Compound DAO proposes a new initiative to pay anonymous developers a $100,000 bug bounty

ChainCatcher message, anonymous developer "KP" previously discovered a vulnerability in Compound and reported it, while also providing a code repository that includes an attack proof-of-concept simulation. After the vulnerability was fixed, "KP" submitted a request to the Compound DAO for a reward of $125,000. The Compound DAO initiated proposal 202 to provide a bug bounty for the recently fixed protocol vulnerability, but the proposal did not reach the quorum and failed to pass.

The Compound DAO subsequently reduced the bounty payment amount to $100,000 in COMP and initiated a new proposal 203, which has now reached quorum and passed with approximately 93% support.