[IMPACT]
To prove StakingDAO is both built correctly and securely we need to get a full and thorough audit of the platform both front end and back end.
Audits are currently very expensive and has become a bottleneck for people building on Cardano.
We are requesting funding to create a full and detailed guide on our audit process to provide complete transparency with our project during the audit and enable other projects to better prepare.
The goal of this is to be able to share the process with other developers, builders and proposers so they understand the scope and costs associated with a full audit.
This will help other projects plan, prepare and minimize unnecessary spending.
What Will We Create:
- A video series documenting the process and our struggles and lessons learned
- Documentation detailing the process we went through, costs and roadblocks
- Supporting cheatsheets and checklists to help new projects plan and prepare for a full audit based on everything we learn on our journey
We already know that the audit process will be intense and we know there will be hidden costs based on iteration and adjustments needed, revisions if necessary and currently unknown other expenses.
There is no real guide for people to refer to when getting their Dapp or DAO or even contracts audited and so it is hard to project costs, timeframe and scope of works to properly prepare.
If we get this funded we will provide that full and detailed guide other projects can use to help better prepare and understand what it takes to get an audit.
This will speed up the process and reduce costs for all projects that come after us.
We will address the challenge by providing documentation and scope to auditing DAOs and Dapps to enable other community members to better prepare for their audits in the future.
We will make it an easier and cheaper process for other projects to get a full audit by teaching and showing the process we go through ourselves
Having to revise and review audited code based on bugs or security risks will increase costs quickly.
We can turn this to our advantage however by taking these costs on we can create a better quality roadmap for other projects so they can understand the risks and potential extra costs for reviews and updates
[FEASIBILITY]
3 months - Dao Platform Alpha release to testnet
- Audit begins
- Audit documentation and breakdown drafted
6 months - Projected release of DAO on mainnet
- Audit documentation and Breakdown 1
8 months - Full Audit process documentation and debrief released
- Gitbook, cheatsheets and checklists provided
- Videos documenting the process
- Links where necessary to help begin or book and audit
Cost Contributed Towards Audit Process - $15K
Videos of processes, struggles, lessons and more - $5K
Documentation Costs to Draft, Edit & Release - $12K
Detailed and effective documentation will take a lot of time and effort to record structure and iterate, including videos and website
Rhys - SPO, Plutus Pioneer, Ux Ui
https://www.linkedin.com/in/rhys-morgan-pt/
Edi - SPO, Software Developer, Plutus Pioneer
https://twitter.com/smoll_catto
Anthony - Web Developer, App Developer, Ux Ui
https://www.linkedin.com/in/anthony-riera-96aba3133/
[AUDITABILITY]
Our Github for the StakingDAO will feature a project Kanban board showing the current, next and completed steps in our process.
We will measure progress on this proposal in tandem with the projected rollout of the DAO platform
We aim to have weekly updates to the documentation based on how the Audit is going, challenges faced and reports from the audit
Once the DAO platform passes its audit, we will allow a maximum of 2 weeks to provide a full draft of the Doc and then a further month to provide a full release of the Audit process
Hitting major milestones in the process will come with lag indicators that we are on schedule with ~1 week lag time for videos and documentation.
A full audit completed for the DAO and full documentation and cost breakdown for other projects to refer too as part of their own roadmap to help understand the scope of Audits for smart contracts, Dapps and DAOs
This proposal is connected to the StakingDAO proposal,
We have already built a lot of these tools however and will be able to work towards an audit regardless of funding for our other proposal
