Dyson paid for the bounty in full. If I were on the Chronos team, I would have liked to pay for a bug that could have drained my users’ funds, but clearly, Chronos is more interested in filling their pockets than security.
We do not support Chronos’s STIP proposal due to its request for incentives for a product that has not yet been live and as can be seen in the forum, its controversial stance in the bug bounty program against white-hat hackers chose bug bounty programs. We believe that within the STIP framework, protocols that are already operating on Arbitrum and have a specific user base would benefit more from this incentive program and would be more beneficial to the ecosystem.