### **Expansion of @noble/curves to Polkadot ecosystem through the curations of micro-sr25519 package (now scure-sr25519) development by Paul Miller and dotPAL-funded audit by Oak Security.**

***

**Proposer:** Edgetributor SubDAO
**Wallet address:** 14XNJmoUzkvmh9cYoqG4axBRR4BWzWRbnFP79oiZgKu7V9bz
**Time period:** August 2024 to August 2025
**Total number of hours contributed:** 624
**Requested incentives (for 6 contributors):** 37440 USDT {624 hours \* 60 USD per hour}
**Email:** [shankar@edgeware.community](mailto\:shankar@edgeware.community) {Shankar}
**Telegram Handle:** @gmeister7 {Gagan}

**Summary of the proposal:**

* Technical depth: micro-sr25519 is not a simple library, it's a cryptographic primitive essential to the Polkadot-SDK/Substrate and thus to the whole Polkadot ecosystem.
* Ecosystem unblocker: This enables new tooling (e.g., browser extensions, mobile apps) without relying on WASM bindings or Rust wrappers.
* Strategic value: It lowers the barrier for JS/TS devs to build in the Polkadot ecosystem while improving ecosystem-wide security/performance/resilience/functionalities.
* Uncompensated effort: Edgetributor SubDAO finding the need for the ecosystem, coordinated with Paul Miller, managed auditing, and did this without grants or direct/indirect payments.

***

**Important links:**

* Development Proposal: [https://polkadot.polkassembly.io/referenda/1165](https://polkadot.polkassembly.io/referenda/1165)
* Audit Proposal to dotPAL bounty: [{PAL bounty} Audit sponsorship of micro-sr25519 package by Paul Miller.pdf](https://drive.google.com/file/d/11Z1_08gpfHB6zBAG8XWVALXmRby-wAml/view?usp=drive_link)
* Final report for the audits: [Report for dotPAL bounty: micro-sr25519 (now scure-sr25519) audit by Oak Security](https://docs.google.com/document/d/1UOyHPBcJ9TW-_BiQBmNCG6V45yHEWTJMb2HYaOTRbT4/edit?usp=sharing)
* Final report (forum version): [📦 micro-sr25519 (post-audit renamed to scure-sr25519) is ready to improve ecosystem-wide DevEx, Security and UX!](https://forum.polkadot.network/t/micro-sr25519-post-audit-renamed-to-scure-sr25519-is-ready-to-improve-ecosystem-wide-devex-security-and-ux/14872)
* Monofolder: [Audit of micro-sr25519 (now scure-sr25519)](https://drive.google.com/drive/folders/1RDVg5yx2tsOeDrZw9cnYcxpsA-tPOV1J?usp=sharing)

***

* **Context of the proposal/ how it started:**

  We (Edgetributor SubDAO) came across the noble packages while preparing for [one of our projects](https://polkadot.polkassembly.io/post/2473). We found that there is the ed25519 package which can be used with some patchy ways for our implementation. Then we came across the discussion on a closed issue by ntn-x2 where Paul showed interest in the integration of the sr25519 curve, subject to sponsorship availability. So we followed up with him and he wanted to pursue this further. Considering the impact of Paul’s work on the whole web3 space, we decided to curate his proposal and take care of all the administrative work (as per his request). In this whole process, Edgetributor SubDAO members did not get financially benefited by any means from the entire amount corresponding to [the development proposal](https://polkadot.polkassembly.io/referenda/1165) or the audit proposal (funded by dotPAL bounty) and thus we are requesting retroactively after completing all our duties so far.

* **Importance for the ecosystem:**

  micro-sr25519 is a core cryptography package developed by Paul Miller for sr25519 curve in JS/TS. There is one such package in Rust already developed (since the for origin of Substrate framework) called @polkadot/wasm-crypto based of @w3f/schnorrkel (the actual source of the sr25519 curve).

  Currently the majority of the Polkadot ecosystem protocols use Polkadot-JS's libraries, utilities and helpers which further uses @polkadot/wasm-crypto. This dependency on wasm package might not be an optimal, especially for frontends of different protocols developed using modern frameworks which majorly utilise JS/TS for their stack. Switching to the minimalistic micro-sr25519 package will eliminate inefficiencies introduced due to the translation layer between two or more languages in the same stack.

  The alternative curve utilised in the Polkadot ecosystem called ed25519 already had the JS/TS package (developed by Paul Miller as well) and thus in the Polkadot-JS's common source is utilising it over the wasm/rust alternative.

  Now after the audit of the micro-sr25519 package, Polkadot-JS's suite will shift the dependency from the wasm-crypto package to the micro-sr25519 package:
  [https://github.com/polkadot-js/common/pull/1971](https://github.com/polkadot-js/common/pull/1971)

* **Ecosystem-wide expected outcome:**
  * Better performance, shorter load times for the frontends
  * Better security on a cryptographic level
  * Convenient maintenance/refactorability for Polkadot-JS and similar suites/toolings/libraries/utilities/helpers.
  * Increased network resilience to potential zero-day exploits due to the distributed dependencies
  * Availability of advanced BigInt handling for expert developers
  * Better DevEx while using modern frontend frameworks

* **Acknowledgements:**
  * [https://x.com/Joseptec/status/1860967757233226224](https://x.com/Joseptec/status/1860967757233226224)
  * [https://x.com/D0tSama/status/1840055673352270117](https://x.com/D0tSama/status/1840055673352270117)
  * [https://x.com/og\_tracker/status/1873811703974027739](https://x.com/og_tracker/status/1873811703974027739)

* **Milestones and deliverables:**

| Milestone | Phases                                                                                                                                                                                                                                                                                                                             | Deliverables                                                                                                                                                                                                                                                                                              |
| :-------- | :--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| 1         | Discovery and planning phase (done)                                                                                                                                                                                                                                                                                                | Discovery of the missing component Development scope determination Reach out to Paul Miller for the expansion of @noble/curves Determining the benefits for the expansion to Polkadot eco Follow-ups on deliverables and development costs                                                                |
| 2         | Development phase (done) [https://x.com/paulmillr/status/1860982804756009471](https://x.com/paulmillr/status/1860982804756009471)                                                                                                                                                                                                  | Drafting of OpenGov proposal on behalf of Paul Miller Fiat conversion of OpenGov funding Payment to Paul via Github sponsorships (specifically preferred mode) Follow-ups on payments and development ETAs Notifying community about the development                                                      |
| 3         | Auditing and adoption phase (done) [https://x.com/paulmillr/status/1933450784621859039](https://x.com/paulmillr/status/1933450784621859039)  [Report for dotPAL bounty: micro-sr25519 (now scure-sr25519) audit by Oak Security](https://docs.google.com/document/d/1UOyHPBcJ9TW-_BiQBmNCG6V45yHEWTJMb2HYaOTRbT4/edit?usp=sharing) | Scouting for auditing firms with cryptography experience Offerings comparison and analysis between the firms Proposal drafting (to PAL bounty) for the selected auditing firm Milestone-based payment disbursement to the selected firm Follow-ups on audit publishing and notify Polkadot-JS maintainers |

* **Per-Contributor Analysis:**
  * Average per contributor: 104 hours over 12 months
  * Cost per contributor: $6240 USD
  * Monthly commitment: \~9 hours per contributor
  * Average contributors per task: 2.5 out of 6 total members

* **Contributors:**
  The members of Edgetributor SubDAO involved in the mentioned efforts are as follows:
  * [Shankar Warang](https://www.linkedin.com/in/shankar-warang/)
  * [C. Gagan Babu](https://www.linkedin.com/in/c-gagan-babu-0903b01b6/)
  * [Raj Raorane](https://www.linkedin.com/in/raj-raorane-45b2b4166/)
  * [Rama Vats](https://www.linkedin.com/in/rama-jha/)
  * [Pranav Pawar](https://github.com/pranavcpawar)
  * [Prashant Saundalkar](https://www.instagram.com/prashant_s28/)

* **Previous work:**
  * Volunteered in [JAM Tour Mumbai](https://lu.ma/JAM_Mumbai) & [JAM Tour HongKong](https://lu.ma/JAM_Hong_Kong)
  * AssetHub Hackathon 2025
    * Short videos:
      * [https://x.com/Edgetributors/status/1934169318528553007](https://x.com/Edgetributors/status/1934169318528553007)
      * [https://x.com/Edgetributors/status/1935222996559609916](https://x.com/Edgetributors/status/1935222996559609916)
    * Aftermovie: [https://x.com/Edgetributors/status/1950533021683130389](https://x.com/Edgetributors/status/1950533021683130389)
    * POAP: [https://poap.gallery/drops/190979](https://poap.gallery/drops/190979)
    * Report: [Events Bounty Report: Polkadot AH Hackathon - Goa 2025](https://docs.google.com/document/d/1jZWPSBNixDdrqxkTlQSuNicctRWqoX-cM7L0U1zrNfA/edit?usp=sharing)
  * ETHIndia 2024
    * \#PolkadotAtETHIndia short-form video: [https://x.com/Edgetributors/status/1875028290857287808](https://x.com/Edgetributors/status/1875028290857287808)
    * Aftermovie: [https://x.com/Edgetributors/status/1877044710096720065](https://x.com/Edgetributors/status/1877044710096720065)
    * POAP: [https://poap.gallery/drops/182647](https://poap.gallery/drops/182647)
    * Report: [Events Bounty Report: ETHIndia 2024](https://docs.google.com/document/d/1uYVT1UOrwnMWus64W-Le8rOaNEViOowvieTwr1LIZOg/edit?usp=sharing)
  * Polkadot India Workshops Series - Edition 3
    * Short videos: TBA
    * Aftermovie: TBA
    * POAPs:
      * [https://poap.gallery/drops/196495](https://poap.gallery/drops/196495)
      * [https://poap.gallery/drops/197333](https://poap.gallery/drops/197333)
    * Report: [Events Bounty Report: Polkadot India Workshops Series - Edition 3](https://docs.google.com/document/d/1ouBUFTdORMl734AugygxttLq-Mk4bduxL750Dmvd3ic/edit?usp=sharing)
  * Polkadot India IIT Bombay Workshops
    * Short video: [https://x.com/Edgetributors/status/1889756742218649944](https://x.com/Edgetributors/status/1889756742218649944)
    * Aftermovie: [https://x.com/Edgetributors/status/1898485735197655437](https://x.com/Edgetributors/status/1898485735197655437)
    * POAP: [https://poap.gallery/drops/185245](https://poap.gallery/drops/185245)
    * Report: [Events Bounty Report: Polkadot India IIT Bombay Workshops](https://docs.google.com/document/d/1Yz_jLazpjlg6m_OYYjrnrlgKdkqjGqbkuo7hQriR37k/edit?usp=sharing)
  * Polkadot India IIT Roorkee Workshops
    * [Event-video-IIT\_Roorkee.mp4](https://drive.google.com/file/d/14vAZCN5T4fEVABkWxO41Fe9dpDvolOeM/view?usp=drive_link)
    * [Polkadot India IIT Roorkee Workshops](https://drive.google.com/drive/folders/1i_-P8qTKuzILh7r7BwBf2Wsw_-cQMOVh)
    * POAP: [https://poap.gallery/drop/179140](https://poap.gallery/drop/179140)
    * Report: [Events Bounty Report: Polkadot India IIT Roorkee Workshops](https://docs.google.com/document/d/1S-b3mbstbAZMOgC5iSzZg1Nn6O_Ad9Y0gwRMWJW9w2Q/edit?usp=sharing)
  * Developer & maintainer of Universal Hybrid Substrate Faucet
    * [https://substratefaucet.xyz/](https://substratefaucet.xyz/)
    * [https://polkadot.polkassembly.io/referenda/541](https://polkadot.polkassembly.io/referenda/541)
  * Curator of Paul Miller’s sr25519 package
    * [https://github.com/paulmillr/micro-sr25519](https://github.com/paulmillr/micro-sr25519)
    * [https://polkadot.polkassembly.io/referenda/1165](https://polkadot.polkassembly.io/referenda/1165)

* **Network:**

  Edgetributor SubDAO is a collective of active solo contributors from the [Edgeware DAO](https://edgeware.io/), one of the oldest substrate projects from the Polkadot ecosystem. Edgetributor SubDAO is also the maintainer of the recently treasury-funded [Universal Hybrid Substrate Faucet](https://github.com/edgeware-network/Universal-Hybrid-Substrate-Faucet) project. The SubDAO members bring 3-4 years of Polkadot/Substrate ecosystem experience and expertise from different domains.
  Successfully represented Polkadot at ETHIndia 2024, hosted the Polkadot India IIT Roorkee workshops series, Polkadot India IIT Bombay workshops series, partnered with Pala Labs for volunteering in JAM Tour Mumbai/ HongKong and curated OpenGov proposals like Paul Miller’s sr25519 package, as well as projects such as Rarible, Studio 54, SolidityScan, etc. You will often see some of the Edgetributors SubDAO members active in KusDAO and AAG.

Propose and approve a spend of treasury funds.

## Dispatch Origin

Must be [`Config::SpendOrigin`] with the `Success` value being at least
`amount` of `asset_kind` in the native asset. The amount of `asset_kind` is converted
for assertion using the [`Config::BalanceConverter`].

## Details

Create an approved spend for transferring a specific `amount` of `asset_kind` to a
designated beneficiary. The spend must be claimed using the `payout` dispatchable within
the [`Config::PayoutPeriod`].

### Parameters
- `asset_kind`: An indicator of the specific asset class to be spent.
- `amount`: The amount to be transferred from the treasury to the `beneficiary`.
- `beneficiary`: The beneficiary of the spend.
- `valid_from`: The block number from which the spend can be claimed. It can refer to
  the past if the resulting spend has not yet expired according to the
  [`Config::PayoutPeriod`]. If `None`, the spend can be claimed immediately after
  approval.

## Events

Emits [`Event::AssetSpendApproved`] if successful.

#1751 Proposal: Efforts behind making micro-sr25519 (scure-sr25519) happen

No Active Proposals