According to official Odaily, AaveLabs has proposed reorganizing the Aave DAO bug bounty framework into several specific subsystems, running on the Immunefi, Sherlock, and Cantina platforms respectively. Core Aave V3, Core Aave V2, GHO, and the non-liquidity protocol infrastructure will be covered by Immunefi; Aave V4 and the Aave App Stack by Sherlock; and Aave V3 on Aptos by Cantina.
The proposal suggests adjusting the bounty amounts for various systems, with a maximum reward of $5 million for critical vulnerabilities in Core Aave V3 and $2.5 million for critical vulnerabilities in Aave V4. Furthermore, the funding for Aave V3 vulnerability bounties on Aptos will be transferred from Aave Labs to the Aave DAO. This ARFC proposal has now been approved.
