Given the successful completion of OpenZeppelin’s security review of the ink! smart contract language & Substrate’s smart contracts pallet, this community proposal is for the second installment supporting OpenZeppelin’s work. During this engagement, OpenZeppelin identified 11 total issues within the codebase. We are pleased to report that working with the Parity team throughout this process has been fantastic. 

The finalized report can be found on OpenZeppelin’s blog: [https://blog.openzeppelin.com/security-review-ink-cargo-contract/](https://blog.openzeppelin.com/security-review-ink-cargo-contract/)

The ink! team has acknowledged all issues. Two of the ink! issues have been solved, seven of the `cargo-contract` suggestions have been implemented; the rest are actively being addressed.

[Full proposal here](https://docs.google.com/document/d/1GJ2MqMgAUylk0dVfxCp5-1JVd_El3EjgrWLyE3P_iw0/edit?usp=sharing)

Proposal: ink! design security review by OpenZeppelin (treasury proposal 2/2)

Democracy

The proposal seeks funding for OpenZeppelin's security review of Polkadot's ink! smart contract language and Substrate's smart contracts pallet. The review, conducted between January 23rd and February 17th, identified and addressed security vulnerabilities, ensuring the safety of users. Ink! serves as a crucial component for Polkadot parachains, attracting developers and enabling easy migration to parachain runtimes. OpenZeppelin, a trusted security firm, collaborated closely with Parity Technologies, the ink! team, and other contributors throughout the process. The proposal outlines milestone deliverables and payment conditions, emphasizing transparency and accountability.

Local Market Research: Conducting a survey to gather insights on local user preferences and pain points in the Web3 space.

Polkadot Connect Philippines & Local Community: Organizing the first Polkadot Connect meetup and establishing a local community.

Business Development for Polkadot Insider: Connecting local industry players with Polkadot Insider for further market expansion.

Inclusion of Polkadot into Events and Talks: Integrating Polkadot branding into events and workshops hosted by Bitskwela.

Short-Form Content and Community Awareness: Creating monthly localized short-form content to expand Polkadot's presence in the Philippines.

Press Releases: Publishing monthly press releases on Polkadot ecosystem updates.

Whitepaper Simplification (WPS) for Polkadot: Creation of a user-friendly summary of the Polkadot whitepaper translated into local languages.

Dedicated Short Guides: Producing quick 2-minute reads on different aspects of the Polkadot ecosystem.

amount

beneficiary

:
1. OpenZeppelin completed a security review of the ink! smart contract language & Substrate's smart contracts pallet
2. Found 11 total issues 
3. Parity team worked great throughout the process
4. Two of the issues have been solved, seven are implemented, rest are actively being addressed

#24 Proposal: ink! design security review by OpenZeppelin (treasury proposal 2/2)

No Active Proposals