Something changed in @TermMax security surface today.
On August 17, TermMax App V2 was added to its Immunefi bounty scope. That made me revisit another number on TermMaxFi’s homepage: a 93% DeFi Security Score, described as matching Aave V3.
The score matches. The bounty economics do not.
For a critical smart-contract bug, TermMax pays 10% of directly affected funds, capped at $50,000. Aave uses the same 10% formula, but caps the reward at $1 million.
A 20x difference in the ceiling.
That is not evidence that Aave is 20x safer. It shows that a security score and the economic incentive for external researchers measure different layers.
TermMax has also paid 19 reports, with four assets currently listed in scope, including App V2. Its web/app scope treats connected-wallet attacks that modify transaction parameters or substitute contract addresses as critical.
So the metric I would watch as $TMX scales is not 93% alone.
I would track how bounty ceilings evolve with funds at risk, how much of the live product surface is in scope, and how quickly validated issues get fixed.
“Same security score” does not mean “same security market.”
As TermMax grows, should the bounty ceiling grow with it?
#TermMax #termmax
On August 17, TermMax App V2 was added to its Immunefi bounty scope. That made me revisit another number on TermMaxFi’s homepage: a 93% DeFi Security Score, described as matching Aave V3.
The score matches. The bounty economics do not.
For a critical smart-contract bug, TermMax pays 10% of directly affected funds, capped at $50,000. Aave uses the same 10% formula, but caps the reward at $1 million.
A 20x difference in the ceiling.
That is not evidence that Aave is 20x safer. It shows that a security score and the economic incentive for external researchers measure different layers.
TermMax has also paid 19 reports, with four assets currently listed in scope, including App V2. Its web/app scope treats connected-wallet attacks that modify transaction parameters or substitute contract addresses as critical.
So the metric I would watch as $TMX scales is not 93% alone.
I would track how bounty ceilings evolve with funds at risk, how much of the live product surface is in scope, and how quickly validated issues get fixed.
“Same security score” does not mean “same security market.”
As TermMax grows, should the bounty ceiling grow with it?
#TermMax #termmax
