Aave Reviews Bug Bounty Program Amid Aptos Deployment Decline
Aave, the decentralized lending protocol, is considering ending its public bug bounty program for Aptos deployment. This decision comes as part of a broader review of the security setup around its Aptos version, Aave V3. The move would affect the ongoing route for security findings after a product goes live.
The Aptos version of Aave V3 uses Move and has a separate technical scope from Ethereum smart contracts commonly used in other versions. As part of its launch on Aptos, Aave went through audits, a Cantina mainnet security competition, and a bounty offering up to 500,000 GHO, Aave's stablecoin.
The July market snapshot showed sharply lower liquidity and minimal revenue for the Aptos deployment, with available liquidity falling from around $18 million to $1 million over six months. In response, a governance proposal recommended freezing Aptos reserves and setting supply and borrow caps to one, effectively blocking new deposits and borrowing while existing suppliers and borrowers reduce their positions.