►
From YouTube: DXgov Weekly Gathering [2022-10-26]
Description
00:02 Welcome
02:04 Mainnet
02:55 Gnosis Chain
10:09 Restructuring checkin
12:36 SWPR soft landing update
13:54 DXdao Call Schedule
26:40 Register new Contribution Reward Scheme
34:20 Exploit Disclosure - DXdao Governance
A
A
A
Some
discussions
there
TX
call
Dow
call
schedule
I
actually
just
made
a
post
about
this
about
an
hour
ago.
Just
thinking
about
how
we
want
to
be
structuring
calls,
maybe
looking
at
those
the
scheduling
of
those
there,
maybe
a
bit
on
the
swapper
soft
Landing
update,
I,
don't
know
if
we
have
anything
to
update
they're
Keen
in,
but
we
had
talked
about
that
and
I
know.
Things
are
winding
down
this
week
and
then
two
items
that
are
related
but
different,
so
one
is
the
or
the
second
one.
A
I
guess
is
exploit
disclosure
deep
style
governance
is
around
Dave
and
finding
the
vulnerability.
This
has
been
a
a
big
topic
of
discussion,
the
last
couple
days
so
we'll
get
to
that
and
then
the
first
item
here
is
the
registered
new
contribution
reward
scheme,
which
is
a
proposal
that
was
just
submitted
on
maynet
from
Augusto,
which
is
actually
a
fix
to
the
exploit
closure.
So
we
can
talk
about
that.
Those
separately
there
and
yeah
I'm
told
I
should
be
going
to
dxgov.github
instead
of
the
other
one.
So
we'll
go
there.
A
First,
there
we
go
yeah,
so,
starting
with
the
proposal
Roundup
on
the
agenda,
we
actually
have
say
no
live
proposals,
or
so
no
boosted
or
pending
boosting
proposals
right
now,
you'll
notice,
there
are
actually
a
cup
two
active
proposals
here.
One
I
just
mentioned
is
register
new
contribution
reward
scheme-
oh
that
did
not
and
that
will
get
to
in
a
bit
and
then
this
one
is
just
like
a
weird
proposal
that
we
noticed
was
submitted
a
couple
days
ago.
C
A
A
C
A
So
that's
the
multi-call
one
and
then
the
current
live
proposals
for
for
the
contribution
reward
scheme.
Here
we
have
George
Lopez.
This
is
one
ending
on
October
18th
and
this
is
actually
George's
last
worker
proposal
for
Deek
style,
so
it'll
kind
of
worth
kind
of
taking
a
look
and
seeing
that
and
then
there
are
there's
an
infinite.
Hackathon
travel
Grant
expenses
here
this
was
kind
of
I,
think
voted
on
by
Melanie
and
Augusto
kind
of
running
running
through
that
and
so
yeah.
It's.
A
To
see
when
proposals
mention
certain
people
and
then
they're
voted
on
by
those
people,
and
even
when
those
people
have
ens
names.
So
it's
very
easy
to
see
that
in
the
vote
here
it
makes
it
clean
for
others,
clean
governance,
I
should
say
yeah,
and
then
we
have
ether
Labs
a
rep
claim
for
July
and
August.
A
This
is
for
venki
AKA
ether,
labs
and
he's
done
his
payment
proposals
separate,
and
this
is
for
the
rep
claim
there
and
then
next
up
we
have
Caney
Fork
worker
proposal
for
October
November
2022.
This
is
the
first
of
two
posted
this
earlier
in
the
month
here.
So
you
can
take
a
look
at
the
the
things
to
hopefully
accomplish
this
yeah
these
these
months
here
and
feel
free
to
vote
on
that.
A
If
you
so
desire,
and
then
we
have
also
just
boosted
the
last
day
here
we
have
a
space
engine
to
help
and
work
for
September,
and
then
you
know
this
is
actually
still
before
the
restructuring
phase.
One
proposal
past
there,
so
this
is
payment
for
that
and
then
yeah,
just
just
boosted
recently
is
Ali
Q,
contributor
proposal,
I
believe
the
second
half
of
August
and
September,
and
then
the
first
half
of
October
and
November
there
and
then
yeah.
Actually
else.
A
A
E
Chris
real,
quick
yeah:
can
you
just
the
arbitrum
I
know
that
you
actually
included
here
and
there's
nothing
boosted
or
pending?
Can
you
just
open
it
up
in
DX
vote
like
I?
Actually
so
get
you
know
giving
the
stuff
we
learned
at
Dev
con
and
this
and
the
vulnerability
and
stuff
like
I'm,
pretty
sure
not
a
lot
of
people
pay
attention
to
arbitrum
one,
but
you
know
arbitrum,
one
are
our
base.
That's
there
which
I'd
say
is
not
a
it's,
not
a
real.
E
It's
kind
of
a
makeshift
base
right
now,
but
like
it
actually
owns
swapper
token
and
it
actually
owns
swapper
there
like
it.
If
people
don't
pay
attention
to
it,
it
can
be
attacked
so
like
yeah,
just
including
all
of
our
real
bases
like
actually
making
sure
everyone
looks
at
them
on
a
on
this
by
week
on
this
weekly
governance
call
I
think
is
important
like
clearly.
E
A
A
A
A
We've
got
some
other
things
kind
of
with
phase
phase
two
here
that
we're
itching
too,
but
I
think
like
the
yeah,
keeping
the
momentum
going
from
The
Retreat
and
then
also
kind
of
putting
a
goal,
I.
Think
of
getting
a
lot
of
these
things
ironed
out
by
the
by
the
end
of
the
year
and
I.
Think,
like
the
big
thing
we
think
about
with
budgets,
is
I.
A
Think
everyone
involved
everyone
most
people
on
this
call,
even
windows
that
are
not
full-time
Distributors
will
be
like
this
will
be
a
time
suck,
because
people
will
be
putting
these
things
out
there.
There
will
be
just
debates
about
what
these
things
are,
but
I
think
that's
like
all
part
of
the
process
that
we
need
to
do
so.
Hopefully,
yeah
we'll
be
posting
something
on
this,
but
I
think
the
bigger
thing
is
kind
of
preparing
for
this
process
over
like
the
next
couple
months.
B
Yeah,
hey
guys,
sorry,
the
the
voice
loss
has
turned
into
more
of
a
sickness
now
so
I'm
not
going
to
add
much
more
to
that.
That
was
good,
but
this
is
a
quick
I.
Guess:
look
ahead
to
the
rest
of
this
week,
hoping
to
get
a
little
bit
of
a
recap
out
today,
unrelated
to
the
Restriction,
but
I.
Think
contextualizing
kind
of
everything
we
went
through
is
good
Chris.
B
There's
plenty
of
time
to
work
with
that
I
think
and
then
the
other
thing
is
the
the
swapper
soft
line.
I
want
to
quickly
talk
about,
I.
Think
it's
next
on
your
agenda,
but
I
think
the
goal
is
to
give
a
bit
more
context
and
have
a
proposal
ready
for
tomorrow,
and
this
is
when
the
next
campaigns
are
to
start,
but
there
will
be
no
campaigns,
of
course,
coming
out
of
the
gate.
Instead,
we'll
point
to
this
kind
of
governance.
B
Maybe
we
don't
have
a
snapshot
ready
right
away,
but
some
kind
of
governance
process
to
point
to
people
who
are
like
hey
where'd,
the
yield
go
I,
don't
understand,
and
then
they
can
kind
of
rally
swap
your
troops
behind
a
kind
of
direction.
For
that,
of
course,
we'll
probably
come
up
with
this
like
three
month
idea
of
a
soft
Landing,
where
we
have
three
months
of
kind
of
light
campaigns
on
targeted,
Pairs
and
kind
of
roll
that
into
whatever
the
future
of
swapper
is
that's
the
idea
for
that.
B
B
F
A
A
So
that
is
a
time
when,
when
everything
changes
a
little
bit,
so
maybe
a
good
time
to
think
and
talk
about
this
and
so
I
think
part
of
the
only
thing
post,
I,
add
here
and
was
thinking
like
you
know,
meetings
do
take
people's
time
and
I
think
it's
important
that
we
when
we're
having
meetings
we're
focused
on
on
what
is
efficient
about
like
well.
Do
we
really
need
to
meet
about
this?
What
is
kind
of
taking
everyone's
time
here?
A
So
anyway,
just
some
ideas
here
and
maybe
there's
a
field
of
free
share,
feel
free
to
share
those
now
or
maybe
commenting
in
the
in
the
Forum
here,
but
I
think
it
would
be
good
to
maybe
have
a
re-look
or
a
re-examination
of
our
of
our
call
schedule
and
in
a
way
of
maybe
communicating
that
the
other
thing
I
was
just
like
kind
of
wondering
here
at
the
end
is
you
know?
Maybe
we
need
a
new
calendar
tool
to
coordinate
this.
A
If
we're
going
to
be
trying
to
schedule
things
in
the
future,
there's
some
things
you
can
do
and
I
know
about
Discord
and
even
also
discourse
or
dial
talk
for
scheduling
those
we
also
can
think
about.
Well,
maybe
there's
a
standard
format
for
calls
that
we
want
to
follow
in
terms
of
like
reporting
either
to
the
Forum
or
maybe
this
is
like,
like
a
chance,
we
put
in
some
more
like
Automation
in
there,
so
yeah,
just
some
ideas,
maybe
to
get
us
started.
E
G
G
My
time
you
know
that's
that's
the
time
for
for
days,
but
in
case
of
like
whether
they
should
be
organized
every
week.
I'm
it's
I'm
open
to
to
also
like
participating
them
every
every
in
every
two
weeks.
So
so
I,
don't
I,
don't
I,
don't
believe
that
they,
they
must
be
like
organized
every
week,
but
I
really
find
them
useful
because
they
serve
to
as
a
as
a
kind
of
update,
because
I
am
I.
G
E
That's
a
really
good
point
and
and
like
by
a
very
strategic
design.
There
is
this.
There
is
this
basically
two-hour
name,
maybe
two
or
three
hour,
but
really
one,
two
or
three
hour
window,
that
an
organization
which
we
say
Global,
but
it's
mainly
Europe
and
U.S.
So
the
extremes
of
the
us
and
we're
going
to
have
to
deal
with
this
with
daylight
savings
coming
up,
but
like
the
extremes
of
Bulgaria
and
Israel
and
then
the
west
coast
of
the
US.
E
There
is
a
very
specific
window
when
you
can
actually
Argentina's
in
the
middle
Argentina
is
easy
because
it's
in
the
middle,
it's
the
extremes:
why
we,
why
we
pick
call
times
and
why
we
have
to
actually
move
call
Times
by
an
hour
or
so,
and
this
yeah?
This
doesn't
include
Asia
if
we
had
to
include
Asia
we're
like
basically,
and
so
we
still
think
about-
maybe
there's
another
time
to
include
Asia.
But
these
windows
are
very
specific.
So
even
if
we
didn't
have
every
weekly
call,
we
could
have
bi-weekly.
E
But
still
if
you're
gonna
do
one-off
calls,
you
often
need
to
fit
your
one-off
calls
into
these
windows
which,
depending
on
who
needs
to
join
the
call,
is
often
going
to
be
in
you
know,
Europe
and
us
so
keeping
those
windows
in
mind
when
you're,
when
you're
doing
one-off
calls
is
also
important
and
so
yeah.
The
consistency
of
the
of
the
weekly
time
has
always
been
beneficial
for
many
people,
but
yeah
we
can.
E
E
You
don't
always
know
if
someone
else
has
a
call
at
that
in
one
of
those
two
available
hours,
they
might
already
have
a
call
about
swapper
or
about
the
X
gov
or
something
and
so
being
aware
of.
When
those
calls
are
lets
you
easily
make
call
for
another.
You
know
one-off
call
at
a
call
at
a
time
that
is
not
already
taken
by
another
call
or
a
squad
call
or
something.
E
A
C
Maybe
can
be
like
bi-weekly
right
where
every
two
weeks
we
share
what
happened
on
the
course
highlight
of
each
call.
Let's
say
today,
let's
say
today:
we
discuss
something
super
important
or
with
this
guy
something
important,
for
example,
the
the
play
discussion.
They
exploit
disclosure,
so
it
was
mainly
discussed
on
this
on
this
call
this
what
agenda
so.
C
Onto
that
conversation,
you
will
you
go
there
like,
let's
say
only
on
a
developer
call.
We
have
I
guess
from
a
project
who
presented
something.
We
have
a
very
interesting
discussion
that
we
had
yesterday
about
ens
hashing
algorithm
and
how
it
registered
DNS
records
and
hubs.
Album
is
work.
Okay,
let's
highlight
that
and
we
can
add
it
on
the
weekly
dishes.
Call.
C
Oh
there.
We
just
notes
or
something
I
know:
I
I,
think
weekly,
cheers
of
course
someone.
We
need
to
take
responsibility
on
this
on
kind
of
gathering
and
and
and
yeah
asking
for
the
for
the
notes
or
highlights
of
each
call
and
even
more
it
will
take
for,
for
example,
from
me
for
me,
will
take
more
energy
to
have
a
weekly
developer
called
with
nodes,
and
an
agenda
said,
and
everything
also
the
agenda
for
the
weekly
develop
record
is
always
like
always
the
same.
We
do
a.
C
We
do
a
Roundup
of
the
projects
and,
most
of
the
time,
the
the
oh,
my
God,
most
of
the
time,
the
we
came
up
with
issues
or
or
the
squad
person
issues
or
some
technical,
difficult
difficulty
that
they
that
they
found
and
they
present
something
interesting
and
we
go
deeper
into
the
conversation.
So
usually,
the
interesting
topics
just
happens
on
the
technical
level
on
the
weekly
developer.
C
D
D
D
A
A
Of
it
is
also
like
when
I
go
back
and
look
I'm
like
oh.
This
is
what
we
discussed
in
the
governor's
call
and
like
having
to
highlight
the
important
things
then
that
actually
sometimes
like
almost
automatically
creates
a
to-do
list
of
like
okay.
Well,
I
need
to
focus
on
these
things
so
yeah.
It
can
be
a
helpful
process
to
to
go
through
absolutely.
C
A
A
People
to
contribute
to
calls
in
different
ways-
maybe
not
just
the
people
that
are
that
are
hosting
the
calls
that
we
can
have
someone
who's
responsible
for
notes
someone's
like
taking
that
but
anyway,
this
is.
This
is
a
good
discussion.
I
just
wanted
to
kind
of
get
this
started,
and
maybe
some
other
ideas
in
in
the
Forum
as
we
kind
of
Flesh
this
out,
because
I
think
there's
a
bunch
of
things
here
from
like
how
do
we
have
calls
that
are
efficient?
A
Cool
yeah
just
moving
along
here,
because
I
wanna
we've
got
let's
start
first
with
the
register
new
contribution
reward
scheme,
so
I
think
we
can
maybe
start
with
knowing
that
this
is
in
relation
to
the
the
thing
we're
going
to
talk
about
in
a
second,
the
the
disclosure
but
Augusta.
Maybe
you
can
kind
of
just
walk
us
through
what
this
is,
and
maybe
there's
actually
even
one
also
now
on
nurses
chain.
C
Yeah,
basically,
what
we
deployed
on
mainnet
and
Kenosha
chain
is
a
is
a
scheme
with
it's
a
contribution.
We
want
to
scheme
with
a
with
a
change
on
a
function
that
validate
the
proposal
parameters
and
what
we
are
requesting
here
are
the
number
of
videos
to
be
one
and
the
time
of
the
period
which
it
was
always
zero.
We
always
use
zero,
but
if
you
set
a
time
there,
let's
say
I
know
a
day
you're
going
you're
going
to
be
able
to
claim
your.
B
C
D
C
Those
schemes
on
mainnet
and
Hennessy
chain
I,
so
maybe
the
accurate
proposal
to
register
the
schemes
with
the
same
boarding
parameter
quoting
parameter
hash
that
we
are
using
on
Main
Network
chain
and
the
same
permissions.
So
with
this
it
will
essentially
like
it.
It
will
continue
working
as
a
at
the
contribution
reward
that
we
are
using
right
simply
the
same.
But
if
you
try
to
submit
a
proposal
with
more
videos,
I
mean
it
would
just
failed
right,
So,
eventually
the
patch
that
we
have
on
the
UI.
C
It
won't
be
able
to
render
anymore,
because
the
fix
will
be
on
chain
on
the
smart
contract
level
and
yeah.
That's
essentially
a
fix.
I
think
the
next
step
is
to
create
a
pro
some
media
propose
later
there
to
test
the
rewards
correctly.
We
already
I
mean
on
the
pull
request
where
we
did
the
changes.
We
added
test,
of
course,
and
we
test
it
and
the
tests
run.
So
again.
C
A
C
Yeah,
that's
the
only
one,
thus
yeah
the
way
the
boarding
parameter
works.
The
thing
is
that
this
is
a.
This
is
something
we
are
called.
This
is
a
global
scheme,
which
means
that
I
have
to
manually
register
a
voting
parameters
on
the
scheme
before
yeah
before
setting
the
parameter
from
the
controller
God.
The
way
that
these
schemes
were
designed
is
to
be
used
by
multiple
avatars
right,
actually,
the
only
one
who
is
using
that
who
are
using
that
is
the
Excel.
C
C
Unique
yeah,
but
the
scheme
is
like
a
global
scheme
again,
not
something
that
we
will
use
in
the
future.
Hopefully,
actually
I
can't
wait
to
stop
using
all
all
these
as
all
these
smart
contracts.
They
are
very
old,
not
right
about
us
and
they
were
designed
with
the
a
different
different
structure
in
mind.
So
this
is
very
hacky,
but
but
it
works.
And
again
this
is
just
going
to
be.
C
C
Them
yeah,
so
that
is
crazy.
Like
I
mean
we
knew
that
that
was
that
was
going
to
go
down
eventually,
I,
don't
know
if
they
are
going
to
bring
it
up,
but
now
we
can
see
the
value.
I
know
that
the
Expo-
this
is
very
hacky
and
and
it
might
be
hard
to
use,
but
we
can
still
continue
operation
on
the
governance
level.
C
C
Rest
of
the
dials
that
are
working
enough,
that
if
any
other
Dow
is
using
now
stat,
what's
happened
with
them
like
how
they
can
continue
operating
on
chain
Gracie
right
I
mean
we
can
we
can
go
and
take
a
look
actually
thinking
about
it.
But
if
that
was
operating,
I
didn't
have
a
way
to
follow
up
the
proportions
and
that
are
happening.
I
I
can
go
and
submit
a
rock
proposal
to
to
start
taking
over
the
their
treasure
and
I
can
sell
some
Road
proposals.
At
least
we
have
a.
C
F
Sure,
I'm
in
apple
knowledge
and
I
have
noise,
canceling,
headphones
and
last
time
I
wasn't
called.
They
kicked
me
out
because
you
don't
realize
how
loud
you
talk
through
the
noise
capturing
headphones,
so
I'm
like
one
headphone
off
and
I'm
gonna,
try
and
do
this
anyway,
but
yeah
I
mean
essentially
this
I
mean
I'm,
sure
pretty
much
everyone
read
The
Forum
post.
F
This
happened
back
in
June,
where
I
just
noticed
it's
like
periods
variable
in
the
contributor
reward
scheme
and
ended
up
submitting
a
proposal
that
actually
exploits
it
just
to
see
if,
like
this
was
reflected
in
the
UI,
but
it
was
neither
reflected
on
a
DX
fault
nor
Alchemy,
and
so
the
second
step
is
I
actually
just
went
to
tenderly
and
see
if
the
functionality
was
actually
implemented
at
the
Smart
contract
level.
The
technology
simulation
is
also
in
the
Forum
itself,
and
surprisingly,
it
did
so.
F
What
this
actually
means
is
that
anyone
can
submit
a
proposal
and
just
add
a
hidden
multiplier
to
what
they're
claiming
so,
if
you're
claiming
well
the
most
efficient
way
to
exploit.
This
would
just
be
to
claim
a
small
amount
of
rep
like
a
Discord
boost
and
then
set
like
an
insanely
High
multiplier
like
a
hundred
thousand.
This
is
a
unsigned
integer
128,
so
someone
more
technical
than
me
can
I
think
it
should
be
like
over
a
million.
F
You
can
set
like
very
high
multiplier,
because
you
can
only
put
positive,
integers
and
unsigned
it
and
yeah
so
like
you
can
multiply.
It
multiplies
everything.
So
your
rep,
your
if
your
your
C20
tokens,
you
take
DxD
tokens,
which
is
another
thing
I
found,
but
of
course
the
most
efficient
way
is
like
once
you
have
over
51
rep
you
can
just
the
dial
literally
becomes
an
eoa
right
like
you,
can
instantly
withdraw
and
do
anything
you
want
with
the
funds
and
yeah.
F
What
it
means
in
Practical
terms
is,
of
course
they
could
have
been
able
to
draw
all
funds
from
the
dxtile
treasury,
which
will
probably
also
like
crash
the
dxt
and
swapper
tokens
and
yeah
I
mean
the
probably
wouldn't
have
been
a
way
to
get
it
back
due
to
the
fact
that
we
are
like
truly
decentralized
and
don't
have
like
some
kind
of
backstop
to
like
freeze
a
proposal
or
do
anything
right.
So
yeah
I'll,
mute
myself
and
see
the
reaction
in
the
lounge
to
my
five
minute.
Talk.
A
A
But
I
think
then
there's
the
second
idea
of
like
well.
What
is
this
disclosure
mean
for
Geek
style
security
and
like
how
should
we
be
rewarding
I,
think
Dave
for
finding
this
disclosure
and
how
does
this
kind
of
set
a
precedent
for
what
other
security
disclosures
will
happen
each
now
in
the
future?
So
maybe
that's
where
some
of
the
other
discussion
turned
in
the
Forum
below.
A
A
Cool
I
can
read
kind
of
some
of
the
other
comments
of
you
know.
So
I
guess
the
question
of
how
to
reward
this.
So
we
don't
have
a
bug
value
program
that
I
think
this
would
fall
into.
We
have
started
engaging
with
Hats,
but
the
the
contracts
that
hats
covers
does
not
cover
the
deeked
out,
contrast
itself,
and
so
then
the
question
is
like:
how
should
this
be
dealt
with
and
so
I
think
there
are
yeah
questions
in
terms
of
like
using.
A
Maybe
you
look
at
a
percent,
a
percentage
of
funds
or
something
like
that
and
then
I
think
there's
also
the
point
here:
I
think
from
yeah.
This
is
from
Connor
here
that
you
know.
Dave
is
a
full-time
contributor
in
the
worker
proposal
of
this
period,
including
QA
testing
and
DX
vote.
So
I
think
that
the
discussion,
and
maybe
the
consensus
that
I
got
from
Reading
other
posts
is
that
like
even
if
this
is
given
that
this
is
something
that
should
be
rewarded.
A
There
is
maybe
some
delineation
that
should
occur
between
someone
that
is
a
full-time
attributed
to
teach
down
someone
that
is
like
not
and
when
I
think
of
like
bug,
Bounty
programs,
I,
think.
One
of
the
reasons
you
have
numbers
that
are
high
is
because
you
want
to
encourage
people
to
be
looking
at
and
examining
the
contracts
or
like
following
along
that
they
have
some
like
kind
of
appeal
for
that.
A
A
A
If
you
are
rewarding
contributors
for
bug,
bounties
then
does
that
kind
of
create,
maybe
some
incentive
to
do
something
in
development
that
you
could
then
discover
later
I,
don't
know
just
some
some
kind
of
interesting
comments
here,
sky
that
talked
to
a
a
couple,
different
people
and
have
kind
of
been
figuring.
These
things,
these
things
out,
I'm,
not
sure.
If
there's
something
specific,
you
want
to
say
their
sky
and
then
yeah.
G
A
A
Skye
said
that
one
Community
pay
is
out
200k
for
critical,
bugs
that
were
paid
externally
and
then
John
here
says
you
know.
Maybe
the
the
retrospective
contributor
bonuses
for
shipping
are
actually
like
the
model
that
should
be
based
on
which
those
are
like.
You
know,
I
think
they
were
20K
there,
but
this
could
be
a
multiple
it
could
be
higher
than
that,
but
that
would
be
the
starting
point
there
and
then
yeah
some
good
points,
I,
think
or
quick
takes
here
from
spicy
soup.
I
Yeah
I
think
the
the
only
other
point
I
wanted
to
highlight
from
my
my
post
was
the
the
so
the
delineation,
I
think
is
important.
I,
think
that,
like
there
should
just
be
something
different
for
you
know:
external
people
versus
internal
people,
but
also
even
within
the
internal
group,
I
think
it's
it's
a
difficult
situation.
I
So
it's
sort
of
like
how
do
we
set
a
precedent
here?
I
think
I
think
with
with
Dave's
case.
It's
it's
not
an
issue
of.
You
know
trying
to
discourage
any
future
malicious
actions,
but
I'm
just
thinking
more
broadly.
If
we
set
a
precedent
here,
then
how
it
can
be
move
forward
and
if
there's
sort
of
an
advantage
to
being
a
non-developer
over
a
developer
in
terms
of
expected
payout
over
a
career
at
DXL,
then
I
think
maybe
we
potentially
have
an
issue
in
in
that
regard.
A
Definitely
I
mean
so
I
think
this
is.
It
sets
a
precedent
as
maybe
or
will
be
referenced
going
forward.
Both
in
terms
of
this
is
Deek
style
security
practices
and
is
a
way
of
maybe
encouraging
and
incentivizing
like
additional
disclosure
in
the
future,
because
Deep
South
is
a
responsible
security
actor,
but
it
also
yeah
will
have
some
effect
on
the
internal.
H
So
I
I
have
a
question:
how
do
we
I
mean?
Obviously
we
allow
Anonymous
people
to
be
able
to
report
and
exploit
them.
We
would
be
able
to
reward
someone
totally
Anonymous
right.
That's
like
that's
how
you
do
it.
How
do
we
protect
ourselves
from
like
this
internal
slash
external
thing
like
if,
if
anyone
internally
finds
something-
and
they
know
the
reward,
is
much
higher
or
maybe
you
will
not
get
any
reward
doing
this
as
an
internal?
A
H
Yeah
I
think
we
should
always
expect
things
to
be
found
regardless
internal
or
external,
and
just
have
good
enough
reward.
So
people
actually
reported
I
mean
the
important
thing
is:
is
the
funds
to
be
safe
and
obviously
to
have
have
a
good
enough
process
to
to
not
have
exploits
like
this?
So
yeah
I,
don't
know?
Maybe
Augusto
could
maybe
comment
on
this
and
and
how
how
we
will
not
end
up
I
mean,
maybe
also
this
is
not
related
for
this
here,
but
but
I.
H
H
In
my
opinion,
it's
much
much
easier
people,
don't
get
pointed
out
and
I
think
from
what
I
felt
at
least
they've
got
a
little
bit
of
finger,
pointing
and
a
little
bit
negativity
to
towards
his
side,
even
though
he
found
this
exploit
people
saying
that
it's
part
of
his
job
and
Etc
like
to
not
make
it
complicated
and
get
more
rewards,
just
just
say,
you're
an
on
and
and
report
it
so
I
think
we're
incentivizing
with
all
of
this
discussion.
Incentivizing
things
to
be
and
on
to
be
external,
always
doesn't
matter.
I
Mean
I
I
would
just
push
back
on
that
I.
Don't
think
I
ever
said,
like
my
comments,
are
probably
the
closest
to
referencing,
Dave's
job
and
I
have
never
said
that
it's
part
of
his
job
I
just
said
that
he
as
a
kind
contributor
and
being
working
closely
with
Diego's
vote.
He
had
business
being
in
and
around
those
contracts,
whereas
a
third
party
wouldn't
have
been
paid
to
even
be
looking
at
those
contracts.
So
I
think
there
is
a
difference
there
and
that's
sort
of
all
I've
said
I.
I
H
C
C
I
was
going
to
say,
I
think
part
of
finding
the
vulnerability
was.
It
was
a
Dev
shop
who
it
was
in
depth
show,
but
his
his
usual
work
activities
on
the
Excel
put
him
in
a
spot
where
he
found
it,
and
he
made
an
honest
decision
and
and
lawyer
to
the
Exile,
disclosing
it.
For
example,
he
was
he's
no
identical
person
right
he's
not
involved
in
the
development
process.
So
in
case
that
happened
in
case
I
was
the
one
who
founded
we
just
go.
C
There
make
a
fix,
and
that's
it
right,
but
this
wasn't
under
the
responsibilities
he
could
have
exploited
it
right
anonymously.
This
is
this
is
stream.
This
is
possible,
so
I
think
something
that
we
are
learning
from
here.
Is
that
all
future
disclosures,
or,
or
or
or
advantages
or
or
exploit
that
we
are
going
to
be
receiving?
We
should
encourage
them
to
be
anonymous.
C
What
happened
here?
This
reward
is
going
to
send
the
present
I
think
the
reward
the
assembly,
the
one
that
we
that
we
will
give
to
an
external
person
shouldn't
be
applying
here,
just
because
of
what
I
said
right
that
they
is
a
member
of
this
organization,
and
we
should
reward
this
honest,
this
honest
and
lawyer
and
loyal
behavior,
of
course,
but
we
should
also
again
consider
that
it
was
part.
B
C
C
Anonymous
sorry,
Anonymous
report.
Okay,
this
is
what
what
we
are
paying
today,
because
only
because
he's
a
member
of
the
organization
already
and
part
of
what
bringing
part
of
what
brought
him
to
find
the
to
find
the
vulnerability
was
working
on
DXL.
So
that
is
my
take
I
again.
I,
don't
have
any
strong
opinion
here,
I'm
just
very
happy
that
that
we
was
that
he
was,
he
was
fixed.
We
we
made
on
on
the
development
side
with
Ross
and
I.
Think
John
was
still
involved
at
that
time.
C
Mistakes
on
how
we
should
approach
it
and
fix
it
more
quickly.
Right,
I
I
spoke
to
them.
I
spoke
about
them
there
and
I
said
responsibility,
but
regarding
the
reward
I
think
we
again,
we
should
decide
on
how
much
we
will
pay
to
an
external
Anonymous
contributor,
and
from
that
we
started
these
I
mean
we
started,
saying:
how
much
is
it?
How
much
David
is
going
to
receive
us
as
everyone?
C
A
Cool
I
would
just
like
to
push
or
like
I,
think,
just
having
a
10
number
out
there
I
think
there
needs
to
be
a
little
bit
more
Source
backing
on
that.
The
winter
mute
situation
is
is
very
different
because
you're
negotiating
after
they
already
have
the
funds
so
they're
kind
of
negotiating
in
that
most
bug
body
programs.
That.
A
A
C
And
again,
I
think
we
should
decide
on
how
much
the
pay
will
be
to
understand
contributor,
first
to
an
external
to
someone
that
submit
this
anonymously
and
so
someone
assuming
this
anonymity
right.
So
we
show
you
say
on
that
first
and
then,
from
from
there
on
how
much
we
should
rewarded
and
yeah
then
wintermute.
That
was
a
hack
that
already
happened,
and
it
wasn't
a
negotiation
right.
So
those
funds
were
essentially
already
lost
yeah
it
is,
it
is
similar
but
yeah.
A
And
I
think
just
like
to
me
like
I
think
this
is
because
it
was
reported
and
not
exploited,
right.
I
think,
like
the
immunify
is
one
of
these
programs.
That
has
that
you
can
see
the
different
bounties
that
they
have
here
and
I
think
these
are
pretty
sizable,
but
this
is
also
I.
Think
literally
for
like
maker
Dows,
like
for
dye
itself
and
then
even
the
same
thing
like
these
are
the
Olympus,
which
is
probably
maybe
a
good
comparison.
A
They
have
a
bounty
themselves.
There,
that's
I,
think
it's
like
3.3
million
and
I
think
their
treasury
is
about
like
300
million
there
and
yeah
this
one
smart
tribe
that
isn't
really
around
yet,
but
so
I
think
looking
at
bounties,
as
opposed
to
ones
that
have
negotiated
after
exploits
I
think
are
the
right
manner,
because.
I
Just
on
Sydney's
comment
in
the
in
the
chat
about
what
legal
recourse
from
dick
style
have
I
think
that's
sort
of
Irrelevant
in
the
fact
that,
like
everyone
who
does
exploit
contracts
they're
doing
so
with
the
full
possibility
of
any
legal
legal
recourse,
so
I
mean
it's
sort
of
similar,
similar
situation.
In
that
sense,
like
you,
if
you
decide
to
exploit
it
and
and
keep
the
funds,
then
like
you
you're
at
the
mercy
of
anyone's
potential
legal
recourse.
I
A
I
Especially
in
the
tornado
now
not
really
being
as
Anonymous
the
anonymous
an
anonymity
set
is
much
smaller
I,
don't
know
how
you
can
say
it
doesn't
make
sense
like
there
are
ways
to
find
funds.
It
might
not
be
successful,
but
that's
the
balance
probability
risk
that
you're
taking
so
I
I,
don't
know
what
your
meaning
by
it
doesn't
make
sense.
H
H
H
So
if,
if
we
could
talk
about
that
time,
Dave
goes
Anonymous
actually
goes
through
with
all
of
this
explosive
DxD
crashes,
to
the
ground,
people
panicking
and
and
then
they
could
have
done
like
a
negotiation
and
said,
hey
I
want
to
keep
10
and
we
probably
agree
on
that
right.
This
is
these
are
good
for
Dixie
holders.
Right
I
wouldn't
like
this
to
happen.
I
I
think
it's
also
important
to
say:
okay,
the
fact
that
it's
coming
up
a
lot
that
okay
Dave
could
have
done
it
this
way,
but
like
Dave,
why
didn't
you
do
it
that
way,
and
then
we
can
go
from
there
in
terms
of
okay.
What
benefit
has
Dave
thought
that
he
is
gaining
by
not
doing
it
that
way,
because
if
it
was
clearly
a
superior
decision
on
all
fronts,
moral,
ethical,
financial
and
career,
whatever
then
I'm,
you
know
he
would
have
done
it
that
way.
I
So
what
what
is
it
Dave
that
Drew
you
to
doing
it
this
way?
And
then
you
can
kind
of
see
the
context
of
the
intangible
benefits
of
doing
it.
This
way
versus
the
the
anonymous
way
as
well,
rather
than
us
kind
of
keep
saying
it.
We
could
have
done
it
that
way,
so
it
should
just
be
the
same
as
if
he
did
do
it
that
way
like
otherwise,
he
would
have
done
it
that
way.
If
the,
if
the
outcomes
were
the
same
right,.
F
Yeah,
to
be
honest,
I
didn't
even
think
about
it,
like
I,
think
I
reported
it
to
go
UPS
within
like
half
an
hour,
Finding
and
so
and
I'm
happy
I.
Did
it
that
way
like
I'm,
not
I,
don't
regret
it
or
anything
like
it's
fine
but
of
course,
I
understand
it
will
be
difficult
to
come
to
a
number,
because.
H
F
Yeah
well,
I
mean
I,
guess
the
amount
so
far
are
like
I.
Think
from
104
I
mean
drunk
said
20K,
but
he
didn't
say
what
multiplier.
So
it's
like
a
function
missing
a
variable
I
guess
it's
ranging
from
104
from
class
suggestion
all
the
way
up
to
1.8
on
atoms,
but
I
think
that's
too
high
as
well,
but
yeah
I.
Don't
honestly,
don't
know
I
guess
we
will
never
reach
like
I.
Don't
think
anyone
like
one
is
happy
with
so
it'll
probably
be
like
multiple
pro
ball
move.
A
We
need
a
shelling
point
right.
Isn't
this
precisely
like
the
number
on
that
it's
tough
yeah
I,
think
looking
at
a
couple,
you
know
comparable
if
you
can
find
other
specific
examples
and
using
that
is
the
only
way
to
kind
of
eventually
get
to
a
number
I.
Don't
know
yes,
I
said
I,
don't
think
we'll
get
to
it
on
this
call
right
now,
I
think
it's
very
important.
A
We
do
this
and
I
think,
even
as
the
discussion
is
ongoing
that
we
make
sure
we
like
fully
commit
to
geek
South,
paying
out
this
reward,
as
it
says,
a
lot
about
its
credibility
in
the
security
space
there.
So
unless
there's
anything,
I
know
we're
over
time
here
a
little
bit
so
I
wanted
to
leave
open
any
last
thoughts
or
comments.
Oh
there
we
go
Gusto.
Take
us.
Take
us
home
yeah.
C
C
Of
course,
if,
if
an
option
wins
on
a
polar
right-
and
it
doesn't
mean
that
it's
going
to
be
that
it's
going
to
pass
right
exactly,
they
are
not
very,
very
rarely
every
day,
but
it
can.
It
can
get
us
a
sense
of
where
things
are
going.
So
you
can
still
let's
say
that
Apple
won
for
500k
right.
You
can
still
show
me
the
proposal
for
two
million
dollars.
C
I,
don't
think
it's
going
to
pass.
You
can
submit
as
many
properties
as
you
want
and
later
try
to
find
again.
The
of
course
the
interest
is
to
get
us
higher
reward,
as
he
can
and
I
think
anyone
of
any
ones
of
of
us
will
be
in
that
position
and
I
encourage
all
of
us
to
have
empathy
on
how
on
on
the
position
where
they'll
be
seeing
right
now,
where
he's.
C
Still,
he
didn't
think
he
did
the
right
thing
and
now
we
are
here
trying
to
send
a
public
president
because
it's
going
to
be
a
publication
or
how
we
treat
Anonymous
vulnerabilities.
So
that
is
my
probation:
go
there
and
propose
a
value.
The
reason
behind
that
and
later
we
can
create
a
poll
or
whatever
just
to
get
a
sense
or
where
most
of
the
people
stand
up,
and
then
we
create
proposal.
A
A
H
I
would
take
a
temperature
with
DC
holders
to
obviously
they
they
don't
have
a
reinvoke,
but
they
they
can
voice
their
opinion.
With
that
mileage
of
DxD
they're
holding
right
with
a
snapshot.
I
would
do
that
and
maybe
not
everyone
is
involved
and
no
knows
exactly
what's
going
on,
but
I
think
a
temperature
check
there
would
be
good
and
yeah
and
something
something
more
measurable,
with
maybe
rep
holders.