Create a bug bounty program

[wkande]

From api3dao/api3-docs#474 (Airnode) - Create a bug bounty program api3dao/api3-docs#474

The closest thing we have to a bug bounty is
https://github.com/api3dao/api3-dao#bug-bounty

We need to do this properly, add it to docs, link it from the repo READMEs.

[bbenligiray]

The issue at api3dao/airnode#474 is closed and this is now tracked by https://api3dao.atlassian.net/jira/software/projects/CT/boards/28?selectedIssue=CT-1

[ferdiozturk]

How about using https://immunefi.com/?

[bbenligiray]

How about using https://immunefi.com/?

Looks decent. The main blocker of this bug bounty thing is that what the terms and amount will be is a governance decision, but the DAO will have to trust the payout with a multisig because the bug can't be disclosed publicly (for voters' consideration) before the payout. So coming up with an acceptable setup is not trivial so I'm personally postponing it until someone leads the effort.

[wkande]

@bbenligiray Shall we keep this active? Has there been any discussion at all?

[bbenligiray]

It needs to be tracked somewhere, but no, I personally can't find time for this

[bbenligiray]

Promoting products and services in issues is not welcome