# FIP 78 - Annual Security Budget Allocation

**URL:** <https://gov.frax.finance/t/fip-78-annual-security-budget-allocation/1548>\
**Category:** FIPs\
**Created:** [June 8, 2022, 8:22pm UTC](https://gov.frax.finance/t/fip-78-annual-security-budget-allocation/1548 "2022-06-08T20:22:52Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![samkazemian](https://yyz1.discourse-cdn.com/flex031/user_avatar/gov.frax.finance/samkazemian/32/45_2.png) [@samkazemian](https://gov.frax.finance/u/samkazemian)\
**Post date:** [June 8, 2022, 8:22pm UTC](https://gov.frax.finance/t/fip-78-annual-security-budget-allocation/1548/1 "2022-06-08T20:22:52Z")

</div>

**Authors**  
Frax Core Team

**Summary**  
Allocate 1.2m FRAX to the core treasury for use on quarterly security audits.

**Background and Motivation**  
FRAX has had impeccable security to date in its 17 months being live. We have had 0 critical vulnerabilities where the protocol or any user has lost funds to a vulnerability/bug. This is because the core team takes security extremely seriously and has recurring audits scheduled with some of the top firms in the industry such as Trail of Bits. All of the protocol audits are published in our documentation as they become available:

> **[Audits](https://docs.frax.finance/other/audits)**

These audits typically take 2-4 weeks depending on amount of engineers involved and go through protocol code extensively. We would like to allocate 1.2m FRAX to pay for annual security budget and recurring, quarterly audits by top firms. It is likely that the total amount will not be used over 12 months which will roll over to the next 12 month period. In the event that the budget is used in under 12 months due to the size of FRAX’s core protocol contracts+code, we will propose a new budget allocation so that governance must approve it.

Seeing as how security and top audits are one of, if not most, important aspects of building a reputable and great defi protocol, we assume this will be an easy pass. For comparison, this is the annual budget for all security related audits+expenses which is less than ~5 days of protocol revenue. This small expenditure is one of the most important expenses of any defi project.

**PROPOSAL**

**For:** Approve 1.2m FRAX to core treasury for security audits+pentesting

**Against:** Do nothing

---

<div class="post-metadata">

**Author:** ![Mark11](https://yyz1.discourse-cdn.com/flex031/user_avatar/gov.frax.finance/mark11/32/21_2.png) [@Mark11](https://gov.frax.finance/u/Mark11)\
**Post date:** [June 9, 2022, 9:08am UTC](https://gov.frax.finance/t/fip-78-annual-security-budget-allocation/1548/2 "2022-06-09T09:08:55Z")

</div>

Makes sense - let’s do it

---

<div class="post-metadata">

**Author:** ![sparkes25](https://yyz1.discourse-cdn.com/flex031/user_avatar/gov.frax.finance/sparkes25/32/392_2.png) [@sparkes25](https://gov.frax.finance/u/sparkes25)\
**Post date:** [June 9, 2022, 4:45pm UTC](https://gov.frax.finance/t/fip-78-annual-security-budget-allocation/1548/3 "2022-06-09T16:45:12Z")

</div>

seems like a bill we just have to pay.

---

<div class="post-metadata">

**Author:** ![WillCertiK](https://avatars.discourse-cdn.com/v4/letter/w/a587f6/32.png) [@WillCertiK](https://gov.frax.finance/u/WillCertiK)\
**Post date:** [July 26, 2022, 1:53pm UTC](https://gov.frax.finance/t/fip-78-annual-security-budget-allocation/1548/4 "2022-07-26T13:53:49Z")

</div>

Building a reputable and great defi protocol requires rigorous and recurring audits with multiple firms. To this end, [Certik.com](http://Certik.com) - a global leader in code audits - will elevate FRAX security to the next level. Let’s connect soon on telegram [Telegram: Contact @willnyc](http://t.me/willnyc)