{"signature": "0x1dd83ab3d23b99a2679bc012e5523b7a6ff7c27ec0073f5be351460f3e38483f65d0f7eb97b98571779a50f606f65ac6a55b714f1636ed02fc63e8aec1651bc71c", "application": {"round": "0xc1cffd1845deee83ab44cae123738a854593bcd2", "answers": [{"type": "checkbox", "answer": ["Developer Tooling", "Core Infrastructure"], "hidden": false, "question": "How does your project contribute to the advancement of the Arbitrum ecosystem?", "questionId": 0}, {"type": "paragraph", "answer": "Our project, TurtleShell, has been actively involved in enhancing the security and resilience of the Arbitrum ecosystem. As a current grantee from the Arbitrum Foundation, we have made significant contributions to the foundational infrastructure, improved developer efficiency, and supported the adoption of novel applications within the Arbitrum network.\n\n**Previous Work:**\n\n**1. Free-of-Charge Security Services:**\n- **Supporting Arbitrum Projects:** We have provided free-of-charge security services to over 25 projects integrated with Arbitrum. These services include security audits, real-time monitoring, and the implementation of our on-chain smart contract firewalls. By offering these services, we have helped these projects enhance their security posture and protect their assets against potential threats.\n\n**2. Development and Integration:**\n- **Circuit Breaker SDK:** Our Circuit Breaker SDK has been integrated with several projects on Arbitrum, providing them with advanced security mechanisms such as TVL monitoring, settlement modules, and oracle utilities. This integration ensures that projects can detect and respond to security threats in real-time, significantly reducing the risk of exploits.\n- **Security Dashboard:** We have deployed our Security Dashboard for Arbitrum projects, offering a comprehensive interface for monitoring critical security metrics. This tool helps developers quickly identify and address potential vulnerabilities, improving overall protocol safety.\n\n**Plans to Strengthen Arbitrum's Ecosystem:**\n\n**1. Enhancing Foundational Infrastructure:**\n- **On-Chain Firewalls:** We plan to continue developing and refining our on-chain smart contract firewalls to provide even more robust security features. These firewalls will serve as an additional layer of protection for all Arbitrum-based projects, ensuring the integrity and safety of the ecosystem.\n- **Advanced Security Modules:** We aim to introduce new security modules within our SDK, tailored specifically for the unique requirements of the Arbitrum network. These modules will include enhanced transaction monitoring, anomaly detection, and automated response mechanisms.\n\n**2. Improving Developer Efficiency:**\n- **Comprehensive Tooling:** Our SDK and security tools are designed to be easy to integrate, reducing the complexity and time required for developers to implement robust security measures. By streamlining the security integration process, we help developers focus on building innovative applications without compromising on safety.\n- **Educational Resources:** We will provide detailed documentation, implementation guides, and conduct workshops to educate developers on best practices for integrating and using our security tools. This will empower developers with the knowledge and resources needed to secure their projects effectively.\n\n**3. Accelerating Adoption of Novel Applications:**\n- **Supporting Innovation:** By offering free security services and advanced tools, we lower the barriers for new projects to launch and operate securely on Arbitrum. This support encourages innovation and accelerates the development and adoption of novel applications within the ecosystem.\n- **Community Engagement:** We plan to actively engage with the Arbitrum developer community through events, hackathons, and collaborative initiatives. These activities will foster a vibrant ecosystem where developers can share knowledge, collaborate on security solutions, and drive the adoption of cutting-edge technologies.\n\nThrough our ongoing efforts and future plans, TurtleShell is committed to strengthening the Arbitrum ecosystem by providing essential security infrastructure, improving developer efficiency, and supporting the growth and adoption of novel applications.\n", "hidden": true, "question": "Describe your previous work or plans related to the Arbitrum ecosystem. How does your project strengthen Arbitrum's foundational infrastructure, improve developer efficiency, or accelerate the adoption of novel applications?", "questionId": 1}, {"type": "paragraph", "hidden": true, "question": "If applicable, describe how your project leverages Stylus or Arbitrum Orbit Chains. What unique capabilities or use cases does this enable?", "questionId": 2}, {"type": "paragraph", "answer": "Our team at TurtleShell is composed of seasoned professionals with extensive expertise in blockchain security, smart contract development, and DeFi protocol engineering. We have a proven track record of contributing to the security and stability of various blockchain ecosystems, including Arbitrum. Here is a summary of our relevant experience and accomplishments:\n\n**Valerio Fichera:**\n- **Role:** Lead Developer\n- **Background:** Valerio is a veteran full-stack developer with a strong background in academic blockchain research. He has worked extensively on DeFi protocols, focusing on lending and borrowing markets, as well as NFT lending platforms.\n- **Expertise:** Blockchain development, smart contract security, token engineering.\n\n**Publications and Research:**\nOur team has published several articles that highlight our insights and expertise in mitigating protocol risks and enhancing the security of blockchain ecosystems:\n\n1. **The “Unknown Unknowns” of Mitigating Protocol Risk:**\n   - **Link:** [Read the article](https://medium.com/@turtleshell_xyz/the-unknown-unknowns-of-mitigating-protocol-risk-ef3018acd32b)\n   - **Summary:** This publication delves into the complexities of identifying and mitigating unforeseen risks in DeFi protocols. It outlines strategies for enhancing security and preventing exploits by addressing the unknown factors that can compromise protocol integrity.\n\n2. **Building on Arbitrum:**\n   - **Link:** [Read the article](https://medium.com/@turtleshell_xyz/building-on-arbitrum-02dbcf9ce5d5)\n   - **Summary:** In this article, we share our experiences and best practices for building secure and efficient applications on the Arbitrum network. It provides valuable insights into leveraging Arbitrum's capabilities to enhance protocol performance and security.\n\n3. **Learnings from the Curve Exploit:**\n   - **Link:** [Read the article](https://medium.com/@turtleshell_xyz/learnings-from-the-curve-exploit-40864ff547b1)\n   - **Summary:** This publication analyzes the Curve exploit, highlighting the vulnerabilities that were exploited and the lessons learned. It offers practical recommendations for other DeFi protocols to strengthen their security measures and avoid similar incidents.\n\n**Past Projects:**\n- **Circuit Breaker SDK:** We have developed the Circuit Breaker SDK, a comprehensive toolkit designed to provide real-time security features for DeFi protocols. It includes utilities for monitoring critical parameters, such as TVL, and implementing automated protective measures.\n- **Security Dashboard:** Our Security Dashboard offers a user-friendly interface for monitoring the security status of DeFi protocols. It provides real-time insights into various metrics, helping protocol operators detect and respond to potential threats quickly.\n- **Fully Functional Proof of Concept (PoC):** We have created a PoC that demonstrates the practical application of our on-chain firewall technology in a real-world scenario, showcasing how our security mechanisms can be integrated into a DeFi protocol to prevent unauthorized fund withdrawals and protect against hacks.\n\n**Relevant Experience within Arbitrum:**\n- **Free Security Services:** As grantees from the Arbitrum Foundation, we have provided free-of-charge security services to over 25 projects integrated with Arbitrum. These services include security audits, real-time monitoring, and the implementation of our on-chain smart contract firewalls.\n- **Community Engagement:** We have actively engaged with the Arbitrum developer community through workshops, webinars, and collaborative initiatives. These activities have helped us gather valuable feedback, refine our tools, and promote the adoption of advanced security measures within the Arbitrum ecosystem.\n\nOur team's extensive expertise and commitment to enhancing blockchain security make us well-equipped to contribute to the Arbitrum ecosystem. Through our innovative solutions, research, and active community involvement, we aim to strengthen the security and resilience of DeFi protocols built on Arbitrum.\n", "hidden": true, "question": "Describe your team's expertise in your chosen focus area within the Arbitrum ecosystem. Include relevant experience, publications, or past projects.", "questionId": 3}, {"type": "short-answer", "answer": "https://gap.karmahq.xyz/project/turtleshell", "hidden": true, "question": "Please provide a link to Karma GAP, where you are tracking and reporting on milestones.", "questionId": 4}, {"type": "paragraph", "hidden": true, "question": "List any contract addresses with the associated network(s), EOAs, or deployer addresses your project has deployed.", "questionId": 5}, {"type": "paragraph", "answer": "yes, please learn more here:\n\n**Building on Arbitrum:**\n   - **Link:** [Read the article](https://medium.com/@turtleshell_xyz/building-on-arbitrum-02dbcf9ce5d5)", "hidden": true, "question": "Have you received any previous grants or support for your work in the Arbitrum ecosystem? If so, please provide details and estimated funding amounts.", "questionId": 6}, {"type": "dropdown", "answer": "Yes", "hidden": true, "question": "Please confirm that you have read and agree to comply with the ethical standards outlined in the eligibility criteria, including Gitcoin's Quid Pro Quo policy (https://support.gitcoin.co/gitcoin-knowledge-base/gitcoin-grants/general-questions/what-is-our-quid-pro-quo-policy)", "questionId": 7}, {"type": "paragraph", "answer": "no", "hidden": true, "question": "Do you have any potential conflicts of interest to disclose? If yes, please provide details.", "questionId": 8}, {"type": "paragraph", "answer": "everything has been shared", "hidden": true, "question": "Would you like to share anything else about your project, team, or vision for the Arbitrum ecosystem that wasn't covered in the previous questions?", "questionId": 9}], "project": {"id": "0xbc0c38f75ec02f37af3c6cc5acef9951e0f69c0b49a26e9bf680b1fbcf4f76cb", "title": "Turtleshell", "logoImg": "bafkreidhnuloaiylzmovoiduvn5u46bzdos7a3lcl6ykfn3ufbwmdetf3a", "metaPtr": {"pointer": "bafkreiaqyiyymuw6kvq53ur7dus34ihzxvs4opi2qxd56kik7n22ndw2xi", "protocol": "undefined"}, "website": "https://turtleshell.xyz", "bannerImg": "bafkreihal3r3pmvhbapqzural56ypulfhhkyr5b54dlfcnrz2uqief2f3q", "createdAt": 1713199683739, "userGithub": "valeriofichera", "credentials": {"github": {"type": ["VerifiableCredential"], "proof": {"jws": "eyJhbGciOiJFZERTQSIsImNyaXQiOlsiYjY0Il0sImI2NCI6ZmFsc2V9..oHd7Ry8EWhVRW97zWnsNsYFMIwbjnAa9t6ekpuA0v5v03SWFh4lm6TaZ8AzUUnyATaSnAi0_McKDAYSynl1ECw", "type": "Ed25519Signature2018", "created": "2024-04-15T16:47:38.896Z", "proofPurpose": "assertionMethod", "verificationMethod": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC#z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC"}, "issuer": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC", "@context": ["https://www.w3.org/2018/credentials/v1"], "issuanceDate": "2024-04-15T16:47:38.896Z", "expirationDate": "2024-07-14T16:47:38.896Z", "credentialSubject": {"id": "did:pkh:eip155:1:0x61319Eb36d29781586988fC8dD0A78dBfE201cef", "hash": "v0.0.0:xwy0nPbfb+C4uwlMgPqWvwXw1TQiSBpArRGXaef6eMQ=", "@context": [{"hash": "https://schema.org/Text", "provider": "https://schema.org/Text"}], "provider": "ClearTextGithubOrg#turtleshell-xyz#78494380"}}, "twitter": {"type": ["VerifiableCredential"], "proof": {"jws": "eyJhbGciOiJFZERTQSIsImNyaXQiOlsiYjY0Il0sImI2NCI6ZmFsc2V9..TLxmKPHoXqb7HCMGBwjN1FPIKyr69FxE1m1oq3tUu2BHE8YTeROcIbDKc4kfVypt1ptBPtAwTBfi_PIvd8AvCw", "type": "Ed25519Signature2018", "created": "2024-04-15T16:47:55.118Z", "proofPurpose": "assertionMethod", "verificationMethod": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC#z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC"}, "issuer": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC", "@context": ["https://www.w3.org/2018/credentials/v1"], "issuanceDate": "2024-04-15T16:47:55.118Z", "expirationDate": "2024-07-14T16:47:55.118Z", "credentialSubject": {"id": "did:pkh:eip155:1:0x61319Eb36d29781586988fC8dD0A78dBfE201cef", "hash": "v0.0.0:oz0KwaLR0jBRUP1XEFRf0DE1c2AIJYKfY9Vq+fIUgWU=", "@context": [{"hash": "https://schema.org/Text", "provider": "https://schema.org/Text"}], "provider": "ClearTextTwitter#TurtleShell_xyz"}}}, "description": "Imagine:\n\nOne day you wake up and your protocol got exploited …maybe you heard of ERC-7265 as attempt to end that quite real nightmare.\n\nWith TurtleShell we are aiming to give every Smart Contract holding Assets the necessary bolster to prevent unintended outflow.\n\non-chain realtime hack prevention\nwe are building on-chain firewalls\nWhat is an On-Chain Smart Contract Firewall?\nSmart contract hacks have been plaguing DeFi protocols, bridges, and more.\n\nToday, in order to defend themselves, protocols perform audits, open bug bounties, and implement monitoring.\n\nAll of these steps are absolutely crucial. Nevertheless, whenever a vulnerability is discovered by an attacker, most exploits can drain funds in a very short period of time, sometimes even within a single transaction. To prevent these hacks from happening, we need an on-chain tool.\n\nYou can think of the Smart Contract Firewall as an additional layer of security for DeFi protocols.\n\nOur Firewall is a set of Solidity Smart Contracts that allow you to:\n\nDefine critical parameters for your protocol (e.g., TVL) and track these parameters over time.\n\nDetect that a transaction (or multiple) is causing the protocol to operate outside its normal activity (e.g., unusual liquidity outflow, indicative of a potential hack happening).\n\nImplement a set of protective measures, including transaction blocking, protocol pausing, fund freezing, or controlled fund withdrawal, before the transaction is committed and funds exit the protocol.\n\nThe Firewall provides a way to detect abnormal changes in your protocol directly on-chain, that could be indicative of a hack. That means that you can act upon abnormal activity, whenever it occurs, directly on the blockchain.", "lastUpdated": 0, "projectGithub": "turtleshell-xyz", "projectTwitter": "turtleshell_xyz"}, "recipient": "0x6EB137332eA93F960F9D3052b7497852D7164F9c"}}