Our project, "Web3Bugs: Unraveling Exploitable Flaws in Smart Contracts," corresponds with the Community & Education round eligibility criteria in the following aspects:


## Improving the Web3 Ecosystem 

The project aims to improve the Web3 ecosystem by offering invaluable resources for developers and security analysts. By simplifying the comprehension of exploitable vulnerabilities in smart contracts, the project contributes to the overall security and stability of the Web3 environment.

## Project Age

With the project in progress for over 12 months, it fulfills the age requirement.

We initiated the project in April 2022. We submitted our preliminary findings to [CESE 2022](https://www.youtube.com/watch?v=q9-xxy43BnM&t=3100s&ab_channel=Blockchain-Web3MOOCs) in August 2022. Our final findings were submitted to [ICSE 2023](https://conf.researchr.org/track/icse-2023/icse-2023-technical-track?#event-overview) in September 2022 and accepted in December 2022. We published our dataset in February 2023.

## Proven Track Record and Long-term Goals

The project displays a proven track record in the Web3 domain through conducting thorough analyses of exploitable bugs and categorizing them based on their properties. Our publicly available [dataset](https://github.com/ZhangZhuoSJTU/Web3Bugs) has received over 1000 stars on Github. Furthermore, the project has garnered substantial media attention, including:
+ [Interviewed](https://medium.com/code4rena/demystifying-exploitable-bugs-in-smart-contracts-with-zhuo-and-brian-f8649d4c427f) by [code4rena](https://code4rena.com/)
+ Highlighted by [Week in Ethereum March 4, 2023](https://weekinethereumnews.com/week-in-ethereum-news-march-4-2023/), in the security section
+ [Youtubed](https://www.youtube.com/watch?v=gPgMW_kheFU&ab_channel=FuzzingLabs-PatrickVentuzelo) by Fuzzing Labs
+ Introduced by many widely promoted tweets, including [bytes032](https://twitter.com/bytes032/status/1630864096047296512) and [Patrick Collins](https://twitter.com/PatrickAlphaC/status/1634058759201869824)


Our long-term objectives encompass increasing awareness of exploitable bugs, fostering the advancement of sophisticated vulnerability detection methods, and championing human participation in the auditing process. The project also highlights recent milestones, such as expanding the list of exploitable bugs, developing well-adapted classification standards for smart contract bugs, and offering an extensive compilation of exploitable bugs and security analysis tools.

## Others 

Our project aligns with several examples of eligible projects, such as:

+ __Providing educational resources__: We offer a comprehensive compilation of exploitable bugs, vulnerability detection techniques, and publicly accessible security analysis tools, serving as a vital educational resource for Web3 developers and security analysts.
+ __Creating content__: The project offers a publicly accessible dataset for exploitable smart contract bugs, encompassing bug descriptions, classifications, and instructions for utilizing diverse security analysis tools. This contribution enriches the educational resources within the Web3 ecosystem.
+ __Protecting users__: By emphasizing the significance of exploitable bugs and the necessity of human involvement in the auditing process, our project helps protect users from exploitable vulnerabilities in smart contracts, ensuring a more secure Web3 environment.
+ __General Eligibility Policy__: In addition to satisfying the specific Community & Education round eligibility criteria, our project also complies with the Program General Eligibility Policy, ensuring that it adheres to the overall requirements of the funding program.