Skip to content

Commit

Permalink
Update and rename cgp-0158.md to cgp-0157.md
Browse files Browse the repository at this point in the history
  • Loading branch information
BenAtClabs authored Dec 12, 2024
1 parent 5a88aac commit a497cb3
Showing 1 changed file with 15 additions and 12 deletions.
27 changes: 15 additions & 12 deletions CGPs/cgp-0158.md → CGPs/cgp-0157.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,12 +15,15 @@ date-executed:

### Status

- DRAFT = Feedback collection
- DRAFT

### Proposal Description
An initiative to subsidize the cost of security services for Celo ecosystem partners. This will involve collaboration with leading security vendors to provide on-chain monitoring, automated security testing, brand protection, security architecture reviews, anti-money laundering (AML) compliance, and software supply chain security. We aim to leverage industry-leading practices and provide tools that empower partners to adopt and improve their security postures, reducing the risk of exploits that could impact the broader ecosystem.

Funding Request: 768,500 Celo ( $580,000 at 90 day average of celo:usd on 12/05/2024 = .675 )

All unused funds will be returned to the community fund.


## Background

Expand All @@ -35,7 +38,6 @@ Reduce the financial barrier to implementing robust security measures
Protect user funds and maintain ecosystem trust
Enable projects to focus resources on development while maintaining security


## Milestones & Verfication

Phase 1: Program Setup (Q1 2025)
Expand All @@ -62,19 +64,15 @@ Phase 4: Evaluation and Planning (Q4 2025)
- Sustainability planning
- Renewal proposal preparation


Key Performance Indicators:
- Number of Partners Onboarded: Successfully onboard at least 10 partners within the first three months.
- Reduction in Vulnerabilities: Reduction in the number of vulnerabilities identified by scanning tools by 30% by the end of the project.
- Competitive Bug Bounty Participation: At least 20 bug bounty submissions, with 5 critical vulnerabilities addressed.
- Partner Satisfaction: Gather feedback from partners; aim for an average satisfaction score of 7/10 or higher.
- Security Maturity: Increase in overall security maturity scores from a scale of 1 to 5 for at least 70% of the participating projects, with a target of moving projects from an average score of 2 to an average score of 4 by the end of the program.

## Proposed Changes
### Transactions
- Unique Transaction Approval of 768,500 cUSD to Multisign ```0x35ff861a0b6215CeC71EA282B0D32AfefA661795```
- Initial transfer: 384,250 Celo (Upon approval)
- Second transfer: 384,250 Celo (End of H1 2025, subject to milestone completion)

## Budget

Expenditure Breakdown ( amounts in cUSD )
- Smart Contract, Wallet, and WebApp Security Review 120,000
Expand All @@ -89,17 +87,24 @@ Expenditure Breakdown ( amounts in cUSD )
- Program Administration 10,000
- Total 580,000 cUSD

## Payment
- Initial transfer: 384,250 Celo (Upon approval)
- Second transfer: 384,250 Celo (End of H1 2025, subject to milestone completion)

## Proposed Changes
### Transactions
- Unique Transaction Approval of 768,500 Celo to Multisign ```0x35ff861a0b6215CeC71EA282B0D32AfefA661795```

### Json Script
```
[
{
"contract": "GoldToken",
"address": "0x471EcE3750Da237f93B8E339c536989b8978a438",
"function": "increaseAllowance",
"function": "Approve",
"args": [
"0x35ff861a0b6215CeC71EA282B0D32AfefA661795"
"580000000000000000000000000"
"768500000000000000000000"
],
"value": "0"
}
Expand All @@ -121,8 +126,6 @@ Security controls may not improve security posture at maxiumum efficiency.
CELO equals total grant (contract sends 1 CELO when beneficiary registers a vote signing key)
Risks.

All unused funds will be returned to the community fund.

This proposal does not deploy or upgrade contracts or change network parameters so represent minimal risk to the network.

This proposal does transfer funds from the Community Fund. The major risk is an incorrect destination address that would leave the funds in the wrong account, or an incorrect releaseOwner on the ReleaseGold account. So long as those are correct, if any other parameter is incorrect, the contract can be revoked, the funds returned, and the grant reissued.
Expand Down

0 comments on commit a497cb3

Please sign in to comment.