PolkSecurity

[developerfred]

PolkSecurity

PolkSecurity is an innovative research project that aims to comprehensively analyze and enhance the security of user-facing protocols in the Polkadot ecosystem, with a specific focus on wallet interfaces. By leveraging advanced modeling techniques and rigorous security analysis, we aim to identify potential vulnerabilities, improve user experiences, and ultimately strengthen the overall security posture of Polkadot wallets.

Grant level

• Level 1: Up to $10,000, 2 approvals
• Level 2: Up to $30,000, 3 approvals
• Level 3: Unlimited, 5 approvals (for >$100k: Web3 Foundation Council approval)

Application Checklist

• The application template has been copied and aptly renamed (project_name.md).
• I have read the application guidelines.
• Payment details have been provided (Polkadot AssetHub (USDC & DOT) address in the application and bank details via email, if applicable).
• I understand that an agreed upon percentage of each milestone will be paid in vested DOT, to the Polkadot address listed in the application.
• I am aware that, in order to receive a grant, I (and the entity I represent) have to successfully complete a KYC/KYB check.
• The software delivered for this grant will be released under an open-source license specified in the application.
• The initial PR contains only one commit (squash and force-push if needed).
• The grant will only be announced once the first milestone has been accepted (see the announcement guidelines).
• I prefer the discussion of this application to take place in a private Element/Matrix channel. My username is: @_______:matrix.org (change the homeserver if you use a different one)

[github-actions]

CLA Assistant Lite bot All contributors have signed the CLA ✍️ ✅

[developerfred]

I have read and hereby sign the Contributor License Agreement.

[semuelle]

Thank you for the application, @developerfred. A couple of initial questions:

• Who is the PolkSecurity team? If you apply as an entity, you have to provide a legal entity name and address and perform KYB.
• Do you have previous experience with this kind of analysis? Anything you can share?
• Do you have any experience with Polkadot and its ecosystem?
• How do you determine an article to be "suitable for academic publication"?

[developerfred]

Thank you for the application, @developerfred. A couple of initial questions:

• Who is the PolkSecurity team? If you apply as an entity, you have to provide a legal entity name and address and perform KYB.

At present, I operate independently while maintaining occasional collaborative partnerships. Should the project
requirements necessitate it, I am prepared to establish a formal business entity.

• Do you have previous experience with this kind of analysis? Anything you can share?

Indeed, I possess relevant experience having developed analytical tools of this nature. In terms of public contributions, I have implemented several projects on Dune Analytics, including wallet validation algorithms. I have also engineered tracking technologies and proof-of-participation systems, such as the Gitcoin Passport and GGQuest Protocol (reputation tracking systems).

• dune.xyz/codingsh
• github.com/codingsh
• https://hackmd.io/@8q55UMhBTyav69G13qA9iw/HJvu1S4dv

• Do you have any experience with Polkadot and its ecosystem?

Yes, my initial contribution to the Polkadot ecosystem, approximately four years ago, involved implementing a curve algorithm. Since then, I have maintained an active presence in the community through conference participation and staying abreast of relevant publications

• How do you determine an article to be "suitable for academic publication"?

When evaluating an article's publishability, I employ several critical criteria: it must demonstrate substantial impact on the target community, present original contributions with proper attribution to referenced research, employ rigorous methodology, adhere to academic writing conventions, and construct evidence-based argumentation. These were the standards I adhered to when publishing articles

[semuelle]

Thanks again for the application, @developerfred, and the effort you have put into it. After discussing with our research team, it was decided that the RFP be closed and that we would no longer seek applications on this topic. I apologize for doing this only after your submission. But I hope you'll stick around and find some other interesting topic to work on that we can fund! Also, feel free to check out other funding mechanisms on our website, polkadot.com or https://www.morekudos.com/.