Balancer

Intro

Following the developments after the DNS hack reported here, and given the precedent set by BIP-443 and BIP-455, this proposal seeks to refund affected users by the frontend attack with 25% cut.

Motivation

After refunds of BIP-443 and BIP-455, only 1 (one) user came forward publicly reporting the loss of funds due to the DNS attack. There could potentially be others that might be waiting for the formation of the volunteer committee described on BIP-433 and/or the public announcement of a claiming window.

Given the past refund allocations and known wallets impacted, the expenditure shouldn’t be greater than 34k, even though the program would still have 110.578,95 USDC provisioned. We find it would be better to put this program behind us and therefore suggest using the same deadline in the [BIP-445] regarding the Boosted Pools incident.

Specification

This proposal will override the specifications on BIP-443, and shall be voted as follows:

1. Affected users will have until Dec 25th, 2023 to post on this thread (or by any means reach out to the Balancer Maxis), being this a final deadline to ask for refunds in a final payment batch coming January.
2. To verify claims, the Balancer Maxis will cross-reference the user’s reported transactions with the spreadsheet made public in the incident post-mortem.
3. Users will be asked to verify wallet ownership with a signed message on chain agreeing to the 75% cut and payment in USDC at the time of the attacks (precedent set by BIP-443).
4. Final numbers will be posted in January’24 on a new BIP authorizing payments.

If passed, this proposal shall be posted by our Marketing team on Discord and Twitter, as well as any interested media outlets, for max comms amplification regarding the deadline.