{"signature": "0xc71349f65066d594d9462bb33a10e94f7057ebd7c5bba623812dc28e2547c59e4f41beba9211a0bf0da59014d35ad057c4302425c2ffa381b866e9c90fa7c9f01b", "application": {"round": "0xd2d99614321becd7cd0636715bbb4c94968e6271", "answers": [{"type": "email", "hidden": true, "question": "Email Address", "questionId": 0, "encryptedAnswer": {"ciphertext": "EuhH3rc0MiMqP3J6hHZmuDvOfDDIrcCTKzazb/7Pprm3cXcqVhU7tIA7mTnL4nj1", "encryptedSymmetricKey": "b2bc8e50b017c902c8e1fc0ea03fe95b3f140744d753e9df35c2e5546c47d07e7dc0be39bc22b4c2190e3d3177c1401130e80a7477f10bb9d4a4a98c1b51df0d3facfc1abc9a42473b17c13b3148ecd70c216165184c32ee5ca078852c65c498daa88199658c368665c9fd131b84aad6f3d16f3ebf6e65437e0bce6bccb4b05d000000000000002089429d589e977657d11c75090ec42bc231ee3badd51f1ffcdde32ae9df52b365165460ac8ab7ddb5f8aa7c77e78386a8"}}, {"type": "short-answer", "answer": "valerio_eth", "hidden": true, "question": "Telegram Handle", "questionId": 1}, {"type": "short-answer", "answer": "https://github.com/turtleshell-xyz", "hidden": true, "question": "Project GitHub Repo", "questionId": 2}, {"type": "short-answer", "hidden": true, "question": "Link to your Public Group Chat", "questionId": 3}, {"type": "short-answer", "answer": "GG21: Thriving Arbitrum Summer ; Token Engineering QF Grants Round", "hidden": true, "question": "Have you participated in a previous Gitcoin Grants Round? If so, please name the rounds or link the builder profile associated with previous rounds.", "questionId": 4}, {"type": "paragraph", "answer": "TurtleShell has built multiple open-source tools, frameworks and libraries. Lets go by them one-by-one:\n\nCircuit Breaker SDK: as part of having authored EIP-7265 (Circuit Breaker Standard), we are actively building and advancing towards the further adoption of this standard as a proven measure to improve protocol security on EVM. Besides helping to improve the problem of a lacking smart contract defense mechanisims against hacks, we also lower with this SDK specifically the barrier of adopting them. Smart Contract Developers can import circuit breakers with this SDK to their projects to easily integrate them to their logic.\n\nSecurity Monitoring Tools: as a complementary feature to the SDK, we have built an open-source dashboard, that you can easily spin up as a react project and plug it to your deployed and verified contracts that have incorporated Circuit Breakers. This especially solves on the one side the problem of lacking open-source and free security monitoring solutions (there is plenty paid once, but almost 0 free ones), AND giving non-technical people the ability to see and understand what is happening and have a sense of what the current protocols health looks like.", "hidden": true, "question": "Provide a brief overview of your tool, library, or framework. What specific problem or inefficiency in the development process does it address?", "questionId": 5}, {"type": "paragraph", "answer": "1. It lowers the barriers for ethereum developers to adopt  advanced low-level security measures\n\n2. It allows decision makers of protocols to have advanced data insights on protocol health via complexity abstraction via the open-source dashboard\n\n3. Specific case studies on several historical exploits have proven its effectivenss. For deeper research resorurces, I will provide several links:\n\nhttps://cointelegraph.com/learn/erc-7265-eth-token-standard-for-defi-security\n\nhttps://www.youtube.com/watch?v=exyQFCKDOyM&ab_channel=Unchained\n\nhttps://gov.curve.fi/t/proposal-improving-protocol-security-on-chain-realtime-hack-prevention/9441 ", "hidden": true, "question": "How does your project reduce development barriers, improve efficiency, or enhance the security of Web3 projects? Please provide specific examples or metrics if available.", "questionId": 6}, {"type": "paragraph", "answer": "All tools and frameworks are live and in it`s alpha version, with several updates and new features getting added continuously (last feature added today: FreezeAssetModule).\n\nTurtleShell has received support trough several partnerships with different ecosystems, especially Arbitrum, who has supported us with a Grant. This has helped us reach further out and gain great feedback as well as usuage.\n\nFrom the data on npmjs.org , we can see that our SDK has been installed and added to smart contract projects several hundred times and there is to this day an average of 2-3 installments per week (which is a lot for such a low-level niche tool). \n\nhere the data on that (https://www.npmjs.com/package/@markeljan/circuitbreaker)\n\nand npmjs is just the version for hardhat users, this tool has been optimized for foundry and more than 90% of developers using our tools are foundry devs.\n\nWe estimate having between 15-20 smart contract developers per week installing and using this SDK.\n\nwe estimate that 20% of those moving with their projects to production make use of the open-source dashboard as well.", "hidden": true, "question": "Describe the current usage and support for your tool within the developer community. This could include GitHub stars, downloads, or testimonials from developers.", "questionId": 7}, {"type": "paragraph", "answer": "The grant funds will be used to incentivize and retroactively reward our open-source contributors, who have been the main reason this project exists and is still alive and being used.\n\nFurthermore we have a couple specific technical updates and features we want to build out based on the feedback we received. GG22 will help us fund those efforts as well as later on needed security audits for those updates and features.", "hidden": true, "question": "Outline your project's roadmap and how the grant funds will be used to achieve your development goals.", "questionId": 8}, {"type": "paragraph", "hidden": true, "question": "For any project deploying smart contracts on blockchain networks, please list all your deployer addresses and their corresponding blockchain networks. Use this format for each entry: [deployer_address], [chain_id]—for example, 0x123abc..., 42161 (This represents a deployer address on the Arbitrum network). Please include a separate line for each unique deployer address and blockchain combination.", "questionId": 9}], "project": {"id": "0xbc0c38f75ec02f37af3c6cc5acef9951e0f69c0b49a26e9bf680b1fbcf4f76cb", "title": "Turtleshell", "logoImg": "bafkreidhnuloaiylzmovoiduvn5u46bzdos7a3lcl6ykfn3ufbwmdetf3a", "metaPtr": {"pointer": "bafkreiaqyiyymuw6kvq53ur7dus34ihzxvs4opi2qxd56kik7n22ndw2xi", "protocol": "undefined"}, "website": "https://turtleshell.xyz", "bannerImg": "bafkreihal3r3pmvhbapqzural56ypulfhhkyr5b54dlfcnrz2uqief2f3q", "createdAt": 1713199683739, "userGithub": "valeriofichera", "credentials": {"github": {"type": ["VerifiableCredential"], "proof": {"jws": "eyJhbGciOiJFZERTQSIsImNyaXQiOlsiYjY0Il0sImI2NCI6ZmFsc2V9..oHd7Ry8EWhVRW97zWnsNsYFMIwbjnAa9t6ekpuA0v5v03SWFh4lm6TaZ8AzUUnyATaSnAi0_McKDAYSynl1ECw", "type": "Ed25519Signature2018", "created": "2024-04-15T16:47:38.896Z", "proofPurpose": "assertionMethod", "verificationMethod": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC#z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC"}, "issuer": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC", "@context": ["https://www.w3.org/2018/credentials/v1"], "issuanceDate": "2024-04-15T16:47:38.896Z", "expirationDate": "2024-07-14T16:47:38.896Z", "credentialSubject": {"id": "did:pkh:eip155:1:0x61319Eb36d29781586988fC8dD0A78dBfE201cef", "hash": "v0.0.0:xwy0nPbfb+C4uwlMgPqWvwXw1TQiSBpArRGXaef6eMQ=", "@context": [{"hash": "https://schema.org/Text", "provider": "https://schema.org/Text"}], "provider": "ClearTextGithubOrg#turtleshell-xyz#78494380"}}, "twitter": {"type": ["VerifiableCredential"], "proof": {"jws": "eyJhbGciOiJFZERTQSIsImNyaXQiOlsiYjY0Il0sImI2NCI6ZmFsc2V9..TLxmKPHoXqb7HCMGBwjN1FPIKyr69FxE1m1oq3tUu2BHE8YTeROcIbDKc4kfVypt1ptBPtAwTBfi_PIvd8AvCw", "type": "Ed25519Signature2018", "created": "2024-04-15T16:47:55.118Z", "proofPurpose": "assertionMethod", "verificationMethod": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC#z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC"}, "issuer": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC", "@context": ["https://www.w3.org/2018/credentials/v1"], "issuanceDate": "2024-04-15T16:47:55.118Z", "expirationDate": "2024-07-14T16:47:55.118Z", "credentialSubject": {"id": "did:pkh:eip155:1:0x61319Eb36d29781586988fC8dD0A78dBfE201cef", "hash": "v0.0.0:oz0KwaLR0jBRUP1XEFRf0DE1c2AIJYKfY9Vq+fIUgWU=", "@context": [{"hash": "https://schema.org/Text", "provider": "https://schema.org/Text"}], "provider": "ClearTextTwitter#TurtleShell_xyz"}}}, "description": "Imagine:\n\nOne day you wake up and your protocol got exploited …maybe you heard of ERC-7265 as attempt to end that quite real nightmare.\n\nWith TurtleShell we are aiming to give every Smart Contract holding Assets the necessary bolster to prevent unintended outflow.\n\non-chain realtime hack prevention\nwe are building on-chain firewalls\nWhat is an On-Chain Smart Contract Firewall?\nSmart contract hacks have been plaguing DeFi protocols, bridges, and more.\n\nToday, in order to defend themselves, protocols perform audits, open bug bounties, and implement monitoring.\n\nAll of these steps are absolutely crucial. Nevertheless, whenever a vulnerability is discovered by an attacker, most exploits can drain funds in a very short period of time, sometimes even within a single transaction. To prevent these hacks from happening, we need an on-chain tool.\n\nYou can think of the Smart Contract Firewall as an additional layer of security for DeFi protocols.\n\nOur Firewall is a set of Solidity Smart Contracts that allow you to:\n\nDefine critical parameters for your protocol (e.g., TVL) and track these parameters over time.\n\nDetect that a transaction (or multiple) is causing the protocol to operate outside its normal activity (e.g., unusual liquidity outflow, indicative of a potential hack happening).\n\nImplement a set of protective measures, including transaction blocking, protocol pausing, fund freezing, or controlled fund withdrawal, before the transaction is committed and funds exit the protocol.\n\nThe Firewall provides a way to detect abnormal changes in your protocol directly on-chain, that could be indicative of a hack. That means that you can act upon abnormal activity, whenever it occurs, directly on the blockchain.", "lastUpdated": 0, "projectGithub": "turtleshell-xyz", "projectTwitter": "turtleshell_xyz"}, "recipient": "0x6EB137332eA93F960F9D3052b7497852D7164F9c"}}