funded

Defending Cardano Staking Ecosystem

$35,393.00 Received
$39,500.00 Requested
Ideascale logo View on ideascale
Community Review Results (1 reviewers)
Addresses Challenge
Feasibility
Auditability
Solution

Stakeboard will foster trust in staking by disarming malicious Stakepool Operators (SPOs) and frauds posing as SPOs and Cardano projects.

Problem:

Fraudulent and malicious stakepools pose an urgent and growing threat to Cardano's staking ecosystem and network security.

Yes Votes:
₳ 251,099,486
No Votes:
₳ 2,208,982
Votes Cast:
1640

This proposal was approved and funded by the Cardano Community via Project F7: Disarm cyber disinformation attacks Catalyst funding round.

  • download
  • download
  • download

Detailed Plan

Staking-Related Scams Erode Decentralization:

The security of Cardano's delegated proof-of-stake consensus fundamentally depends upon delegators staking across a broad distribution of stakepools. If trust in a great number of stakepools is eroded or destroyed by a general lack of trust in Cardano's staking landscape, and delegations concentrate more and more in a small number of trusted pools, the ability and incentive for remaining trusted pools to attack the network increases. And if such a trend towards centralization were to continue unabated, Cardano participants would (knowingly or not) be entrusting the security of the network to a small number of stakeholders who may be able to selfishly benefit from an attack on the system.

People will doubtless point out Cardano's prodigious number of more than 2,000 stakepools as proof we're nowhere near this potentially disastrous scenario. But currently an estimated 11% of staked ADA is being staked on Binance Exchange alone. And more than 50% of all delegated ADA is currently delegated to just 25 multi-pool owners operating in a handful of countries. So while few (if any) of us believe the Cardano network is in imminent risk of attack, we at Stakeboard still believe trust in a broad array of globally distributed Stakepool Operators (SPOs) needs to remain front and center in the Cardano community's list of priorities: As Cardano's decentralized applications (dApps) come to change the world, increasing pressure to weaken and destroy Cardano will come from the outside, so we must remember the incredible things built on Cardano are only as stable and strong as the consensus mechanism underlying them.

Moreover, because our central mission at Stakeboard is to promote transparency, trust and decentralization in staking, we see what bad actors on Cardano are already doing to undermine these principles: Imposter stakepool operators spinning up fraudulent pools to impersonate trusted SPOs and development teams; scammers posing as SPOs on fraudulent social accounts; SPOs creating pools to mimic pools participating in Initial Stakepool Offerings (ISOs).

Our team is already building tools and protocols to disarm these threats as they emerge. For example, in mid-November, a bot named Alice, developed by Stakeboard's engineers, immediately spotted the launch of several suspicious, 100% margin Stakepools bearing the names of prominent Cardano projects[1]. Among these were Hosky[2] and Nami Wallet[3], so our team reached out to the founders of these projects, asking them if the new Stakepools were associated with their projects. They let us know they were in no way associated with the pools, and their subsequent Tweets to their communities elicited tens of thousands of impressions.

This alert from Alice likely saved unwitting delegators from losing a large amount of block rewards to scam stakepools, and may have also stifled further operations of the bad actors that launched these pools. We know fraudulent Stakepools can have serious consequences: The scam pools mimicking Meld's Initial Stakepool Offering (ISO) stakepools were able to siphon off tens of thousands of ADA from the Meld ISO. And attacks that successfully exploit the good will of Cardano delegators not only lead to centralization and fuel the growth of parasitic business models within Cardano's staking landscape. They could also be used by powerful adversaries to sew FUD and mount more systematic and systemic DDot attacks. For these reasons, our team at Stakeboard is obsessed with achieving our core mission: Fostering the growth of transparency and trust in Cardano's staking community, and increasingly Cardano's decentralization as a result.

Stakeboard: A Social Staking Marketplace

Truth is not just the absence of falsehood. Experiencing the "truth" is having something true confront you in its authenticity. And that being said, one of the biggest things lacking in the current Cardano staking landscape is a marketplace where all honest Stakepool Operators (SPOs) can stand on an equal footing to present their unique value propositions to the delegator community.

Stakeboard will provide this fair marketplace for SPOs - a place where delegators can view and stake to any stakepool on Cardano. At the same time, Stakeboard will fostering the growth and distribution of trust in the Cardano staking landscape via some key tools and protocols:

Stakepool Verification - the Basis of Trust:

The Stakeboard team has identified a reliable way of verifying stakepool ownership: Thanks to CIP (Cardano Improvement Proposal)-022, SPOs can prove ownership of their stakepools by proving possession of their special, private keys which stakepools use to sign blocks they've verified on the blockchain. And they can do this without actually sharing these private keys with Stakeboard or anyone else. This smart innovation is the cornerstone of the trust our team means to build on Stakeboard, because you can't even begin to build trust in a marketplace unless you know for a fact the vendors own what they're selling. On Stakeboard, only when a SPO verifies their ownership of their pool (or pools) will they be able to create a profile for their pool - effectively bringing it to market. And by virtue of this filter, users will at least be able to know on Stakeboard that the value propositions, the social accounts, the stakepool website url, etc., are coming from the legitimate owner of the stakepool they're researching.

Trust, but Verify:

Stakeboard can verify with a high level of assurance whether or not an individual claiming to own a stakepool actually owns it. But just because a SPO goes through this basic verification process, doesn't mean they won't behave maliciously or fraudulently. For example, a true owner of a stakepool might nonetheless falsely claim association with a prominent Cardano project or person. As described above, this is already happening to a growing degree, so our team has devised a protocol by which we can look at a number of on-chain and off-chain metrics to determine with pretty high assurance if these kinds of association claims being made by SPOs are legitimate or fraudulent.

Similarly, a malicious SPO could make other false claims to attract delegators. For example, an SPO could falsely claim their stakepool runs on renewable energy, or that they donate some of their profits to charity. And while the Stakeboard team will not independently verify these specific claims, Stakeboard will encourage a culture of "trust, but verify" in staking, and provide our users with the tools they need to do their own research: If a delegator is uncertain about whether a stakepool's specific claims are true, then Stakeboard's messaging application enables them to ask the SPO for supportive documentation. And Stakeboard will provide verified stakepools with the ability to upload documents to their profile that evidence the truth of their value propositions.

Education:

Besides the above kinds of scenarios, there's another kind of situation where the trust of delegators in promoting decentralization is be eroded: Delegators who don't understand the metrics that govern block rewards often have unreasonable expectations of what kinds of rewards they should receive as delegators, and they frequently become frustrated with the experience of staking directly to a smaller stakepool.

For example, a delegator accustomed to gaining a regular yield on a CEX may not understand that staking to a lower saturation stakepool will likely result in more sporadic, uneven delegation rewards that nonetheless equal roughly the same percentage yield over the long term. Such a delegator will have unreasonable expectations about the kind of rewards they should receive each epoch, and may go back to staking on a CEX after a couple epochs of not receiving any block rewards. They'll likely become convinced there's something "wrong" with their choice of stakepools, and become intimidated.

In this case, and all cases involving less savvy delegators, a critical component of furthering decentralization is education about what different stakepool metrics mean. For this reason, our team at Stakeboard not only plans to provide delegators with the stakepool metrics they should in staking. And we don't just want to post blog entries about what various staking metrics mean, in hopes that Stakeboard users will read and remember them. We plan to take education one step further by incorporating it into the platform - embedding it seamlessly into the stakepool search, research and staking process. The goal is to always have educational info one click away, right where it's relevant, as users do things on Stakeboard, but to also make the presence of this info unobtrusive to users who don't need it.

Alice, the Staking Detective:

There's one more common scenario where bad actors and a lack of transparency in the staking landscape can erode confidence in decentralization: Malicious, or otherwise unprincipled SPOs sometimes make changes to their stakepool metrics (most commonly to their pledge and/or margin) which negatively impact their delegators' block rewards. At times, there are legitimate reasons why a SPO would change these metrics, and a great feature of Stakeboard is that it enables SPO's to notify their delegators of important updates (like their need to change pool parameters and why they need to do so). But in many cases, changes SPOs make seem to be aimed at exploiting or gaming their delegators to obtain a greater share of block rewards.

In any case, at Stakeboard we believe delegators should be kept informed about any changes made to the stakepools they're delegated to. Moreover, we believe one reason why delegations are relatively concentrated in larger, more established stakepools and on centralized exchanges is the vast majority of delegators can't closely monitor their staking positions. And this is one of the main reasons why we created Alice. In addition to sending out alerts about the creation of potential scam stakepools, Alice scans Cardano for a variety of questionable and suspicious SPO actions that could negatively impact delegator rewards. And with the launch of Stakeboard, Cardano delegates will be able to opt into email notifications from Alice that alert them about any questionable or suspicions taken by stakepools they're delegating to.

Alice has already demonstrated its usefulness by individuating SPOs trying to impersonate MELD [1], Nami wallet developers [2] and the HOSKY team [3]. (Seel links below.)

1. https://twitter.com/Stakeboard_/status/1460921011268898817

2. https://twitter.com/berry_ales/status/1460917711920414723?t=ZUp5ULmisx75eVc_hBhRFg&s=09

3. https://twitter.com/Stakeboard_/status/1460582521436057604

Summing Up …

At stakeboard, we're currently working on tools and features to …

  • Verify individuals own the stakepools they claim to own;
  • Disarm would-be scammers from being able to use fake websites and social accounts to defraud Cardano users;
  • Provide Cardano users with the tools they need to determine the whether SPO claims are true;
  • Prevent delegators from falling victim to fraudulent SPOs impersonating trusted SPOs, Cardano projects and people;
  • Protect delegators from having their rewards siphoned off by unprincipled SPOs;
  • Educate the Cardano community about the value propositions small stakepools are offering, and all the aspects and dimensions of staking on Cardano.

By addressing these key areas where disinformation can and is undermining trust in Cardano's staking landscape, we hope to play a valued role in furthering Cardano's decentralization and securing its consensus protocol far into the future. That said, we hope you'll trust us enough to join us on our journey and support us in our mission.

Related Proposals

If you want to lean more about Stakeboard and the other features we are building, check out the following proposals:

Connect with us

Stakeboard Team

Giovanni - Co-Founder

  • Senior Software Engineer - DevOps Advocate - Plutus Pioneer and Stake Pool Operator
  • <https://www.linkedin.com/in/giovannigargiulo/>

Sebastiaan - Co-Founder

  • Entrepreneur and government contractor for software integrations and solutions - Plutus Pioneer
  • <https://www.linkedin.com/in/sebastiaan-m/>

Anthony - Head of Business Development

  • Entrepreneur with 7 years business development experience, 15 years sales experience, primarily in financial services and real estate.
  • <https://www.linkedin.com/in/anthonycapitan/>

Trecy - Head of Design

  • Passionate about creativity and design processes, I have been working for several years to design aesthetic and functional user experiences.
  • <https://www.linkedin.com/in/trecy/>

Floriaan - Communication Manager

  • Support, Community & Social media experience in IT, Design and Blockchain industries.
  • <https://www.linkedin.com/in/floriaan-mekes-96b510127/>

Matteo - Product Manager

  • Master degrees in Government Science - Product and Project Manager - Blog writer on blockchain ecosystem.
  • <https://www.linkedin.com/in/matteo-mannucci-201b12168/>

Roadmap

We've been hard at work on Stakeboard since August, and despite having to fund the project's development until now from the team's savings and on a volunteer basis, we can proudly say we've made huge progress: Platform design is complete and several core functions are built.—As of late November, SPOs can now verify ownership of their pools and create Stakeboard profiles. Nami wallet integration has been completed and delegating directly from Stakeboard has been enabled. And we recently launched the project's landing page at stakeboard.net.

Unfortunately though, we're quickly approaching the point where our abilities to self-fund the project will be depleted, which is why being awarded Catalyst funds for our Fund7 proposals will be critical to sustain project development.

That being said, Here's our Roadmap:

August 2021

  • Proof of Concept (completed)
  • CICD & infrastructure (completed)
  • Concept design (completed)

September 2021

  • Stakepool listing page (completed)
  • Stakepool verification (completed)
  • Feature design (completed)

October 2021

  • Implement feedback from users (completed)
  • Iterate through the design (completed)
  • Notification center - Alice: Pool updates on telegram (completed)

November 2021

  • Notification center - Alice: Pool retirement, Twitter integration (completed)
  • Launch Stakeboard.net (completed)
  • Catalyst Fund7 Proposals Submission (completed)

December 2021

  • Notification Center - Alice notifications on Stakeboard (yet to be completed)

January 2022

  • Notification subscription
  • Discord integration
  • Telegram integration
  • Add various sources combined aggregation

February 2022

  • Public ISO notification integration
  • Setup Public API
  • Add various sources combined aggregation
  • Create publicly available endpoints
  • Design impersonator pool identification/alert automated protocol

March 2022

  • Create publicly available endpoints
  • Alice delegation-specific Stakeboard notifications
  • Alice delegation-specific email notifications
  • Further refinement of Alice notifications
  • V2 launch

Key Performance Indicators

1 month

  • 10k Twitter impressions in a month
  • Flag possible Stake Pool Impersonator within 24h from a pool launched or renamed

3 months

  • 50k Twitter impressions in a month
  • Reduce by 50% the number of Stake Pools created by impersonators
  • Reduce by 10% the amount of ada staked on impersonator's stakepool
  • Provide Specific Stake Pool updates to 100 delegators registered on stakeboard

6 months

  • 100k Twitter impressions in a month
  • Reduce by 15% the amount of ada staked on impersonator's stakepool
  • Automate, where possible the flagging of possible Stake Pool Impersonator

Cost breakdown:

+ Cloud Hosting: $ 500

+ 1 part-time, front-end engineer 3 months $ 13.000 (13 weeks * 20 hrs./weeks * $50/hr.)

+ 1 full-time, back-end engineer 3 months $ 26.000 (13 weeks * 40 hrs./weeks * $50/hr.)

Community Reviews (1)

Comments

Monthly Reports

We are currently working on integrating Alice into stakeboard with notifications as in shown in the screenshot. After we have finished that we will start building the assigned messages to delegator and follower specific messages. The focus is to wrap this up in the first week of April before we head to the discord integration part. Twitter integration is already fully functional and operational.

As for this proposal as well I would like to change the payment address for the remainder of the funding since Giovanni the co proposer of the project is no longer with the team. Kriss has been informed about this and also sorted a transfer of ownership from Giovanni.

I would like this address to be changed to: addr1qyxzdr9w6hdsl0rs5c4u83ahrvzf8d9kve2xrctyzwgt2q5qjcyalacs9avx4y6kgl4lwwk8veyunr7wynnkaqkjevzqddu0ej

Disbursed to Date
$35,393
Status
Still in progress
Completion Target
4/30/2022
Comments 0

Login or Register to leave a comment!

Alice is now fully functional and integrated into Stakeboard and can be managed by following Stakepools and subscribing to pool updates.

We are almost finished with the integration of the Discord bot to push pool updates on Discord.

Disbursed to Date
$35,393
Status
Still in progress
Completion Target
4/30/2022
Comments 0

Login or Register to leave a comment!

We are adding a few new features to Alice which include fact checking, a fund 8 winning proposal had finished a fact checking api build by Loxe Inc on the Cardano blockchain which we will start integrating into Alice. This project is presented by Matthias Sieber.

We are hopefully able to release a test version early week 21.

Disbursed to Date
$35,393
Status
Still in progress
Completion Target
6/20/2022
Comments 0

Login or Register to leave a comment!

As written in why the project is a bit delayed we have decided to collaborate with Innovatio and integrate Alice into their platform to give information about the Stakepools on the network as information sharing with a wide reach.

Disbursed to Date
$35,393
Status
Still in progress
Completion Target
7/31/2022
Attachment(s)
Comments 0

Login or Register to leave a comment!

close

Playlist

  • EP2: epoch_length

    Authored by: Darlington Kofa

    3m 24s
    Darlington Kofa
  • EP1: 'd' parameter

    Authored by: Darlington Kofa

    4m 3s
    Darlington Kofa
  • EP3: key_deposit

    Authored by: Darlington Kofa

    3m 48s
    Darlington Kofa
  • EP4: epoch_no

    Authored by: Darlington Kofa

    2m 16s
    Darlington Kofa
  • EP5: max_block_size

    Authored by: Darlington Kofa

    3m 14s
    Darlington Kofa
  • EP6: pool_deposit

    Authored by: Darlington Kofa

    3m 19s
    Darlington Kofa
  • EP7: max_tx_size

    Authored by: Darlington Kofa

    4m 59s
    Darlington Kofa
0:00
/
~0:00