Paid Opportunity to Audit the new Peak Vault and MetaMask software

in HiveDevs4 months ago (edited)

Decentralized Audit Approach for Peak Vault Wallet and SDK

BTW have you voted? It still needs more votes to be funded.

image.png

Per our PROPOSAL We have decided to go with a decentralized group consensus approach to the audit of the Open Source Peak Vault Wallet, the MetaMask Snap wallet and the Hive Wallet SDK (which works for all wallets)

A beta version of the wallet can now be downloaded here

WHY TWO NEW WALLETS? - We recommend reading the PROPOSAL... essentially decentralization, competition and promotion of Hive (via metamask)

Why an Audit?

We feel this is simply what should be done on sensitive apps that deal with keys and blockchain transactions. You do audits to give users who aren't technical a way to feel safer. Other ways to build trust are when lots of users and lots of websites integrate the software. Also trust in the team behind the work. But audits also do more...

Some Purposes of our Audit:

  • Identify Blind Spots: Detect areas we may have overlooked.
  • Bug Detection: Find and resolve software bugs.
  • Security Focus: Prioritize security over user experience (UX).
  • User Trust: Build confidence in our software among users.
     

Why Choose Hive Power Users and Devs?

While we welcome other external participants, we believe Hive developers have a significant advantage due to their deep understanding of the Hive blockchain. This approach saves the Hive Ecosystem money and provides a more trustworthy and valuable audit.

Traditional audit companies are:

  • More expensive.
  • Slower to work with.
  • Often unfamiliar with Hive's specifics, being more experienced with EVM and Bitcoin.
     

Scope of the Audit:

  • Peak Vault core: The base layer on which Peak Vault and the MetaMask snap are built.
  • Peak Vault extension: Browser extension wallet.
  • MetaMask Snap: An adaptation of Peak Vault core and extension for MetaMask.
  • Hive wallet SDK: A wrapper to seamlessly address Keychain, Peak Vault, and the MetaMask Snap.
     

Size of the Audit

  • PeakVault - This is the main product and the audit should focus on features that have most security impact. There is very little need to go through some of the UI and layout code.
  • MetaMask - Once you've audited PeakVault you've done about 80-90% of the work to audit MetaMask snap wallet.
  • SDK - A wrapper to the different wallets (Keychain, Peak Vault and MetaMask) that routes requests to the specified wallet. It should make for a quick and easy audit. This is the code that websites would install on their website which would support Vault, Snap and Keychain.

Once you apply for the audit we'll grant you access to the GitLab repositories to check out the code.

Who Qualifies?

  • Highly Technical Individuals or Groups: With a security-focused and detail-oriented mindset.
  • Hive Blockchain Familiarity: Those who understand the workings and security aspects of the Hive blockchain.
  • Ideal Candidates: High-level developers from Hive ecosystem projects.

Special Call Out / Petitions To:

VOTE
Also we'd love your support on the Wallet Proposal 275/day for one year (includes funds for the group audit) we lowered our funding significantly for this year AND have this new big aspirations.
Vote here

Payment Structure:

We will be setting aside tens of thousands of HBD from the proposal for the audit.

  1. Sliding Scale: Based on the scope of the audit (vault, metamask snap), initial and follow-up audits, and the auditor's experience.
  2. Flexible Compensation: We are open to adjusting compensation if unforeseen issues arise and the audit takes longer than expected.
  3. Application: Contact us via PeakD, Sting chat, or Discord to start a conversation. Audits will officially begin once the Wallet Proposal is funded. However let's chat as we may be able to do one or two before depending on price.
  4. Ongoing Engagement: We are most interested in long-term collaboration for future updates, even if new features don't pose security risks it's nice for the community to know that nothing changed in a release that would cause concerns.

cover.png

Why Start Now?

Because it's ready!! The SDK and wallets are functional and ready for use by any Hive App/Website. Core functionality is ready for testing, and an audit will instill trust, encouraging websites and apps to adopt the new SDK and support multiple wallets (Keychain, PeakVault, MetaMask Snap).

How is this Paid?

We are using a good chunk of the Hive proposal to Audit the software now and in the future. The proposal is 275/day. We don't need that much to do the software itself we made the proposal that amount in part with Auditing in mind because we believe it to be important for us and the Hive Community.
Keep in mind the proposal is getting much less funding than one year because it's not funded yet so this also impacts some of our completion time lines.

SUPPORT THE PROPOSAL

Help make make the software better and the audit a reality and vote on the proposal here

Sort:  

Oh right, I somehow completely missed this Proposal

Got my vote now!

image.png

Loading...

This is really an amazing project, I am certainly going to vote the proposal, at least that's is the best way a user like me can support.

This sounds awesome, hopefully you get some good participation! I would love to do it but I don't have the deep technical knowledge on that level, and sadly also not the time.

I wrote a post about proposals last. Now i see how it is done. I will vote after posting this comment.
I wish i am a high tech person, I would gladly audit.

We're happy to have you link the post in your comment so we can see it

I voted for the second proposal. I was already voting for the proposal for upgrade etc

Great stuff! I voted on the proposals you have out there!
I'm going to reach out on Discord about the Audit opportunities.

Please help me with a question.

Am I already voting? Or do I need to press the red button and approve?
I think I have already done this, but I have doubts🤔!

Screenshot_2024-07-24-02-50-25-947_com.brave.browser-edit.jpg

Yeah, you are good. The vote was cast because now the button says "Un-Support"

So everything is correct!👌
Thanks a lot for the help.🙏

@howo @stoodkev @arcange @therealwolf @khaleelkazi @good-kharma @theycallmedan (and team) @gandalf ... the software is ready, the wallet is solid and the proposal is at 21m and getting close to funding. We are wanting to start figuring out who can audit the software and figure out costs.

Please reach out to us or suggest a dev you'd like to see audit the SDK and the software. Feel free to tag them.

No one really comes to mind sadly :/

Well, the idea is that "you" can be one of the auditors. Feel free to tag other Hive devs that you think can be a good fit.

 3 months ago  

You can send me the details

This is a hive-archeology proxy comment meant as a proxy for upvoting good content that is past it's initial pay-out window.

image.png

Pay-out for this comment is configured as followed:

roleaccountpercentagenote
curator-0.0%curation rewards disabled
dev@croupierbot2.5%author of hive-archology
dev@emrebeyler2.5%author of lighthive
author@peakd95.0%

Congratulations @peakd! You have completed the following achievement on the Hive blockchain And have been rewarded with New badge(s)

You received more than 17000 HP as payout for your posts, comments and curation.
Your next payout target is 18000 HP.
The unit is Hive Power equivalent because post and comment rewards can be split into HP and HBD

You can view your badges on your board and compare yourself to others in the Ranking
If you no longer want to receive notifications, reply to this comment with the word STOP

Congratulations @peakd! You received a personal badge!

You powered-up at least 10 HIVE on Hive Power Up Day!
Wait until the end of Power Up Day to find out the size of your Power-Bee.
May the Hive Power be with you!

You can view your badges on your board and compare yourself to others in the Ranking

Check out our last posts:

Be ready for the August edition of the Hive Power Up Month!
Hive Power Up Day - August 1st 2024

Congratulations @peakd! You received a personal badge!

You powered-up at least 1000 HP on Hive Power Up Day and got the biggest Power-Bee!
See you at the next Power Up day to see if you will repeat this feat.
May the Hive Power be with you!

You can view your badges on your board and compare yourself to others in the Ranking

Check out our last posts:

Be ready for the August edition of the Hive Power Up Month!
Hive Power Up Day - August 1st 2024
Loading...