metadata: {"signature": "0x31317e513329493edd72d1f066d28e3214fcbde67a7a54b714571c8539db7ebb5d254310f79a82470ebbc2b9e2abfa4e95f1d519b998294dc94d0f62f4ccae0b1b", "application": {"round": "0xaa40e2e5c8df03d792a52b5458959c320f86ca18", "answers": [{"type": "email", "hidden": true, "question": "Email Address", "questionId": 0, "encryptedAnswer": {"ciphertext": "PeB7C2yBzUHt8aEETLdsDsh/0vBQW0uj6PecOt69jbSDqWF5JmVJUJlECwqmJLCG", "encryptedSymmetricKey": "caab6c57f76e5f327f8ff02b9f06b08bdfe40ec16cc1bba6ca5f5df9359b09f3ec075cb2ac819d39bb188f63bcf4840341198d5fb543a920dd0a366087525ab35dcb06cc619e51c61f6e54e4617910741a8b27fe585cb6ab6d63183e9557c991f93f68eeb9140d1d7c3790abea1b3858ed6aee5e7caad60c3493c52cf11c3a3b0000000000000020c63b7071efe63b90a143bd4a0e7ea69d6c91f494cf8a32799f5bdb2f50fcf1471082cb1cadaeb5dfb18b59648370b7a9"}}, {"type": "short-answer", "answer": "None", "hidden": false, "question": "Previous project funding sources (VC, grants, token sales, etc)", "questionId": 1}, {"type": "number", "answer": "0", "hidden": false, "question": "Total prior funding for project in USD", "questionId": 2}, {"type": "number", "answer": "4", "hidden": false, "question": "Total team size", "questionId": 3}, {"type": "number", "answer": "12", "hidden": false, "question": "How old is the project? (Months)", "questionId": 4}, {"type": "address", "hidden": true, "question": "If you participated in past grant rounds using a different project payout wallet address, please share it here:", "questionId": 5, "encryptedAnswer": {"ciphertext": "T5mvG9MWLmzJs3yk7jmVcPKUNw2VreCor76kZOue8pM=", "encryptedSymmetricKey": "bb7d8af67859c01b4f4fedddf7bc262f55de6cf28d5add36a23ae6fcb449cacbce6b740d514cacd1a6a0dd054d0ab101b5ab05bdf5961439a6b7a7fb03c5267eb937c2afe8bcec2aa3b00059fd6343f562b4bd1c98cbb899ac7962fc066d6caea294002e8ef417f3f41d55e63e0efdc2f7cfdb4ea711240f0901991d2a276ae20000000000000020ce86e322b2a5b82c55708b3fa0aaeed481e339440a26f16fe0c3555433351745dc698114cb8d40e464789f4dd0adfb8f"}}, {"type": "paragraph", "hidden": false, "question": "Profiles or socials of other main team members publicly associated with project", "questionId": 6}, {"type": "multiple-choice", "answer": "Yes", "hidden": true, "question": "Have you read and confirmed your grant abides by the Program General Eligibility Policy? https://gitcoin.notion.site/Gitcoin-Grants-Beta-Round-Eligibility-b7fca9fd3c26450b89ded11caaa6497f", "questionId": 7}, {"type": "paragraph", "answer": "Our project, \"Web3Bugs: Unraveling Exploitable Flaws in Smart Contracts,\" corresponds with the Community & Education round eligibility criteria in the following aspects:\n\n\n## Improving the Web3 Ecosystem \n\nThe project aims to improve the Web3 ecosystem by offering invaluable resources for developers and security analysts. By simplifying the comprehension of exploitable vulnerabilities in smart contracts, the project contributes to the overall security and stability of the Web3 environment.\n\n## Project Age\n\nWith the project in progress for over 12 months, it fulfills the age requirement.\n\nWe initiated the project in April 2022. We submitted our preliminary findings to [CESE 2022](https://www.youtube.com/watch?v=q9-xxy43BnM&t=3100s&ab_channel=Blockchain-Web3MOOCs) in August 2022. Our final findings were submitted to [ICSE 2023](https://conf.researchr.org/track/icse-2023/icse-2023-technical-track?#event-overview) in September 2022 and accepted in December 2022. We published our dataset in February 2023.\n\n## Proven Track Record and Long-term Goals\n\nThe project displays a proven track record in the Web3 domain through conducting thorough analyses of exploitable bugs and categorizing them based on their properties. Our publicly available [dataset](https://github.com/ZhangZhuoSJTU/Web3Bugs) has received over 1000 stars on Github. Furthermore, the project has garnered substantial media attention, including:\n+ [Interviewed](https://medium.com/code4rena/demystifying-exploitable-bugs-in-smart-contracts-with-zhuo-and-brian-f8649d4c427f) by [code4rena](https://code4rena.com/)\n+ Highlighted by [Week in Ethereum March 4, 2023](https://weekinethereumnews.com/week-in-ethereum-news-march-4-2023/), in the security section\n+ [Youtubed](https://www.youtube.com/watch?v=gPgMW_kheFU&ab_channel=FuzzingLabs-PatrickVentuzelo) by Fuzzing Labs\n+ Introduced by many widely promoted tweets, including [bytes032](https://twitter.com/bytes032/status/1630864096047296512) and [Patrick Collins](https://twitter.com/PatrickAlphaC/status/1634058759201869824)\n\n\nOur long-term objectives encompass increasing awareness of exploitable bugs, fostering the advancement of sophisticated vulnerability detection methods, and championing human participation in the auditing process. The project also highlights recent milestones, such as expanding the list of exploitable bugs, developing well-adapted classification standards for smart contract bugs, and offering an extensive compilation of exploitable bugs and security analysis tools.\n\n## Others \n\nOur project aligns with several examples of eligible projects, such as:\n\n+ __Providing educational resources__: We offer a comprehensive compilation of exploitable bugs, vulnerability detection techniques, and publicly accessible security analysis tools, serving as a vital educational resource for Web3 developers and security analysts.\n+ __Creating content__: The project offers a publicly accessible dataset for exploitable smart contract bugs, encompassing bug descriptions, classifications, and instructions for utilizing diverse security analysis tools. This contribution enriches the educational resources within the Web3 ecosystem.\n+ __Protecting users__: By emphasizing the significance of exploitable bugs and the necessity of human involvement in the auditing process, our project helps protect users from exploitable vulnerabilities in smart contracts, ensuring a more secure Web3 environment.\n+ __General Eligibility Policy__: In addition to satisfying the specific Community & Education round eligibility criteria, our project also complies with the Program General Eligibility Policy, ensuring that it adheres to the overall requirements of the funding program.", "hidden": true, "question": "How does your project fit into the Community & Education round eligibility criteria? ", "questionId": 8}, {"type": "paragraph", "hidden": false, "question": "If you've participated in past grant rounds, please share any new updates or milestones from the prior months", "questionId": 9}, {"type": "paragraph", "answer": "Related Publication in ICSE 2023, a flagship software engineering conference: https://github.com/ZhangZhuoSJTU/Web3Bugs/blob/main/papers/icse23.pdf ", "hidden": false, "question": "Anything else you'd like to share about your project, previous work, or other project affiliations? Anything you'd like to add that has not been covered?", "questionId": 10}, {"type": "multiple-choice", "hidden": true, "question": "Does 50% of your team reflect the diversity of the community your project serves with a particular emphasis on including women, Black, Indigenous, and People of Color (BIPoC), individuals with disabilities, and members of the LGBTQ+ community?", "questionId": 11, "encryptedAnswer": {"ciphertext": "RwgVp3v29IvuqFJ6baG+g80WNM/JPVpC4ggMKETZDbs=", "encryptedSymmetricKey": "4acc7cbeda479e7d0f65986898ad95fcdaedcd48bced231ef405f9536d3f7ffb47bb58c104062f778219a56b04fb1516f9c68ce6e61aa7271dab4c944f3bf3935b7c534bd3bf610d36013260a3f7fa8fd0a4265b71d3778c999ebe002a64938f0078cbdda964ce8d350ba1ec46e126aef776b26d8578c8979482a77ae88f51b80000000000000020ed7256f95c775bfe425a6ea1c0d66d0fc04a7b02f252e6dff7bcb66093f37d4cebd928f6eb1b4a581d826a8f54436e8b"}}], "project": {"id": "1:0x03506eD3f57892C85DB20C36846e9c808aFe9ef4:821", "title": "Web3Bugs: Demystifying Exploitable Bugs in Smart Contracts", "metaPtr": {"pointer": "bafkreicunionj2xx5clauujr4dja2h67fog7h4wxnxx6cdmonmtb6vde6a", "protocol": "1"}, "website": "https://github.com/ZhangZhuoSJTU/Web3Bugs", "createdAt": 1682110487673, "userGithub": "ZhangZhuoSJTU", "credentials": {"twitter": {"type": ["VerifiableCredential"], "proof": {"jws": "eyJhbGciOiJFZERTQSIsImNyaXQiOlsiYjY0Il0sImI2NCI6ZmFsc2V9..eRZnuaZQ0nogpe2yV5eP64SPLbxHJQywsvMVQR1MY9SdbXofZnFVLboa3uUwB27FsH976B9ncorz9U3UlRH4CA", "type": "Ed25519Signature2018", "created": "2023-04-21T20:57:35.260Z", "proofPurpose": "assertionMethod", "verificationMethod": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC#z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC"}, "issuer": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC", "@context": ["https://www.w3.org/2018/credentials/v1"], "issuanceDate": "2023-04-21T20:57:35.259Z", "expirationDate": "2023-07-20T20:57:35.259Z", "credentialSubject": {"id": "did:pkh:eip155:1:0x5dAdf8d579F9F1a47F180De6542BCc44da0EC94a", "hash": "v0.0.0:2D9dDbwf6IQwely20vwUviScsdDomxHBG3frwRJfbRM=", "@context": [{"hash": "https://schema.org/Text", "provider": "https://schema.org/Text"}], "provider": "ClearTextTwitter#i2huer"}}}, "description": "## Project Summary\n\nOur project, \"_Web3Bugs: Demystifying Exploitable Bugs in Smart Contracts_\", aims to provide a valuable resource for Web3 developers and security analysts by facilitating their understanding of exploitable bugs in _real-world_ smart contracts. \n\nBy persistently conducting in-depth analyses of exploitable bugs sourced from reputable auditing platforms and categorizing each bug based on its characteristics, we aim to elucidate the features of exploitable bugs and raise awareness that a significant portion of such bugs remain undetected by existing automated analysis tools. This initiative will inspire practitioners to develop more refined and context-sensitive automatic semantical oracles for identifying these exploitable vulnerabilities, thereby driving the advancement of cutting-edge automated or semi-automated smart contract analysis tools.\n\n## Impact\n\nThe influence of our project will be considerable for the Web3 community, as it will promote secure smart contract implementation practices and encourage the creation of safer smart contracts. By highlighting the importance of exploitable bugs, advocating for advanced vulnerability detection techniques, and emphasizing the need for human involvement in the auditing process, our project will play a pivotal role in fostering Web3 security education.\n\nBy presenting a comprehensive collection of exploitable bugs, accompanied by explanations and classifications, as well as a thorough list of vulnerability detection techniques and publicly available security analysis tools, our project will serve as an essential educational resource for Web3 developers and security analysts. Additionally, we aim to accelerate the development of automatic semantical oracles (by providing a comprehensive dataset of exploitable bugs), which will enhance smart contract security and reduce the risks associated with exploitable vulnerabilities.\n\nIn conclusion, our project will bolster the robustness and stability of the Web3 ecosystem, ultimately benefiting users and stakeholders in the decentralized finance space.", "lastUpdated": 0, "projectTwitter": "i2huer"}, "recipient": "0x5dAdf8d579F9F1a47F180De6542BCc44da0EC94a"}}