Butter addresses misalignment and capture in crypto governance through robust mechanisms. The current focus is to solve treasury allocation for the largest DAOs within the Ethereum ecosystem by deploying Conditional Funding Markets, based on futarchy and prediction markets.
For more information about Butter, please visit https://buttery.gg
Evaluating
Triaged by Immunefi
PoC required
KYC required
Documentation
Asset Accuracy Assurance
Bugs found on assets incorrectly listed in-scope will be considered valid and be rewarded.
Private Known Issues Reward Policy
Private known issues, meaning known issues that were not publicly disclosed, are valid for a reward.
Primacy of Impact vs Primacy of Rules
Butter adheres to the Primacy of Rules, which means that the whole bug bounty program is run strictly under the terms and conditions stated within this page.
KYC Requirement
Butter will be requesting KYC information in order to pay for successful bug submissions. The following information will be required:
- Full name
- Date of birth
- Proof of address (either a redacted bank statement with address or a recent utility bill)
- Copy of Passport or other Government issued ID
Security researchers are required to submit KYC within 14 days of KYC being requested, else their rewards may be forfeited. Immunefi may make exceptions due to extenuating circumstances.
Eligibility Criteria
Security researchers who wish to participate must adhere to the rules of engagement set forth in this program and cannot be:
- On OFACs SDN list
- Official contributor, both past or present
- Employees and/or individuals closely associated with the project
- Security auditors that directly or indirectly participated in the audit review
Responsible Publication
Whitehats may publish their bug reports after they have been fixed & paid, or closed as invalid, with the following exceptions:
- Bug reports in mediation may not be published until mediation has concluded and the bug report is resolved.
Immunefi may publish bug reports submitted to this Audit Competition bug bounty and a leaderboard of the participants and their earnings.
Feasibility Limitations
When there is uncertainty about how feasible an attack is Immunefi will use our feasibility limitation standards to determine the severity of the report.
Immunefi Standard Badge
By adhering to Immunefi’s best practice recommendations, Butter has satisfied the requirements for the Immunefi Standard Badge.