Back Kucoin

Aave Proposes Restructuring of Its Bug Bounty Program, with the Top Bounty for Core ...

Kucoin • May 15, 2026

BlockBeats report, on May 15, Aave Labs proposed restructuring the Aave DAO bug bounty program by splitting different protocol modules into separate bounty initiatives, each operated by Immunefi, Sherlock, and Cantina. The maximum bounty for critical vulnerabilities in Aave V4 is proposed to increase from $500,000 to $2.5 million, while the maximum bounty for critical vulnerabilities in core Aave V3 is proposed to rise from $1 million to $5 million.

The proposal also plans to transfer responsibility for the Aave V3 on Aptos bug bounty funds from Aave Labs to the Aave DAO, and to evaluate the performance of the multi-platform parallel model over the 6 to 12 months.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Aave Restructures Bug Bounty Program with Increased Rewards On May 15, 2026, Aave Labs proposed a significant restructuring of its bug bounty program, dividing it into multiple independent programs managed by Immunefi, Sherlock, and Cantina. The maximum bounty for critical vulnerabilities in Aave V4 is set to increase from $500,000 to $2.5 million, while the maximum for Core Aave V3 will rise from $1 million to $5 million. This restructuring aims to better align rewards with the risk profiles of various subsystems and simplify the operational review process. The Aave DAO will also take over the funding for the Aave V3 on Aptos bug bounty from Aave Labs. The proposal will be evaluated over the next 6 to 12 months to assess its effectiveness. 10 sources 28

Extracted Entities

Platforms (1)

Aptos