Audit Agency to Construct a Bug Prediction Marketplace for Sensible Contracts

Ethereum-based startup Solidified is growing a decentralized, sensible contract audit platform, aiming to make the method simpler to rearrange and to supply a clear and accountable metric of sensible contract safety. The corporate lately carried out a Seed spherical with Innogy New Ventures to develop a brand new initiative in safety — the Bug Prediction Market.

"Solidified is a longtime, full-service audit platform, having helped safe massive Ethereum tasks resembling Gnosis, Polymath, Bankera and Melonport amongst 50+ others," stated Eduard Kotysh, CEO and founding father of the Solidified platform.

In response to the Solidified ‘one pager,’ the platform has already gathered over 200 audit specialists in its group. The market cap of audited corporations has reached 400,000 ETH.

Bug bounty grew to become a regular technique for sustaining security in a world of technological giants like Google, Fb, eBay and others. As inside safety audits are usually not 100 % environment friendly, the businesses present rewards to their customers who discover and report bugs. “It happens from the truth that audits by a single occasion do not at all times catch all the pieces, so bug bounties are meant as a final line of protection to guard in opposition to that,” stated Nick Munoz-McDonald, who's an auditor with Solidified.

The Solidified workforce is working to develop the primary Bug Prediction Market, the place sensible contract safety specialists can stake on whether or not a extreme vulnerability shall be present in a contract by a sure date. Such customers “are held accountable for securing the code by having staked revenue and popularity within the type of the Stable token,” in line with the corporate’s white paper.

By introducing the Stable token, Solidified permits entry to the biggest group of sensible contract safety specialists and holds them accountable by way of bug bounties and the Bug Prediction Market.

In response to the Solidified workforce, there are three common issues in a wise contract audit that the Bug Prediction Market (and Stable token implementation) is aiming to resolve.

First, doing a low-quality audit job has no penalties: Demand is rising and the skilled degree of an auditor is difficult to confirm. Second, a single auditor or a related group may wait and exploit a bug when the sensible contract is reside. Lastly, there isn't a correct security-confidence metric that determines how safe any given sensible contract is, producing a scarcity of belief in tasks and leaving room for scams.

Solidified goals to supply an alternate resolution to those issues by implementing the bug bounties and the Bug Prediction Market. "On this system, each endorsement is economically backed by auditors. Auditors bid Stable tokens to take an audit job. Those that make incorrect assessments would have their stakes transferred to those that appropriate them throughout bug bounty. The chance concerned in securing sensible contracts could be precisely modeled and capitalized, as a substitute of externalized," explains the textual content of the white paper. In response to the paper, this course of will deliver transparency and accountability to your complete sensible contract audit section.

In response to the venture's roadmap, Solidified goes to launch a beta model of the Bug Prediction Market on its testnet in Q1 2019, accompanied by in depth testing of the security-confidence metric. In Q3 2019, the startup plans to launch the Bug Prediction Market on the mainnet, giving a giant begin to the event of decentralized audits and the bug bounty platform. The token sale has already began and can final till October 23, 2018.

Disclaimer. Cointelegraph doesn't endorse any content material or product on this web page. Whereas we purpose at offering you all essential data that we may get hold of, readers ought to do their very own analysis earlier than taking any actions associated to the corporate and carry full accountability for his or her choices, nor this text might be thought of as an funding recommendation.