[SS] DOT #1520 - Audit sponsorship of micro-sr25519 package by Paul Miller (2/2)

OpenSquare

Discussions

13zn...P5ju

Terminated

terminated

Description

https://polkadot.subsquare.io/referenda/1520

The micro-sr25519 package is for the Polkadot ecosystem and is ready for audit.
Paul Miller, the developer, chose a new auditing firm, Oak Security, for this task.
The audit will cost a total of 34,400 USD and involve 5 researchers.
Oak Security provides various security services and is based in Munich.
Paul Miller encourages auditing before using the package widely.
Edgetributor SubDAO manages the audit proposal and will handle payments.
The budget includes a 100 USD refundable buffer for payments.
Payments will be split into two parts during the audit process.

Appendants

2mo ago

Vote #1: FORCE-NAY
https://polkadot.subscan.io/extrinsic/25532020-2

Optionssingle

Votes·7

13ED...KQbF

13EDmaUe89xXocPppFmuoAZaCsckaJy3deAyVyiykk1zKQbF

Abstain

Don't we have a deal with Oak Security which subsidizes ecosystem audits?

1ZSP...vx6w

1ZSPR3zNg5Po3obkhXTPR95DepNBzBZ3CyomHXGHK9Uvx6w

Abstain

Generally supportive, but I'd like to see PAL as the first choice for funding as the bounty dedicated to security audits.

12s6...nE8h

12s6UMSSfE2bNxtYrJc6eeuZ7UxQnRpUzaAh1gPQrGNFnE8h

Nay

Once there is the Polkadot Assurance Legion / PAL bounty, there should be a way on how to use it. The bounty can cover common good tooling like this.

14gM...deVb

14gMJV95zwxUsFEZDSC8mtBVifS6SypKJkfBKANkMsLZdeVb

Abstain

Need more context about bounty and the possible deal with oak security.

167Y...TY9F

167YoKNriVtP4Nxk9F9GRV7HTKu5VnxaRq1pKMANAnmmTY9F

Aye

sr25519 keys will provide more security and will have a gain of speed in the network if used in certain consensus mechanisms. More information on who is doing the audit would be great.