💔 [Analysis] The Broken EIP Security Incentive - Dean Eigenmann

After the delayed Constantinople fork, security researcher Dean Eigenmann explains the misaligned incentives for in finding and reporting bugs. Namely, the bulk of any social and economic gain to be had from disclosing flaws is not present during early phases of development when finding and patching flaws is most opportune. Instead researchers and the wider community are incentivized to wait as long as possible to disclose when a successful launch matters more than before and considerable social attention has accrued. To fix this, Dean suggests introducing an exponential decay on the bounties offered to make early discovery and disclosure more profitable.