{"signature": "0x2ebe574d5524043d1e133d29e14e3f9e625baad354ef2fde842168284bf7603c59d52c6545e1332335767ea102d6e8846e521c3e7fd9c05c6f168cebbb3bd9dc1c", "application": {"round": "0xadd9b8cc34d9f36fa37cb9c6941e6209f4eea6c6", "answers": [{"type": "email", "hidden": true, "question": "Email Address", "questionId": 0, "encryptedAnswer": {"ciphertext": "b8Y7yohnfA91HUL0CzxYEbhm9hS/StwRpYL27stv/ai0jzwqAMc5lRCdZRh/Tiuv", "encryptedSymmetricKey": "5e322ae6482e39caec9454798bd9c7a3ccec06f2853de84039ab058f21c5eb8ad002ab5abc69e249b3a74352a14b6516b83d4d1ebcf7ecd0e116eba23a8e64395e86e9569f6d350135a5daef05f4a72b03bd371db392ec033b2d62e03eb655887c03973bc405b1d56c55c980534036ac3785300dc3a6acae0ae09ca6afe3c00500000000000000202faa0d1511569467b67b08c982240e4351a577f99902ba3468d8fb64d642a50b24c480e04dd7cfac2dc74d888558df8e"}}, {"type": "short-answer", "answer": "valerio_eth", "hidden": true, "question": "Telegram handle", "questionId": 1}, {"type": "link", "hidden": false, "question": "Karma profile (if available)", "questionId": 2}, {"type": "checkbox", "answer": ["Yes, I confirm"], "hidden": true, "question": "Have you read and confirmed that your project abides by the Program General Eligibility Policy https://tecommons.notion.site/Eligibility-Policy-7cf5ff8c323149cf84011712f070f009 ?", "questionId": 3}, {"type": "paragraph", "answer": "**Vision Statement:**\nOur long-term vision for TurtleShell is to create an unparalleled security framework that ensures the safety and integrity of DeFi protocols across the Optimism and broader Superchain ecosystem. By implementing on-chain smart contract firewalls, we aim to establish a new standard in real-time hack prevention, safeguarding digital assets and fostering a more secure and resilient DeFi environment.\n\n**Intended Impact:**\n\n**Qualitative Benefits:**\n1. **Enhanced Security Posture:** TurtleShell's real-time monitoring and protective measures will significantly enhance the security posture of DeFi protocols, reducing the likelihood of successful exploits and unauthorized fund withdrawals.\n2. **Developer Confidence:** By providing robust security tools, we aim to instill greater confidence among developers, encouraging them to innovate and build on the Optimism and Superchain ecosystems without fearing security breaches.\n3. **User Trust:** Users will have increased trust in DeFi protocols that implement TurtleShell, knowing that their assets are protected by advanced on-chain security measures. This trust will drive higher engagement and participation in DeFi.\n4. **Collaborative Security Culture:** Our project will promote a collaborative culture of security awareness and best practices within the developer community, leading to a more proactive approach to security challenges.\n\n**Quantitative Benefits:**\n1. **Reduction in Exploits:** By integrating TurtleShell, we aim to achieve a measurable reduction in the number of successful hacks and exploits across DeFi protocols. This will be quantified by comparing incident rates before and after TurtleShell implementation.\n2. **Faster Threat Response:** Our on-chain firewall will enable protocols to detect and respond to threats in real-time, significantly reducing the time taken to mitigate potential hacks. This can be tracked by monitoring the average response time to detected anomalies.\n3. **Increased Adoption:** We expect to see a substantial increase in the adoption of TurtleShell across various DeFi protocols within the Optimism and Superchain ecosystems. This will be measured by the number of protocols integrating our firewall and the volume of assets protected.\n4. **Improved User Retention:** Enhanced security will lead to improved user retention rates, as users feel more secure and are less likely to withdraw their assets due to security concerns. This can be measured by tracking user engagement and asset retention metrics.\n\nBy achieving these qualitative and quantitative goals, TurtleShell will play a crucial role in securing the future of DeFi on Optimism and the broader Superchain ecosystem, ensuring a safer, more reliable environment for all participants.\n", "hidden": false, "question": "Vision Statement and Impact: Describe the long-term vision of your project and its intended impact on the Optimism and broader Superchain ecosystem, including both qualitative and quantitative benefits", "questionId": 4}, {"type": "paragraph", "answer": "To achieve our intended impact and key goals for the next 3-6 months, TurtleShell will focus on a strategic plan that encompasses development, integration, community engagement, and continuous improvement. Our approach is designed to ensure the rapid deployment and effective adoption of our on-chain smart contract firewall technology.\n\n**1. Development and Testing:**\n- **Enhancing TurtleShell SDK:** Finalize the development of the TurtleShell SDK, ensuring all key components such as TVL utilities, settlement modules, AMM utilities, and oracle utilities are fully operational and thoroughly tested.\n- **Real-World Testing:** Conduct rigorous testing of our on-chain firewall in various real-world scenarios to validate its effectiveness and identify any potential issues. This will include simulations of common attack vectors and stress tests to ensure robustness.\n\n**2. Integration and Deployment:**\n- **Pilot Integrations:** Partner with a select group of DeFi protocols within the Optimism ecosystem to pilot the integration of TurtleShell. These initial integrations will serve as case studies and provide valuable feedback for refining our tools.\n- **Seamless Integration Process:** Develop comprehensive integration guides and support materials to help DeFi protocols seamlessly adopt TurtleShell. This includes step-by-step instructions, example implementations, and troubleshooting tips.\n\n**3. Community Engagement:**\n- **Educational Initiatives:** Launch a series of webinars, workshops, and tutorials to educate the DeFi community about the importance of on-chain security and the benefits of using TurtleShell. These sessions will be tailored to both technical and non-technical audiences.\n- **Hackathons and Challenges:** Organize hackathons and security challenges to encourage developers to explore and integrate TurtleShell into their projects. These events will foster innovation and highlight the practical applications of our technology.\n\n**4. Monitoring and Feedback:**\n- **Adoption Tracking:** Implement a system to monitor the adoption and usage of TurtleShell across integrated protocols. This will help us measure our impact and identify areas for improvement.\n- **Continuous Feedback Loop:** Establish channels for continuous feedback from developers and users. This feedback will be crucial for making iterative improvements to the TurtleShell SDK and ensuring it meets the evolving needs of the community.\n\n**5. Advocacy and Outreach:**\n- **Project Partnerships:** Forge partnerships with leading protocols, research groups, and other stakeholders to promote the adoption of TurtleShell. Collaborative efforts will include joint research, co-hosted events, and shared educational resources.\n- **Media and Awareness Campaigns:** Engage with media outlets and influencers to raise awareness about the importance of on-chain security and the role of TurtleShell. Publish articles, give interviews, and participate in panel discussions to reach a wider audience.\n\nBy executing this strategy, we aim to establish TurtleShell as a critical security solution within the Optimism and broader Superchain ecosystems, driving widespread adoption and significantly enhancing the security of DeFi protocols.\n", "hidden": false, "question": "Initial Strategy: Outline a high-level strategy for how you will achieve your intended impact and key goals for the next 3-6 months", "questionId": 5}, {"type": "paragraph", "answer": "TurtleShell applies token engineering within the optimism ecosystem by incorporating advanced on-chain security mechanisms that enhance the integrity and safety of DeFi protocols. Our approach ensures that token contracts are fortified against potential threats, providing a robust security layer that operates seamlessly within the OP environment.\n\n**1. On-Chain Firewall Integration:**\n- **Smart Contract Firewalls:** TurtleShell introduces smart contract firewalls that monitor and control the flow of assets within DeFi protocols. These firewalls are designed to detect and prevent malicious activities by implementing real-time security checks directly on the blockchain.\n- **Parameter-Based Security:** Our system allows protocols to define critical parameters, such as Total Value Locked (TVL), and track these parameters over time. By monitoring these metrics, the firewall can identify abnormal activities, such as sudden liquidity outflows, and trigger protective measures.\n\n**2. Comprehensive Toolkit with TurtleShell SDK:**\n- **TVL Utilities:** The SDK includes tools to track TVL in real-time, providing an early warning system for potential security breaches. Sudden changes in TVL can indicate unauthorized actions, prompting immediate responses.\n- **Settlement Modules:** Predefined settlement modules such as Block, Freeze, and Pause allow protocols to automate security responses when specific conditions are met. These modules streamline the implementation of security measures, ensuring quick and effective action.\n- **AMM and Oracle Utilities:** The SDK provides specialized tools for monitoring and verifying price activities within Automated Market Makers (AMMs) and validating oracle data. These utilities help protect against price manipulation and ensure the accuracy of critical price feeds.\n\n**3. Real-Time Monitoring and Response:**\n- **On-Chain Detection:** TurtleShell\u2019s on-chain monitoring capabilities enable protocols to detect abnormal changes and potential hacks as they happen. This real-time detection is crucial for preventing exploits that can drain funds in a single transaction.\n- **Immediate Protective Actions:** Upon detecting suspicious activity, the firewall can automatically block transactions, pause the protocol, freeze affected funds, or throttle fund withdrawals. These immediate actions help mitigate the impact of potential hacks and safeguard assets.\n\n**4. Modular and Flexible Design:**\n- **Customizable Parameters:** Protocols can customize the parameters they wish to monitor based on their specific security needs. This flexibility allows TurtleShell to adapt to a wide range of scenarios and threats.\n- **Ease of Integration:** The pre-coded contracts and modules in the TurtleShell SDK simplify integration with existing DeFi protocols. This ease of integration ensures that protocols can quickly adopt and benefit from enhanced security measures.\n\n**5. Collaboration with the OP Ecosystem:**\n- **Pilot Projects:** By collaborating with select DeFi protocols within the OP ecosystem, we can pilot and refine our integration approach, ensuring that it meets the unique requirements of different projects.\n- **Community Engagement:** Active engagement with the OP developer community through workshops, webinars, and hackathons helps promote the adoption of TurtleShell and provides valuable feedback for continuous improvement.\n\nThrough these strategies, TurtleShell applies token engineering principles to significantly enhance the security and resilience of DeFi protocols within the Optimism ecosystem. By leveraging advanced on-chain security mechanisms and a comprehensive toolkit, we aim to create a safer environment for digital assets and foster greater confidence in DeFi innovations.", "hidden": false, "question": "Integration Approach: Explain how the project applies token engineering within OP", "questionId": 6}, {"type": "dropdown", "answer": "Tooling", "hidden": false, "question": "Project category ", "questionId": 7}, {"type": "short-answer", "answer": "MVP", "hidden": false, "question": "Project stage: What stage do you consider your project is currently in? (F.e.: Plan, Proof of Concept (PoC), Minimum Viable Product (MVP), Fully integrated project)", "questionId": 8}, {"type": "paragraph", "answer": "Our team is composed of experienced professionals with a strong background in token engineering, blockchain security, and decentralized finance (DeFi). Here is a brief summary of our key team members and their relevant expertise:\n\n**Valerio Fichera:**\n- **Role:** Lead Developer\n- **Background:** A seasoned full-stack developer with a background in academic blockchain research. Valerio has a diverse range of experiences in developing and securing DeFi protocols, including lending and borrowing markets and NFT lending platforms.\n- **Expertise:** Blockchain development, smart contract engineering, security infrastructure.\n- **Contact:** \n  - [Github: valeriofichera](https://github.com/valeriofichera)\n\n**Additional Team Members:**\nOur team includes individuals with a range of technical and professional backgrounds, each bringing valuable expertise to the project:\n- **DeFi Protocol Developers:** Professionals with extensive experience in designing and implementing secure DeFi protocols. They have worked on various projects, contributing to the development of robust financial systems.\n- **Blockchain Security Experts:** Team members who specialize in smart contract auditing and security analysis. Their insights ensure that our solutions are resilient against potential vulnerabilities.\n- **Academic Researchers:** Members with a strong academic background in blockchain technology and cryptography. They contribute to the theoretical underpinnings and innovative aspects of our token engineering efforts.\n\n**Collective Expertise:**\n- **Token Engineering:** Our team has a deep understanding of token mechanics and security features, particularly in the context of DeFi protocols. This expertise is crucial for developing solutions like the TurtleShell Firewall and SDK.\n- **Security Infrastructure:** Proven experience in creating and implementing security tools for blockchain applications. Our team has developed and deployed multiple security solutions that have been tested in real-world scenarios.\n- **Optimism Ecosystem Engagement:** Active involvement in the Optimism (OP) community, including contributions to various projects and participation in ecosystem events. This engagement ensures that our solutions are well-aligned with the needs and standards of the OP ecosystem.\n- **Educational and Community Outreach:** Our team has a strong track record of organizing and leading educational initiatives, such as workshops and webinars, aimed at promoting best practices in token engineering and security.\n\n**Previous Involvements:**\n- **Workshops and Hackathons:** Hosted several educational workshops and participated in hackathons to spread awareness about token security and demonstrate the practical applications of our solutions.\n- **Collaborations:** Established partnerships with other token engineering research groups and DeFi protocols to collaborate on security-focused projects and initiatives.\n\nOur team's diverse expertise and commitment to advancing token security make us well-equipped to lead the development and implementation of TurtleShell, ensuring a safer and more resilient DeFi ecosystem within Optimism and beyond.\n", "hidden": false, "question": "Team Expertise: Provide a brief summary on the team\u2019s background and relevant expertise in token engineering and/or OP", "questionId": 9}, {"type": "paragraph", "answer": "### Existing Work\n\nWe have made substantial progress in the development and implementation of our security solutions. Below is the evidence of our existing work, including prototypes, research, and previous projects:\n\n**1. Circuit Breaker SDK:**\n- **Description:** The Circuit Breaker SDK is a comprehensive toolkit designed to provide real-time security features for DeFi protocols. It includes utilities for monitoring critical parameters, such as Total Value Locked (TVL), and implementing automated protective measures like transaction blocking and protocol pausing.\n- **Link:** [Circuit Breaker SDK](https://github.com/turtleshell-xyz/circuitbreaker)\n\n**2. Security Dashboard:**\n- **Description:** Our Security Dashboard offers a user-friendly interface for monitoring the security status of DeFi protocols. It provides real-time insights into various metrics, helping protocol operators detect and respond to potential threats quickly.\n- **Link:** [Security Dashboard](https://github.com/turtleshell-xyz/frontend-boilerplates)\n\n**3. Fully Functional Proof of Concept (PoC):**\n- **Description:** This PoC demonstrates the practical application of our on-chain firewall technology in a real-world scenario. It showcases how our security mechanisms can be integrated into a DeFi protocol to prevent unauthorized fund withdrawals and protect against hacks.\n- **Link:** [Fully Functional PoC](https://github.com/turtleshell-xyz/nomad-bridge-poc)\n\n**Previous Work within OP/Superchain:**\n- **Workshops and Educational Initiatives:** We have hosted multiple workshops and educational sessions focused on token security and the benefits of implementing on-chain firewalls. These events have helped raise awareness and drive the adoption of our solutions within the OP community.\n- **Collaboration with the OP Ecosystem:** Active participation in the Optimism community has allowed us to collaborate with other developers and projects, contributing to the overall security and resilience of the ecosystem.\n\nOur existing work demonstrates our commitment to enhancing the security of DeFi protocols through innovative, real-time solutions. By building on these foundations, we aim to continue our progress and make a significant impact on the Optimism and broader Superchain ecosystems.\n", "hidden": false, "question": "Existing Work: Provide evidence of any existing work, such as prototypes, research papers, or previous projects. If you have already done work within OP/ Superchain, please include that here too", "questionId": 10}, {"type": "paragraph", "answer": "### Returning Grantees\n\nSince receiving prior funding from the Token Engineering Grants Program in GG20, we have made significant progress on the R&D front and have released several important updates to the TurtleShell SDK. The support from the grant has been pivotal in advancing our project and achieving key milestones.\n\n**Impact of Funding:**\n\n**1. R&D Progress:**\n- **Enhanced Features:** The funding has enabled us to dedicate resources to enhancing the features of our SDK. We have incorporated more robust security mechanisms and fine-tuned the existing functionalities to better meet the needs of DeFi protocols.\n- **Advanced Research:** We have conducted extensive research on new methods to detect and mitigate security threats in real-time. This research has informed the development of new tools and utilities within the SDK, ensuring our solutions remain cutting-edge.\n\n**2. SDK Updates:**\n- **TVL Monitoring Tools:** We have released new TVL monitoring tools that provide real-time tracking and alerts for unusual activities, helping protocols detect potential threats early.\n- **Settlement Modules:** The SDK now includes additional settlement modules, such as advanced transaction blocking and fund freezing capabilities, which streamline the implementation of security responses.\n- **AMM and Oracle Utilities:** We have added new utilities to monitor and verify price activities within AMMs and validate oracle data, further protecting against price manipulation and ensuring accurate data feeds.\n\n**3. Community Engagement and Education:**\n- **Workshops and Webinars:** We have hosted several educational workshops and webinars to demonstrate the new features of the SDK and educate the community on best practices for on-chain security. These events have been well-received and have helped increase the adoption and understanding of our tools.\n- **Documentation and Guides:** The funding has also allowed us to produce comprehensive documentation and implementation guides, making it easier for developers to integrate and utilize the TurtleShell SDK effectively.\n\n**4. Free Security Services:**\n- **Serving DeFi Projects:** Furthermore, we have provided free-of-charge security services to over 20 DeFi projects, advocating the adoption of circuit breakers. This initiative has helped these projects enhance their security posture and protect their assets against potential threats.\n\nThe prior funding has been instrumental in driving the progress of our project, enabling us to enhance our security solutions and provide valuable resources to the DeFi community. We look forward to continuing this momentum and further contributing to the security and resilience of web3.", "hidden": false, "question": "Returning grantees: If your project has received prior funding from the Token Engineering Grants Program, please describe the impact that funding has had on the project", "questionId": 11}, {"type": "checkbox", "answer": ["I agree"], "hidden": false, "question": "Agreement checkbox: By checking this box, grantee commits to participating in the two milestones outlined below (exact dates will be communicated after your admission to the round): September: Milestone 1 requires completion of a grant profile in Grantee Accountability Protocol (GAP). The profile outlines the specific outcomes to be achieved by Milestone 2.  October: Milestone 2 requires a progress report on the grantee's progress towards achieving the outcomes agreed to in Milestone 1. ", "questionId": 12}, {"type": "paragraph", "answer": "eventually we might apply for further rounds. However, at the moment nothing has been planned yet.", "hidden": false, "question": "Have you applied or are planning to apply for additional funding rounds within the Optimism ecosystem? https://sovs.notion.site/d24bc00e3ed14139beb44b82a5e145c5?v=50ae5a8b531641e0b78f39a710f3ffa6", "questionId": 13}, {"type": "short-answer", "answer": "frens & community", "hidden": true, "question": "How did you hear about the Token Engineering Grants Program?", "questionId": 14}, {"type": "paragraph", "answer": "thanks for always being supportive of our mission!", "hidden": false, "question": "Anything else you'd like to share about your project, previous work, or other project affiliations? Anything you'd like to add that has not been covered?", "questionId": 15}], "project": {"id": "0xbc0c38f75ec02f37af3c6cc5acef9951e0f69c0b49a26e9bf680b1fbcf4f76cb", "title": "Turtleshell", "logoImg": "bafkreidhnuloaiylzmovoiduvn5u46bzdos7a3lcl6ykfn3ufbwmdetf3a", "metaPtr": {"pointer": "bafkreiaqyiyymuw6kvq53ur7dus34ihzxvs4opi2qxd56kik7n22ndw2xi", "protocol": "undefined"}, "website": "https://turtleshell.xyz", "bannerImg": "bafkreihal3r3pmvhbapqzural56ypulfhhkyr5b54dlfcnrz2uqief2f3q", "createdAt": 1713199683739, "userGithub": "valeriofichera", "credentials": {"github": {"type": ["VerifiableCredential"], "proof": {"jws": "eyJhbGciOiJFZERTQSIsImNyaXQiOlsiYjY0Il0sImI2NCI6ZmFsc2V9..oHd7Ry8EWhVRW97zWnsNsYFMIwbjnAa9t6ekpuA0v5v03SWFh4lm6TaZ8AzUUnyATaSnAi0_McKDAYSynl1ECw", "type": "Ed25519Signature2018", "created": "2024-04-15T16:47:38.896Z", "proofPurpose": "assertionMethod", "verificationMethod": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC#z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC"}, "issuer": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC", "@context": ["https://www.w3.org/2018/credentials/v1"], "issuanceDate": "2024-04-15T16:47:38.896Z", "expirationDate": "2024-07-14T16:47:38.896Z", "credentialSubject": {"id": "did:pkh:eip155:1:0x61319Eb36d29781586988fC8dD0A78dBfE201cef", "hash": "v0.0.0:xwy0nPbfb+C4uwlMgPqWvwXw1TQiSBpArRGXaef6eMQ=", "@context": [{"hash": "https://schema.org/Text", "provider": "https://schema.org/Text"}], "provider": "ClearTextGithubOrg#turtleshell-xyz#78494380"}}, "twitter": {"type": ["VerifiableCredential"], "proof": {"jws": "eyJhbGciOiJFZERTQSIsImNyaXQiOlsiYjY0Il0sImI2NCI6ZmFsc2V9..TLxmKPHoXqb7HCMGBwjN1FPIKyr69FxE1m1oq3tUu2BHE8YTeROcIbDKc4kfVypt1ptBPtAwTBfi_PIvd8AvCw", "type": "Ed25519Signature2018", "created": "2024-04-15T16:47:55.118Z", "proofPurpose": "assertionMethod", "verificationMethod": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC#z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC"}, "issuer": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC", "@context": ["https://www.w3.org/2018/credentials/v1"], "issuanceDate": "2024-04-15T16:47:55.118Z", "expirationDate": "2024-07-14T16:47:55.118Z", "credentialSubject": {"id": "did:pkh:eip155:1:0x61319Eb36d29781586988fC8dD0A78dBfE201cef", "hash": "v0.0.0:oz0KwaLR0jBRUP1XEFRf0DE1c2AIJYKfY9Vq+fIUgWU=", "@context": [{"hash": "https://schema.org/Text", "provider": "https://schema.org/Text"}], "provider": "ClearTextTwitter#TurtleShell_xyz"}}}, "description": "Imagine:\n\nOne day you wake up and your protocol got exploited \u2026maybe you heard of ERC-7265 as attempt to end that quite real nightmare.\n\nWith TurtleShell we are aiming to give every Smart Contract holding Assets the necessary bolster to prevent unintended outflow.\n\non-chain realtime hack prevention\nwe are building on-chain firewalls\nWhat is an On-Chain Smart Contract Firewall?\nSmart contract hacks have been plaguing DeFi protocols, bridges, and more.\n\nToday, in order to defend themselves, protocols perform audits, open bug bounties, and implement monitoring.\n\nAll of these steps are absolutely crucial. Nevertheless, whenever a vulnerability is discovered by an attacker, most exploits can drain funds in a very short period of time, sometimes even within a single transaction. To prevent these hacks from happening, we need an on-chain tool.\n\nYou can think of the Smart Contract Firewall as an additional layer of security for DeFi protocols.\n\nOur Firewall is a set of Solidity Smart Contracts that allow you to:\n\nDefine critical parameters for your protocol (e.g., TVL) and track these parameters over time.\n\nDetect that a transaction (or multiple) is causing the protocol to operate outside its normal activity (e.g., unusual liquidity outflow, indicative of a potential hack happening).\n\nImplement a set of protective measures, including transaction blocking, protocol pausing, fund freezing, or controlled fund withdrawal, before the transaction is committed and funds exit the protocol.\n\nThe Firewall provides a way to detect abnormal changes in your protocol directly on-chain, that could be indicative of a hack. That means that you can act upon abnormal activity, whenever it occurs, directly on the blockchain.", "lastUpdated": 0, "projectGithub": "turtleshell-xyz", "projectTwitter": "turtleshell_xyz"}, "recipient": "0x6EB137332eA93F960F9D3052b7497852D7164F9c"}}