10mo ago
B40xb49f…7948For60K8.44%—10mo ago
170x1729…b879For60K8.44%—10mo ago
B70xb792…89d7For60K8.44%—10mo ago
D20xd2a7…5a0cFor60K8.44%—10mo ago
680x683a…6c02For53.8K7.58%—10mo ago
070x0703…961bFor51.7K7.28%—10mo ago
4F0x4f89…fd3cFor50K7.03%—10mo ago
130x13bd…8548For30K4.22%—10mo ago
220x2210…d02eFor35.20.00%—10mo ago
C50xc554…7759For11.20.00%—10mo ago
010x0151…c3b9For1.10.00%—10mo ago
9F0x9f77…2768For0.90.00%—10mo ago
2F0x2f2f…f78aFor0.50.00%—10mo ago
3F0x3fc3…d4f7For0.10.00%—10mo ago
D80xd8de…ae41For0.10.00%—10mo ago
880x88f6…0ec0For00.00%—10mo ago
F20xf2e8…bee4For00.00%—10mo ago
8E0x8ec2…6886For00.00%—10mo ago
0B0x0b89…d586For00.00%—10mo ago
F20xf206…c3beFor00.00%—10mo ago
1C0x1c64…eef1For00.00%—10mo ago
D30xd381…622eFor00.00%—10mo ago
270x27c9…c63bFor00.00%—10mo ago
D20xd220…0e79For00.00%—10mo ago
190x19bd…9a65For00.00%—10mo ago
800x805b…d12fFor00.00%—10mo ago
AC0xac7a…1942For00.00%—10mo ago
7C0x7c9b…ff18For00.00%—10mo ago
FA0xfa5e…c140For00.00%—10mo ago
F80xf88c…bdfdAgainst00.00%—10mo ago
3B0x3ba8…918bFor00.00%—10mo ago
3C0x3cd8…edcbFor00.00%—10mo ago
D90xd964…bb72For00.00%—10mo ago
9A0x9a34…460bFor00.00%—10mo ago
CD0xcde3…ff68Against00.00%—10mo ago
170x17cc…69d2For00.00%—10mo ago
C80xc82a…ccd2For00.00%—10mo ago
7B0x7b0b…8d0bAbstain00.00%—10mo ago
Showing 42

07Forum

No forum thread is confidently linked to this proposal.