Security - Risk Framework + Management Tasks (Weasel)

[rareweasel]

Scope

This temporary budget request is for the security team comprised currently of one core contributor to continue contributing with security related work in the yearn ecosystem.

This request will cover one quarter (3 months) and continue partially of the team's work on the previous budget requests.

This request also will detail an overview of the team's goals and objectives for the period.

Note that this budget request includes no revenue share.

Presentation link.

Plan

• Review and triage bounty reports through our multiple pre-established channels, such as Immunefi, Vyper Security disclosures or any other source.
• Track expenses in audits, contests, and bounties and shared it monthly.
• Coordinate with yTeams any required audits and plan our spots with ChainSecurity.
• Risk Framework
  • Coordinate with web team to integrate the defined risk scores (categories) for users.
  • Improve the smart contracts design based on the current improvements in the security process as needed.
  • Deploy smart contracts on Polygon.
  • Track all the current v3 vault scores.

Does NOT include:

• Internal security reviews.
• Assign risk scores to each vault/strategy.

Period

It will cover 3 months:

• From: 2024-05-01
• To: 2024-07-31

People

• Rare Weasel

Money

This budget request includes the following concepts:

• 1 core contributor grant.

Funds to be streamed over three months, starting 1st May 2024.

Total:

30,000.00 DAI (10,000.00 DAI monthly)

Any funds not spent at the end of the period will be transferred back to the yBudget team or considered for the next period.

Wallet address

0x49fF67C36Ce3CADB66F10632821A55e733c236a7

Reporting

Monthly in this issue.