BGD. Bug bounties proposal

[fig]

​​​​Thanks for sharing the update here - the color coding helps for more easily digesting the report.

I’m slightly confused by the reward on this bug here:

@bgdlabs

Reporters:

LTV0: Emanuele Ricci (stermi )

Isolated Collaterals: cmichel

Severity: Low

• Not taking into account pretty edge cases of certain immutable contracts, any exploit of the problem is reversible, mainly having consequences on the user experience.

Likelihood: Possible, not likely

• An attacker should on purpose spend resources (e.g. gas) for an action that will be reversible by the victim. So even if possible especially in low-cost environments, there is not much rationale for it.

Proposed bounty: 20’000 USD each

20,000 - for a low severity, unlikely attack vector.

And 20,000 for a critical, not likely because of “11 different holders” required to coordinate.

How are they rewarded the same? Is there a formula the community may understand for these calculations?

One general question -

Is this part of an already-passed proposal such as ImmuneFi? Or will it be a separate DAO spend?