metadata: {"signature": "0xdd8fcfe978b7325f449a8a2beb5397f5719870d174e3000ae7c84ec9aee422180d0e130c1a138310957f135e78361a90bbb5db8ea8b31fdd7120860c2778f4f91c", "application": {"round": "0xa1d52f9b5339792651861329a046dd912761e9a9", "answers": [{"type": "email", "hidden": true, "question": "Email Address", "questionId": 0, "encryptedAnswer": {"ciphertext": "cSDOnIXvT2q7FIbq/6YabMK6U9Djdn6epvz97RPqUD/h1hHLmx5SnPWRoPbEtCvX", "encryptedSymmetricKey": "5a10597f2a0b68574bf4eb30c2eda7f120a53ec32b1ee0f91168c77be119d314147e2d3d264445ea52881379b56e1f00241f1d9692bcd6a51c99c9ef69b6e057e473fff5cc7e3bcbc25e3312610a02709d864a25cb4b43fb8b1270160ecfae80c49e1c69b0421828fc94dcc578922704ed6adaa47ebbf5caac59da5ce8d3acec00000000000000202478abc98494d0706fd4ecdf5bdb89445830c46cc037c803b9400dbe910234258d219afedd3916bc216ce3ad68967db7"}}, {"type": "link", "answer": "https://github.com/mohasdev/D4C", "hidden": false, "question": "Project GitHub Repo (Not Team Page)", "questionId": 1}, {"type": "short-answer", "hidden": true, "question": "Telegram Handle (you can answer N/A)", "questionId": 2, "encryptedAnswer": {"ciphertext": "aLRZ5fJvHvw5kWeEBQii/+R26jDAAKuLQ7LH7W3ET7Q=", "encryptedSymmetricKey": "6441dd0054ad63e3cf2d15a07e92715751b3a5319fc755c45911b3530fb1f4e87dc7947de4cafdc8af16af35488eb80d97debce37e3c9919910c30996e1c01348f14b1c053bb11112a52dab6a02cd8d0ac00e1ca0b1b2067451ec6ebeb0a028831ede58f481b8970e051e0d277da2640696ff6abb19d99cee9afc18044394c710000000000000020254c5c11ac55b5e3ea5456ab658a46ac56ee1cdaafeb326a1094d1465d2d3bf54de724b5367e6ead3b1f07738536b2ab"}}, {"type": "short-answer", "hidden": false, "question": "Gitcoin Gov Forum Handle (gov.gitcoin.co)", "questionId": 3}, {"type": "link", "hidden": false, "question": "Link to your Public Group Chat (Discord or Telegram )", "questionId": 4}, {"type": "paragraph", "answer": "The project supports the ethereum infrastructure by sending malicious messages over the ethereum network in order to find bugs and security vulnerabilities.\n\nBugs and security vulnerabilities found have an impact on ethereum infrastructure and are reported to execution clients in order to fix them.", "hidden": false, "question": "How is your project in support of or directly advancing the Ethereum Network\u2019s infrastructure? ", "questionId": 5}, {"type": "paragraph", "answer": "N/A", "hidden": false, "question": "If you've participated in past grant rounds, please share any new updates or milestones from the prior months (N/A if you haven\u2019t participated previously). ", "questionId": 6}, {"type": "paragraph", "answer": "We can measure the impact of the project by looking at the bugs and security vulnerabilities found.\n\nActually, the project has identified more than 30 bugs in various execution clients, and one security vulnerability.", "hidden": false, "question": "How do you measure the impact of your project? Please provide examples and/or standard metrics. This might be used in future impact reports ", "questionId": 7}, {"type": "number", "answer": "0", "hidden": false, "question": "Total Prior Funding for the project in USD", "questionId": 8}, {"type": "checkbox", "hidden": false, "question": "Which of the following funding sources do you have? Check all that apply", "questionId": 9}, {"type": "number", "answer": "1", "hidden": false, "question": "Total Team Size", "questionId": 10}, {"type": "number", "answer": "3", "hidden": false, "question": "How old (in Months) is the project? (We will use Twitter, domain registration, github, etc)", "questionId": 11}, {"type": "address", "hidden": true, "question": "If you participated in past grant rounds using a different project payout wallet address, please share it here:", "questionId": 12}, {"type": "paragraph", "answer": "N/A", "hidden": true, "question": "Profiles or socials of other main team members publicly associated with the project (N/A for solo founders): ", "questionId": 13}, {"type": "short-answer", "answer": "Yes", "hidden": true, "question": "Have you read and confirmed your grant abides by the Program General Eligibility Policy? https://gitcoin.notion.site/GG18-Eligibility-cb4a5754c56043d4b3ed34eddbac261c?pvs=4", "questionId": 14}, {"type": "paragraph", "hidden": false, "question": "Anything else you'd like to share about your project, previous work, or other project affiliations? Anything you'd like to add that may help in determining project eligibility?", "questionId": 15}, {"type": "multiple-choice", "answer": "Yes", "hidden": true, "question": "Would you like to opt-in to future messages from Gitcoin for updates, information, and/or interviews? ", "questionId": 16}, {"type": "multiple-choice", "answer": "No", "hidden": true, "question": "Would you like to opt-in to us sharing your information with select third-parties for investment opportunities? ", "questionId": 17}, {"type": "multiple-choice", "answer": "Europe", "hidden": false, "question": "Location/Region where the project is (primarily) based ", "questionId": 18}], "project": {"id": "1:0x03506eD3f57892C85DB20C36846e9c808aFe9ef4:1277", "title": "D4C : Fuzzing the Ethereum Network", "metaPtr": {"pointer": "bafkreigyebkem27pjuu7crlha2csw3dkx4takpyqie4oxp4kql3dpwct2y", "protocol": "1"}, "website": "https://github.com/mohasdev/D4C", "createdAt": 1700574414950, "userGithub": "mohasdev", "credentials": {"github": {"type": ["VerifiableCredential"], "proof": {"jws": "eyJhbGciOiJFZERTQSIsImNyaXQiOlsiYjY0Il0sImI2NCI6ZmFsc2V9..C2Ksk9Gafto8uW_pcrYDk2InphL7DE3vPgFTBUbR4ur1KUBIfp9IpV4d01spOaCGoxqT56WPumXV-3CBn9_KCg", "type": "Ed25519Signature2018", "created": "2023-11-22T10:52:56.671Z", "proofPurpose": "assertionMethod", "verificationMethod": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC#z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC"}, "issuer": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC", "@context": ["https://www.w3.org/2018/credentials/v1"], "issuanceDate": "2023-11-22T10:52:56.671Z", "expirationDate": "2024-02-20T10:52:56.671Z", "credentialSubject": {"id": "did:pkh:eip155:1:0x0DE65caB88C45DeCf8c84dc882fAc9073f216bCA", "hash": "v0.0.0:lrxYo4YKop2gohlC9Vz8MBmcg+wtkjsncJxQjN7QDiw=", "@context": [{"hash": "https://schema.org/Text", "provider": "https://schema.org/Text"}], "provider": "ClearTextGithubOrg#mohasdevs#120682395"}}, "twitter": {"type": ["VerifiableCredential"], "proof": {"jws": "eyJhbGciOiJFZERTQSIsImNyaXQiOlsiYjY0Il0sImI2NCI6ZmFsc2V9..vVGAs7MlNNpMopDEphtMi0nxh8TF5o3RZ5oxIb5qYUMbPIsdsYUglkbvNCdnTOj6LM1FMd5wm8BrHZlSAGeQCg", "type": "Ed25519Signature2018", "created": "2023-11-21T13:30:00.182Z", "proofPurpose": "assertionMethod", "verificationMethod": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC#z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC"}, "issuer": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC", "@context": ["https://www.w3.org/2018/credentials/v1"], "issuanceDate": "2023-11-21T13:30:00.181Z", "expirationDate": "2024-02-19T13:30:00.181Z", "credentialSubject": {"id": "did:pkh:eip155:1:0x0DE65caB88C45DeCf8c84dc882fAc9073f216bCA", "hash": "v0.0.0:jdTZhfy5YRgaoj6VJY+UFVDNZaIuVk7KqNEFPn2qBdo=", "@context": [{"hash": "https://schema.org/Text", "provider": "https://schema.org/Text"}], "provider": "ClearTextTwitter#mohasdev"}}}, "description": "D4C is malicious version of Geth for fuzzing the devp2p protocols of ethereum.\n\n## Problem\n\nIn order to ensure the good running of Ethereum, it is imperative that it remain highly secure. As a large blockchain, Ethereum represents a target for potential hackers.\n\nThe Ethereum network and the different protocols of the devp2p play an essential role in enabling communication between nodes, which is an essential element for the operation of the protocol.\n\nVulnerabilities or errors in this network could cause significant problems. It is therefore crucial to guarantee the maximum security of the network and exchanges between nodes.\n\nTo avoid that, ethereum contributors have developed a lot of tools, including fuzzers.\n\nFuzzer programs are programs that provide invalid, unexpected, or random data as inputs to a computer program. The program is then monitored for exceptions such as crashes, failing built-in code assertions, or potential memory leaks.\n\nThere is a lot of Fuzzer projects built by ethereum community and protocol contributors but one thing we can notice is that there is no fuzzer interacting with the devp2p using an execution client.\n\n## Solution\n\nD4C is a modified version of go-ethereum client who send fuzzed and malicious messages to others clients in order to find bugs and security vulnerabilities.\n\nit can correctly connect to the Ethereum network and perform fuzzing on messages.\n\nThe project was able to find over 30 bugs on various Ethereum execution clients and also a security vulnerability .\n\n\n\n", "lastUpdated": 0, "projectGithub": "mohasdevs", "projectTwitter": "mohasdev"}, "recipient": "0x0DE65caB88C45DeCf8c84dc882fAc9073f216bCA"}}