corpus.core

The @OctantApp Epoch 13 allocation window opens in 5 minutes. Here is our ask.

What we build: colibri, a stateless Ethereum client that verifies RPC data on the device, and PAP, which keeps the reads behind every wallet action private. For wallet, browser and dApp teams, so their users get both.

What we've shipped: colibri is in production in Kohaku (the Ethereum Foundation's wallet SDK), Ambire Next, beel. and inblock. PAP runs in Freedom Browser.

Why now: before any transaction exists, reads tell an RPC provider who holds what and what they plan to do. Whoever compromises a provider or its logs gets that list.

What we're raising: $50,000 to take PAP from one production deployment to at least three, and to run two public workshops so other teams can integrate it on their own.

Support us here: epoch.octant.app
First time? You need a Human Passport (score 5) and about 0.008 ETH in the same wallet.

Quadratic funding rewards the number of supporters, and you get more leverage when you back several projects on your ballot. Please bring one friend along.

Open until Oct 21, 8 PM EDT.

@SteffenKux Talking at @EFDevcon about wallets, verification, simulation and transaction security.

Devcon 8, Mumbai:
Jork Leonhardt speaks on Friday, 13:00, Lotus Stage 1.
Title: "Your Device Doesn't Have to Trust Its Manufacturer", part of the Open & Verifiable Stack track. A connected device that depends on its manufacturer's backend for the truth inherits every outage and every decision of that backend. The talk covers what verifying locally on the device looks like. #Devcon

Here's the checklist:
corpuscore.tech/documents/rpc-…

The four questions from Jork's talk at DSS Mumbai:

1. How many independent sources stand behind each critical read?
2. Is any response verified, or only trusted?
3. What happens when sources disagree or disappear?
4. How concentrated is your provider and jurisdiction exposure?

Two further gaps for monitoring tools: response integrity and concentration.

Everything fits on a two-page checklist under CC BY 4.0, linked in the article.

#DeFiSecurity #Web3Security