Conversation

I really hate doing this kind of exposure but it seems its the only way to drag attention for something to be resolved when dealing with

@anchor_protocol

vulnerability disclosure reports and getting paid. Communication is not one of Anchors teams strength it appears. /1

175

791

Do Kwon

@stablekwon

Dec 29, 2021

Will keep this brief. TL;DR - 1. I had promised a 1M personal bounty on critical bugs that falls into immunefi’s 50k critical bug category - this unfortunately did not - fell into 20k category Anchor team had nothing to do with it, so im not sure how they would respond to u

159

Do Kwon

@stablekwon

Dec 29, 2021

Second, we leave it to agencies like immunefi to communicate with bounty participants precisely because we lack the time and objectivity to engage ourselves - we simply cannot engage with everything Delegating is not “poor communication”

Replying to

and

I did not issue the additional 1M bounty because 1) didnt meet requisite criteria, and 2) immunefi recommended against it

12:13 AM · Dec 29, 2021Twitter for iPhone

Replying to

and

But why not pay anyway? If we paid people millions outside of predeclared rules for sidestepping bug bounty channels and bugging many members of our team over dms and twitter, it sets pretty perverse incentives

Do Kwon

@stablekwon

Dec 29, 2021

I am very protective of my time, and I do not appreciate you forcing me to engage with this on open twitter like a threadoooor I do, however, appreciate all the attention you pay to the Terra ecosystem Wish you the best of luck, and hope we can move on. Cheers