# ImmunFi Security Endgame Bug Bounty Program ### Onboarding Summary Requestor: `Deniz` Stakeholder Point of Contact: `Deniz` Status: `Approved` Next Steps: - [ ] Stakeholder answers pending questions - [ ] Stakeholder signs off on Budget Payment Schedule ## Summary of Action Plan Budget Onboarding for ImmuneFi Security Endgame Bug Bounty Program - Set [EndGame ImmuneFi Auditor Wallet ](https://app.safe.global/settings/spending-limits?safe=eth:0xD86ADC6d931370F1E3E68d9D1784188Ba2B2Bfc9)for budget, funded from Launch Project Budget - Budget clean-up for legacy IS-001 CU. - IS-001 Wallet clean up requires guidance. - Pending confirmed bounty payout requires guidance. - Onboard budget for Premium Triaging Services for `Maker Protocol` & `Spark Protocol` - Nov-2023 through Dec-2023 8,400 Dai (prorated annual cost 3,400 x2) - Jan-2024 through Dec-2024 40,800 Dai (20,400 Dai x2 ) `Subtotal = 49,200 Dai` - Onboard budget for Joshua (Psychonaut) acting as Program Liaison - September compensation owed 5,000 Dai - Monthly Payments from Oct-2023 through Dec-2024 75,000 Dai total (15 months) `Subtotal = 75,000 Dai` **Total: `124,200` Dai Budget defined** ## Points Requiring Confirmation or Review from Stakeholder: - [ ] Stakeholder reviews previously used wallets for ImmuneFi Budgets and provides guidance (see Previous Budget Balances). - [ ] Stakeholder confirms source of funds and strategy for Bounty Payouts under new program (see Bounty Payouts Funding). - [ ] Stakeholder confirms funding source for pending confirmed bounty payout (see proposed Confirmed Bounty Payout). - [ ] Stakeholder confirms Payment Schedule (see detailed schedule below) - <s>Friday October 6th, 2023: 20,200 Dai to ImmuneFi.eth for Prorated Premium Triager Services</s> - `Not aplicable as the payments start on November` - Monthly Payments: 5,000 Dai to <s> ImmuneFi.eth </s> Joshua for Program Liaison compensation - January 2024 Payment: 45,800 Dai for Annual Premium Triage Services & monthly Program Liaison compensation ### Previous Budget Balances **ImmuneFi [Ops Wallet balance](https://app.safe.global/settings/spending-limits?safe=eth:0x124c759D1084E67B19a206ab85c4527Fab26c342): 500 Dai | 0.32332 ETH** - Signers: Psychonaut, Immunefi.eth, `0xAcAf835934eE40E0d5ee3F941E283499F8Ad97eD` , - Pause Proxy enabled as Beneficiary Ecosystem Proposal: 1. Ask current signers to convert ETH to Dai. 2. Ask current signers to send all Dai to [DssBlow](https://etherscan.io/address/0x0048fc4357db3c0f45adea433a07a20769ddb0cf). `Stakeholder Guidance:` **ImmuneFi [Auditor Wallet](https://app.safe.global/settings/spending-limits?safe=eth:0xd1F2eEf8576736C1EbA36920B957cd2aF07280F4): 467,316 Dai** - Signers: SES Accountants, SES Auditors - Pause Proxy enabled as Beneficiary Ecosystem Guidance: 1. Establish [EndGame ImmuneFi Auditor Wallet](https://app.safe.global/settings/spending-limits?safe=eth:0xD86ADC6d931370F1E3E68d9D1784188Ba2B2Bfc9). 2. Send all Dai from current Auditor Wallet to new Bounty Payout Auditor Wallet. `Stakeholder Guidance:` ## Bounty Payouts Funding Ecosystem Proposal: * Ecosystem has access to move old funds from the ImmuneFi Auditor Wallet to a newly created Bounty Payout Auditor Wallet. * Bounty Payout Auditor Wallet for payouts. * Ecosystem requires additional guidance on funding for future source of payout funds, if needed. * Ecosystem requests details on bounty payout tiers and details. `Stakeholder Guidance:` ## Pending Bounty Payout Guidance [Reported September 30th, 2023, confirmed by Stakeholder as Valid Submission](https://forum.makerdao.com/t/bounty-payout-request-for-immunefi-bug-24387/22243) * 50,000 Bug finder payout `0x5C544A45321B5450375560AD956970130693bed3` * 5,000 Immunefi Fee `0x2BC5fFc5De1a83a9e4cDDfA138bAEd516D70414b` - [X] Ecosystem Proposal: * Use newly funded Bug Payout Auditor Wallet to complete this payment. * Ecosystem can complete on Friday, October 6th, 2023. `Stakeholder Guidance:` ## New ImmunFi Security Endgame Bug Bounty Program Budget Details Funding Source: `Launch Project` Budget Auditor Wallet Address: * EndGame ImmuneFi Auditor Wallet`0xD86ADC6d931370F1E3E68d9D1784188Ba2B2Bfc9` * Signers: * Ecosystem Inspector Role Wallet: `0x88B3e82A55c5215d0499Da4bBd63fc3e43F26232` * SES Accountant Role Wallet: `0xA2A855Ac8D2a92e8A5a437690875261535c8320C` * Pause Proxy enabled as Beneficiary ImmuneFi Payment Address: * [0x2BC5fFc5De1a83a9e4cDDfA138bAEd516D70414b](https://etherscan.io/address/0x2BC5fFc5De1a83a9e4cDDfA138bAEd516D70414b) Joshua (Psychonaut) payment address: * [0xFfC87601A80d3e4F0aF083a899e3fee203C23cF0](https://etherscan.io/address/0xFfC87601A80d3e4F0aF083a899e3fee203C23cF0) ## Budget Payment Schedule Friday Oct 19th, 2023: 10,000 Dai - 10,000 for Sept-2023 and Oct-2023 Program Liaison Payment - Joshua (Psychonaut) November 2023: 11,800 Dai - 3,400 for prorated 2023 Premium Triage Services for Maker Protocol - 3,400 for prorated 2023 Premium Triage Services for Spark Protocol - 5,000 for Nov-2023 Program Liaison Payment - Joshua (Psychonaut) December 2023: 5,000 Dai - 5,000 for Dec-2023 Program Liaison Payment - Joshua (Psychonaut) January 2024: 45,800 Dai - 20,400 for 2024 Premium Triage Services for Maker Protocol - 20,400 for 2024 Premium Triage Services for Spark Protocol - 5,000 for Jan-2024 Program Liaison Payment - Joshua (Psychonaut) February 2024: 5,000 Dai - 5,000 for Feb-2024 Program Liaison Payment - Joshua (Psychonaut) March 2024: 5,000 Dai - 5,000 for Mar-2004 Program Liaison Payment - Joshua (Psychonaut) April 2024: 5,000 Dai - 5,000 for Apr-2024 Program Liaison Payment - Joshua (Psychonaut) May 2024: 5,000 Dai - 5,000 for May-2024 Program Liaison Payment - Joshua (Psychonaut) June 2024: 5,000 Dai - 5,000 for Jun-2024 Program Liaison Payment - Joshua (Psychonaut) July 2024: 5,000 Dai - 5,000 for Jul-2024 Program Liaison Payment - Joshua (Psychonaut) August 2024: 5,000 Dai - 5,000 for Aug-2024 Program Liaison Payment - Joshua (Psychonaut) September 2024: 5,000 Dai - 5,000 for Sep-2024 Program Liaison Payment - Joshua (Psychonaut) October 2024: 5,000 Dai - 5,000 for Oct-2024 Program Liaison Payment - Joshua (Psychonaut) November 2024: 5,000 Dai - 5,000 for Nov-2024 Program Liaison Payment - Joshua (Psychonaut) December 2024: 5,000 Dai - 5,000 for Dec-2024 Program Liaison Payment - Joshua (Psychonaut)