Aave is considering ending the public bug bounty for its Aptos deployment. The request is separate from, but connected to, plans for the lending market. Aave's latest ARFC asks the DAO to sunset the bug-bounty program for Aave V3 on Aptos and end Cantina's role as its provider.
The request arrives while Aave is separately debating the future of its Aptos lending market. Those discussions cover the market itself and the services that support it. The market proposal deals with deposits, borrowing, and available liquidity, while the bounty proposal covers rewards for researchers who report security issues.
Background
Aave launched on Aptos with a separate version of V3, which uses Move, while Ethereum smart contracts commonly use Solidity. The Move-based deployment went through audits, a Cantina mainnet security competition, and a bounty offering up to 500,000 GHO, Aave's stablecoin.
The July market proposal described a sharp decline in Aptos activity, with about $1.7 million in supplied assets and roughly $719,000 in debt. Available liquidity had fallen from around $18 million to $1 million over the previous six months, while quarterly revenue was below $1,000.
Next Steps
Users with an Aptos position should follow the market proposal and later governance decisions. Those measures would determine the timetable and limits for activity on Aave V3. Eligibility follows the active terms published by Aave and Cantina. The ARFC asks to sunset the program, while the published scope and any approved closure terms determine which reports qualify for a reward.