BroClan the mulstisig Wallet for the Cardano ecosystem, it is feature complete and live on the testnet today.
To ensure it is safe for everyone to use we need to test and validate the solution.
Create a set of tests that ensure our core logic is not corrupted in the future by an upgrade, validate the correctness of the current approach with testing, bug bounties and reviews.
This is the total amount allocated to BroClan Safe Deployment Support.
Kiriakos [SPEC] [evolute.software]
-
BroClan is already open source under "Mozilla Public License Version 2.0"
-
Multisig wallets are in essence a security feature for the users of a protocol, they allow hardening your security against any number of threats and dangers, including but not limited to stolen keys, coercion, destroyed keys or holder being incapacitated and more.
To provide the kind of reliability and safety our ecosystem is known for we don't just need to have an easy to use multisig wallet, but we need to take all processions needed to make sure it will function in the way intended and no funds can be stolen due to a bug or exploit.
By funding this proposal we can do exactly that.
BroClan can grow to the point where it is a self sustaining business with enough revenue to support its operation and development.
By funding this proposal you enable BroClan to deploy in a safe manner, and act as sold base for upcoming applications and functions.
The project will be a success if we manage to deploy BroClan to mainnet with a high lever of certainty about its correctness.
Ultimately success will be having a million users and 0 funds lost due to a fault in the software.
1) Write an array of unit tests that covers close to 100% of all the usage possibilities
2) Create a companion app that checks if you are on the right site and it has not been tampered with
3) Get a code review of our core logic by well known and experienced developers in our ecosystem
4) Setup a bounty program
As a result of this activities the BroClan software will graduate to mainnet and will be able to be used as a testing ground for multisig DApp connectors and new unconventional other wallet types.
BroClan is already fully functional and live on testnet.
I have separated the workload into distinct milestones with specific goals, and created comprehensive cost analysis for each milestone.
By having clearly stated deliverables we ensure that Catalyst will not need to payout any amount without getting results.
Launch on the Cardano mainet a multisig wallet that offers easy usability and high reliability.
To do that we need to conduct an array of test and set guard rails to protect the end user at the level our ecosystem is known for.
1) Write an array of unit tests that covers close to 100% of all the usage possibilities
Tasks: Integrate lucid simulator, Write unit tests that cover a large number of wallet types and all functions with all parameters for each wallet type, setup GitHub automations to ensure no changes can not be merged if the tests fail.
Timeline: 1 Month
2) Create a companion app that checks if you are on the right site and it has not been tampered with
Tasks: Create upgrade process and versioning schema, Create the companion app and submit it to the Chrome web store
Timeline: 1 Month
3) Get a code review of our core logic by well known and experienced developers in our ecosystem
Tasks: Reach out to well known and capable developers in our space and solicit reviews, take review feedback and make the necessary changes
Timeline: 1 Month
4) Setup a bounty program
Documentation: bounty announcement containing the Bounty limits, and bounty claim process.
Tasks: Advertise Bounty program, review bounty claims, fix issues found in bounty claims.
Timeline: 3 Months
1) Write an array of unit test that covers close to 100% of all the usage possibilities
Deliverable: A library of tests and a GitHub process rejecting any change that will make the tests fail
2) Create a companion app that checks if you are on the right site and it has not been tampered with
Deliverable: A Chrome extension in the Chrome Webstore that checks you are on the right website and it has not been tampered with
3) Get a code review of our core logic by well known and experienced developers in our ecosystem
Deliverable: End document detailing the findings from the reviewers and the steps took to fix the issues found
4) Setup a bounty program
Documents: Announcement detailing the Bounties and the scope of the bounties, as well as instructions for claiming a bounty.
Deliverable: End document detailing the bounties claimed and the steps took to fix the issues found
Blockfrost 2 years = €600
Dedicated Servers = €50/month * 2 years = €1200
1) Write an array of unit tests that covers close to 100% of all the usage possibilities
Effort Estimation: 160 Hours
2) Create a companion app that checks if you are on the right site and it has not been tampered with
Effort Estimation: 80 Hours
3) get code review by well known and experienced developers of our ecosystem
Effort Estimation: 20 Hours
Code audit by Evolute: 8640 ADA
incentives : 5000 ADA
4) Setup a bounty program
Effort Estimation 20 Hours
Bounties: 20000 ADA
Total:
240 Hours * €50 = €12000 ~ 46000 ADA
Bounties and incentives = 25000 ADA
Audit: 8640 ADA
Infrastructure = 7000 ADA
86,640 ADA
Leaving 3,360 ADA for unexpected expenses
bounties not claimed will be returned to the treasury.
Cardano does not have currently a easy to use and high assurance multisig solution this is holding back institutional adoption, but also adoption by people that do not feel qualified to take full custody of their keys.
Multisig gives the user the ability to protect them self's from any danger including but not limited to keys stolen, keys destroyed, coercion or the key holder being incapacitated.
This could represent an enormous amount of liquidity that currently is unable to even consider entering our ecosystem.
And it will definitely offer a much safer experience to people already in the ecosystem.
Leandros Holleman - Project manager, Developer.
https://dev.brothershipool.org
Kiriakos [SPEC] [evolute.software] - Auditor
Possible opening for a communications officer, someone that can ensure we get the best ecosystems devs reviewing out code, and the most people possible trying to claim the bounties.
If someone shows up we will edit the proposal and set duties + ADA allocation for them