Aave Labs proposed splitting Aave DAO’s bug bounty system into subsystem-specific programs, with Core Aave V3’s maximum critical payout set at $5 million across multiple security platforms.
Aave Labs proposed restructuring Aave DAO’s bug bounty framework into subsystem-specific programs distributed across three platforms. Under the proposal, Aave V3, V2, and GHO would be managed on Immunefi, Aave V4 and App Stack on Sherlock, and Aptos Aave V3 on Cantina. The framework sets Core Aave V3’s maximum critical bug bounty reward at $5 million. The proposal focuses on reorganizing how security incentives are managed across Aave’s major protocol components.