Aave has proposed restructuring its bug bounty system, with the maximum bounty for Core Aave V3 potentially rising to $5 million.

According to Mars Finance, Aave Labs has proposed restructuring the Aave DAO vulnerability bounty system, splitting different protocol modules into multiple independent bounty programs, operated by Immunefi, Sherlock, and Cantina respectively. Specifically, the maximum bounty for critical vulnerabilities in Aave V4 is proposed to increase from $500,000 to $2.5 million, while the maximum bounty for critical vulnerabilities in the core version of Aave V3 is proposed to increase from $1 million to $5 million. The proposal also plans to transfer the responsibility for funding the Aave V3 on Aptos vulnerability bounty from Aave Labs to Aave DAO, and evaluate the effectiveness of the multi-platform parallel operation model within the next 6 to 12 months.