Flash
Aave upgrade vulnerability bounty plan: 5x increase the maximum of critical vulnerability bounty for V4 and CoreV3
Aave officially announced an update to the vulnerability bounty program to better match the risk characteristics of various parts of the ecosystem and streamline the review process. According to the latest adjustments, the critical bug bounty caps for AaveV4 and CoreAaveV3 have been increased to five times.<br />
AaveLabs also proposed to reorganize the bounty framework and place different subsystems on platforms such as Immunefi, Sherlock and Cantina for management. Among them, core parts such as CoreAaveV3, V2, and GHO will continue to be managed by Immunefi; AaveV4 and AaveAppStack will be transferred to Sherlock; and AaveV3 onAptos will be managed by Cantina.