[PROPOSAL #943][PASSED] Funding ICS with Inactive Validators 3rd Party Audit
EDIT 24/7: Added Multisig address. Authors: Simply Staking TL;DR - Simply Staking will commission Zellic to conduct a third-party audit of the ICS with Inactive Validators feature. This will follow a similar format and process as our third-party audit conducted last year on Replicated Security ( Prop 687 ) and this year on Hydro ( Prop 927 ). Background This proposal aims to use community pool funds to commission a third-party audit for the ICS with Inactive Validators codebase. Starting with the introduction of ICS 2.0 (aka Partial Set Security) in the v17 upgrade , only validators from the Cosmos Hub’s active validator set can opt-in to validate on consumer chains. This signalling proposal enables validators outside of the Cosmos Hub’s active validator set to validate on consumer chains. For more information, we advise you to review the forum post . As we saw in one of our proposals regarding an audit of key Cosmos Infrastructure (ICS) in Proposal #687 , it Is always key to get a second set (or more) of auditors who had no involvement in the designing and building of the code to audit the codebase. This will allow for unbiased vulnerabilities to be disclosed (if…
Excerpt (1197 of 4037 characters). Read the whole post on the forum ↗
Would it be more efficient for the Hub to bulk buy XX amount of audits from a single vendor?
It should drive down the cost per audit, reduce admin overheads related to doing these one-by-one and will probably also give the vendor the opportunity to become more familiar with our overall codebase?
I saw this because it feels like this is the 3rd or 4th such proposal, and while we should fund these, I’m just wondering if we could streamline them for better value
Hey Syed!
I agree that a bulk buy of audits is more efficient than the current iteration. Discussions are being held for this exact purpose however these negotiations take some time and given the urgency of these audits, we have to continue with this format until those negotiations are completed.
Hope this helps!