Summary
This post requests the release of bounty payments for two valid bug bounty submissions, together with the corresponding Immunefi platform fee for one of the payouts.
The total requested amount is $9,350.
Motivation
Valid submissions were received through the Aave bug bounty process and are ready for payout.
One of the submissions represents the first payout under the Aave V4 bug bounty program. The report was classified as low severity, and processing the payout confirms that the V4 bounty scope is live and operating through the expected researcher payment flow.
Specification
Aave Labs recommends processing these payments as part of the next monthly Treasury proposal.
The requested transfers are:
-
$7,500 to 0xcC7383b24631d8BfC8571dbF9c81d6D094688628
-
$750 to 0x7119f398b6C06095c6E8964C1f58e7C1BAa79E18 (immunefi.eth). This is the fee corresponding to 10% of the $7,500 bounty.
-
$1,100 to 0x666B8EbFbF4D5f0CE56962a25635CfF563F13161. This is the first payout under the Aave V4 Bug Bounty Program. The amount includes Sherlock platform’s fee.
The total amount requested is $9,350.
This follows the same payout path used in the prior bug bounty payout requests, with the most recent payout having been executed in March 2026.
Next Steps
Aave Labs will coordinate with TokenLogic to include these payouts in the next Treasury proposal.
Disclaimer
Aave Labs is presenting this proposal as a service provider to the Aave DAO under the budget approved by the Aave Will Win framework. Aave Labs is contributing this proposal as part of its approved scope of work in support of DAO operations.
Copyright
Copyright and related rights waived via CC0.