# ORML Security Bounty Curator

This proposal aims to propose a curator for the [bounty #13](https://polkadot.polkassembly.io/bounty/13).

To recap, bounty #13 allocates up to 100,000 DOT for covering bug bounty rewards for [Open Runtime Module Library (ORML)](https://github.com/open-web3-stack/open-runtime-module-library). ORML is a community-maintained collection of Substrate runtime modules, widely used across the Polkadot/Kusama parachains.

For people whom want to participate this bounty, please study the source code of [Open Runtime Module Library (ORML)](https://github.com/open-web3-stack/open-runtime-module-library) and report vulnerability to Acala Bounty program on [Immunefi](https://immunefi.com/bounty/acala/).

You can find submission guide for Immunefi platform [here](https://medium.com/immunefi/a-hackers-guide-to-submitting-bugs-on-immunefi-1e6b7ada71a9). Please make sure your report meets the bounty requirement stated on the Acala Bounty program page.

A payout will be made by creating a child bounty with payout amount, with a curator address controlled by Acala team or Immunefi team. The child bounty will be awrared to the bounty submitter and the curator fee will be paid to Immunefi as platform fee.

## Proposed Curator

The proposed curator address is: `13f2dPGgzj33ARCdKCQsCZ19JfCDUfsNqoAphVjASCMbZgBc`

This is an anonymous proxy that is controlled by a 3/5 multisig wallet `1puBSM7WmLTBw3WN7Sdw2Gi5e6cRcWsk7gWbocR7rknYWaZ` with signers of:

**Bryan Chen @ Acala**  
Bryan is the co-founder & CTO of Acala as well as the initiator and core contributor of ORML. He is also one of the top community contributors to Substrate and Polkadot.  
Address: `14DsLzVyTUTDMm2eP3czwPbH53KgqnQRp3CJJZS9GR7yxGDP`  
Address can be verified via onchain identity

**Shaun Wang @ Acala**  
Shaun is one of the core developers at Acala, and core contributor of ORML. He is also an active contributor to Polkadot, Substrate and Cumulus.  
Address: `16PNhcMEvGbTYdCht9vLy6gj8qehRehEpb2EfmXB7xShZUVX`  
Address can be verified via Github: https://github.com/shaunxw

**Shawn Tabrizi @ Parity**  
Shawn is one of the Lead Developers at Parity Technologies working on Substrate, Polkadot, Kusama. He specializes in FRAME, Runtime development, and benchmarking.  
Address: `12hAtDZJGt4of3m2GqZcUCVAjZPALfvPwvtUTFZPQUbdX1Ud`  
Address can be verified via onchain identity

**Wei Tang @ Parity**  
Wei is one of the core developers at Parity Technologies. He maintains Frontier, the Ethereum-compatibility layer for Substrate.  
Address: `14ShUZUYUR35RBZW6uVVt1zXDxmSQddkeDdXf1JkMA6P721N`  
Address can be verified via onchain identity

**Shumo Chu @ Manta**  
Shumo is a co-founder of manta.network, the privacy layer for Web3 using zkSNARK. He was serving as research scientist at Algorand and assistant professor at UCSB before Manta.  
Address: `15ynbcMgPf7HbQErRz66RDLMuBVdcWVuURhR4SLPiqa6B8jx`  
Address can be verified via https://github.com/stechu

- This proposal is about finding and fixing bugs in the Open Runtime Module Library (ORML).
- People who want to participate in the bug bounty should study the source code of ORML and report any vulnerabilities they find.
- The proposed curator for the bounty is an anonymous proxy controlled by a multisig wallet with five signers.
- The signers include Bryan Chen and Shaun Wang from Acala, Shawn Tabrizi and Wei Tang from Parity, and Shumo Chu from Manta.
- The curator fee will be paid to Immunefi as a platform fee.

#170 Assign curator for ORML Security Bounty