Skip to content

Latest commit

 

History

History
192 lines (150 loc) · 18.8 KB

36.md

File metadata and controls

192 lines (150 loc) · 18.8 KB

Payloads

Proposal 36

Ipfs

Proposal text

Simple Summary

Bug bounty payment for the report received on 4th November 2023 amounting a grant total of ~1'000'000 for the white hat splitted in stable-coins and AAVE, together with the $100'000 Immunefi fee (10% of the total).

Motivation

On the 4th of November 2023, a report was received via the Aave <> Immunefi bug bounty program about a critical bug related to the stable borrow rate.

Similar to any other valid bug reports, a bounty needs to be paid to the white-hat. However, being a critical severity one, we think it is reasonable to have an ad-hoc governance proposal for this type of sizeable payment.

Specification

The governance proposal executes the payment to 2 different recipients:

-> White-hat

  • Transfer of 500'000 aUSDT v2 Ethereum from the Aave Ethereum Collector.
  • Transfer of 5'583 AAVE (calculated to be $500'000 using a 30-days average) from the Aave Ecosystem Reserve. The amount has been determined following the recommendation of the financial service providers of the DAO HERE.

-> Immunefi

  • Transfer of 100'000 aUSDT v2 Ethereum from the Aave Ethereum Collector.

References

Copyright

Copyright and related rights waived via CC0.

Check: Reports all state changes ✅

Info

KeeperRegistry at 0x02777053d6764996e594c3E88AF1D58D5363a2e6

@@ `s_upkeep` key `"2651260633509968244842245718659958660539758109819220392919944208741153930322".lastKeeper` @@
- 0xd6060b36f7142aea27231c28932c67d76beba173
+ 0x86c5d9efb1377dba0535cf944bd6f5736c4290cb

TransparentUpgradeableProxy at 0x9AEE0B04504CeF83A65AC3f0e838D0593BCb2BC7👻 with implementation Governance at 0x58BcB647C4beFf253B4B6996c62F737B783f2cDd

@@ `_proposals` key `"35".state` @@
- 2271714196518193495161596589099195229628989699
+ 2271714196518193495161596589099195229628989700
@@ `_proposals` key `"36".state` @@
- 2271720337551534026913095592953645011275546883
+ 2271720337551534026913095592953645011275546884

TransparentUpgradeableProxy at 0xdAbad81aF85554E9ae636395611C58F7eC1aAEc5👻 with implementation PayloadsController at 0x7222182cB9c5320587b5148BF03eeE107AD64578

@@ Slot `0xc20be026ae5ea792bd28b5908d1dfcfd8c2e447d9276607ddf6143e7dddc0fe8` @@
- "0x00000000000065d8afb3010157ab7ee15ce5ecacb1ab84ee42d5a9d0d8112922"
+ "0x0065de1a070065d8afb3020157ab7ee15ce5ecacb1ab84ee42d5a9d0d8112922"
@@ Slot `0xfc869d08d1790d4602743c5b6e4adb33c74c1d0d7c8c47359779d859193dcb05` @@
- "0x00000000000065d8b7330101f71fc92e2949ccf6a5fd369a0b402ba80bc61e02"
+ "0x0065de1a070065d8b7330201f71fc92e2949ccf6a5fd369a0b402ba80bc61e02"

TransparentUpgradeableProxy at 0xEd42a7D8559a463722Ca4beD50E0Cc05a386b0e1👻 with implementation unknown contract name at 0x28559c2F4B038b1E836fA419DCcDe7454d8Fe215

@@ Slot `0x0000000000000000000000000000000000000000000000000000000000000002` @@
- "0x00000000000000000000000000000000000000000000000000000000000000c2"
+ "0x00000000000000000000000000000000000000000000000000000000000000c4"
@@ Slot `0x0000000000000000000000000000000000000000000000000000000000000003` @@
- "0x00000000000000000000000000000000000000000000000000000000000000c2"
+ "0x00000000000000000000000000000000000000000000000000000000000000c4"
@@ Slot `0x003e02a2ff024460e7168f51db964222fd49f2868b6c51c1a2b243cae0a85b5e` @@
- "0x0000000000000000000000000000000000000000000000000000000000000000"
+ "0x0000000000000000000000000000000000000000000000000000000000000001"
@@ Slot `0x12be8c552f28fd198809e5d1cb3535d5dd3b4bfba9811f5ec2ff2af2465aaa99` @@
- "0x0000000000000000000000000000000000000000000000000000000000000000"
+ "0x0000000000000000000000000000000000000000000000000000000000000001"
@@ Slot `0x8f0f3ff9fb951ff6f7295a5d2a80d65d1a76254103cda1b37bda4516049b740d` @@
- "0x0000000000000000000000000000000000000000000000000000000000000000"
+ "0x0000000000000000000000000000000000000000000000000000000000000001"
@@ Slot `0xb30504ff82814e1c41bf1a5b531a0bbbf4d11f236f82722b592635ecda6c641c` @@
- "0x0000000000000000000000000000000000000000000000000000000000000000"
+ "0x0000000000000000000000000000000000000000000000000000000000000001"

Check: Reports all events emitted from the proposal ✅

Info

  • TransparentUpgradeableProxy at 0xEd42a7D8559a463722Ca4beD50E0Cc05a386b0e1👻 with implementation unknown contract name at 0x28559c2F4B038b1E836fA419DCcDe7454d8Fe215
    • EnvelopeRegistered(envelopeId: 0x32c4fd26a89c106c31b3c35aeb7cb6aaba4d3d4952563f6ca8d29a4f4812c206, envelope: [object Object])
    • TransactionForwardingAttempted(transactionId: 0x1e6858caadbd11d094951fbe7df52cec9be20571d7226f81f6e380fb7dd0ef9e, envelopeId: 0x32c4fd26a89c106c31b3c35aeb7cb6aaba4d3d4952563f6ca8d29a4f4812c206, encodedTransaction: 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, destinationChainId: 1, bridgeAdapter: 0x118dfd5418890c0332042ab05173db4a2c1d283c, destinationBridgeAdapter: 0x118dfd5418890c0332042ab05173db4a2c1d283c, adapterSuccessful: true, returnData: 0x000000000000000000000000dabad81af85554e9ae636395611c58f7ec1aaec50000000000000000000000000000000000000000000000000000000000000000)
    • EnvelopeRegistered(envelopeId: 0x94083fe94dc2b74bc2eb62f396ad5bd7707c8873e54841538516a6f19f1100b5, envelope: [object Object])
    • TransactionForwardingAttempted(transactionId: 0x4b495a6ccddd510948aee2f782f236227d2c8ec545e62bb46da4ff9ac560fad0, envelopeId: 0x94083fe94dc2b74bc2eb62f396ad5bd7707c8873e54841538516a6f19f1100b5, encodedTransaction: 0x000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000c300000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000c30000000000000000000000009aee0b04504cef83a65ac3f0e838d0593bcb2bc7000000000000000000000000dabad81af85554e9ae636395611c58f7ec1aaec50000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000004200000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000065da13ab, destinationChainId: 1, bridgeAdapter: 0x118dfd5418890c0332042ab05173db4a2c1d283c, destinationBridgeAdapter: 0x118dfd5418890c0332042ab05173db4a2c1d283c, adapterSuccessful: true, returnData: 0x000000000000000000000000dabad81af85554e9ae636395611c58f7ec1aaec50000000000000000000000000000000000000000000000000000000000000000)
  • TransparentUpgradeableProxy at 0xdAbad81aF85554E9ae636395611C58F7eC1aAEc5👻 with implementation PayloadsController at 0x7222182cB9c5320587b5148BF03eeE107AD64578
    • PayloadQueued(payloadId: 65)
    • PayloadExecutionMessageReceived(originSender: 0x9aee0b04504cef83a65ac3f0e838d0593bcb2bc7, originChainId: 1, delivered: true, message: 0x000000000000000000000000000000000000000000000000000000000000004100000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000065da0217, reason: 0x)
    • PayloadQueued(payloadId: 66)
    • PayloadExecutionMessageReceived(originSender: 0x9aee0b04504cef83a65ac3f0e838d0593bcb2bc7, originChainId: 1, delivered: true, message: 0x000000000000000000000000000000000000000000000000000000000000004200000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000065da13ab, reason: 0x)
  • TransparentUpgradeableProxy at 0x9AEE0B04504CeF83A65AC3f0e838D0593BCb2BC7👻 with implementation Governance at 0x58BcB647C4beFf253B4B6996c62F737B783f2cDd
    • PayloadSent(proposalId: 35, payloadId: 65, payloadsController: 0xdabad81af85554e9ae636395611c58f7ec1aaec5, chainId: 1, payloadNumberOnProposal: 0, numberOfPayloadsOnProposal: 1)
    • ProposalExecuted(proposalId: 35)
    • PayloadSent(proposalId: 36, payloadId: 66, payloadsController: 0xdabad81af85554e9ae636395611c58f7ec1aaec5, chainId: 1, payloadNumberOnProposal: 0, numberOfPayloadsOnProposal: 1)
    • ProposalExecuted(proposalId: 36)
  • GovernanceChainRobotKeeper at 0x011824f238AEE05329213d5Ae029e899e5412343
    • ActionSucceeded(id: 35, action: 1)
    • ActionSucceeded(id: 36, action: 1)
  • KeeperRegistry at 0x02777053d6764996e594c3E88AF1D58D5363a2e6
    • UpkeepPerformed(id: 2651260633509968244842245718659958660539758109819220392919944208741153930322, success: true, from: 0x86c5d9efb1377dba0535cf944bd6f5736c4290cb, payment: 0, performData: 0x000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000024000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000001)

Check: Check all touched contracts are verified on Etherscan ✅

Info

  • 0x86c5d9efb1377dba0535cf944bd6f5736c4290cb: EOA (verification not applicable)
  • 0x02777053d6764996e594c3e88af1d58d5363a2e6: Contract (verified) (KeeperRegistry)
  • 0x169e633a2d1e6c10dd91238ba11c4a708dfef37c: Contract (verified) (EACAggregatorProxy)
  • 0x785433d8b06d77d68df6be63944742130a4530d1: Contract (verified) (AccessControlledOffchainAggregator)
  • 0xdc530d9457755926550b59e8eccdae7624181557: Contract (verified) (EACAggregatorProxy) 👻
  • 0xbba12740de905707251525477bad74985dec46d2: Contract (verified) (AccessControlledOffchainAggregator)
  • 0x011824f238aee05329213d5ae029e899e5412343: Contract (verified) (GovernanceChainRobotKeeper)
  • 0x9aee0b04504cef83a65ac3f0e838d0593bcb2bc7: Contract (verified) (TransparentUpgradeableProxy) 👻
  • 0x58bcb647c4beff253b4b6996c62f737b783f2cdd: Contract (verified) (Governance)
  • 0xa198fac58e02a5c5f8f7e877895d50cfa9ad1e04: Contract (verified) (GovernancePowerStrategy) 👻
  • 0x7fc66500c84a76ad7e9c93437bfc5ac33e2ddae9: Contract (verified) (InitializableAdminUpgradeabilityProxy) 👻
  • 0x5d4aa78b08bc7c530e21bf7447988b1be7991322: Contract (verified) (AaveTokenV3)
  • 0x4da27a545c0c5b758a6ba100e3a049001de870f5: Contract (verified) (InitializableAdminUpgradeabilityProxy) 👻
  • 0x0fe58fe1caa69951dc924a8c222be19013b89476: Contract (verified) (StakedAaveV3)
  • 0xa700b4eb416be35b2911fd5dee80678ff64ff6c9: Contract (verified) (InitializableImmutableAdminUpgradeabilityProxy) 👻
  • 0x366ae337897223aea70e3ebe1862219386f20593: Contract (verified) (ATokenWithDelegation)
  • 0xed42a7d8559a463722ca4bed50e0cc05a386b0e1: Contract (verified) (TransparentUpgradeableProxy) 👻
  • 0x0bf5bbfae7808d329e0ba8277e0b746bbfda68f1: Contract (verified) (CrossChainController)
  • 0x118dfd5418890c0332042ab05173db4a2c1d283c: Contract (verified) (SameChainAdapter)
  • 0xdabad81af85554e9ae636395611c58f7ec1aaec5: Contract (verified) (TransparentUpgradeableProxy) 👻
  • 0x7222182cb9c5320587b5148bf03eee107ad64578: Contract (verified) (PayloadsController)

Check: Check all touched contracts do not contain selfdestruct ✅

Warnings

Info