Are you a developer that’s spent 2 years on the IC with little $$ to show for it? There’s a 100k+ opportunity just sitting out there, auditing. According to this, Sonic was quoted 193k for their pre-SNS audit. [image] Cake Maker ∞ @cakemakerone @AsyncIC @sonic_ooo @FinterestICP Irony a…

Another thing that is an issue, how could one enforce any audit done to the project, since it should normally be done before launch, how can you ensure that the audited and not modified code will be deployed ? or would that require a 2 phase action in which you first check for bugs and errors and a…

Projects are currently required to provide easily replicable builds. Anyone can build them and get hashes of the wasms. When someone proposes an upgrade it includes these hashes so the public can compare them with the hashes they got. Along with these hashes, test scripts made by auditors can be ru…

Maybe some specific guidelines should be drawn by Dfinity for different categories of dapps specially defi .

There are such currently done and in the forum. One attack vector I don’t think anyone has talked about is this (Applicable to all, not just Sonic from where this screenshot is) We have explored the option in which outsiders obtain all tokens for sale and we are making our DAOs secure against that…

I agree 100%. I’ve recently worked on a nodejs code that can look and fill as real live replica (checkout lightic package on npm). The IC is so much different than other chains, so I think regular audit companies would need to start from scratch to create IC specific verification pipeline. In addit…

[image] infu: The project-attackers will need to buy in this case ~8% of the tokens = from 285k$ to 500k$ This is frightening, and is a serious risk that is nearly impossible to mitigate without having a legal framework or some accountability in place. Additionally, no one’s discussed the ca…

One of the solutions, would bo to time-lock tokens issued to other parties than sale. It would increase initial threshold required to make 51% attack. In such option you also protect the project against aggressive sell of by the parties that received tokens by other means than public sale.

As a side-note: If you have bought tokens from the decentralization sale, you should in no circumstance follow a neuron that’s part of the investor/developer camp. Another problem is this split (for Dexes in general) [image] Trading rewards and LP rewards - basically going to initially go to the…

One reason that the fees are so high is liability. When you do one of these they make you sign something that says they are not responsible for changes in tech, so on and so forth…but the reality is, if you lose $100m because the auditing company missed a decimal place the audit company is going to…

[image] stopak: One of the solutions, would bo to time-lock tokens issued to other parties than sale. It would increase initial threshold required to make 51% attack. In such option you also protect the project against aggressive sell of by the parties that received tokens by other means than pu…

100k+ developer opportunity - IC Dapp Auditing

Developers

AliSci June 12, 2025, 9:07am 24

we want to audit our canister C• The opportunity to work with us as Rust ICP senior developer C•
any help for that?

Topic		Replies	Views
!ONLY “1 ICP” IN ICX'S SNS ICP Treasury! What is the Warning!, the Reflection!, the ACTION! for us?!?!?! Developers Discussing , community-consideration , in-progress , nns , sns	82	8546	November 27, 2023
Let's Learn from the Odin.fun Hack - Preventing Attack Vectors Developers Discussing	73	2624	October 13, 2025
Reviving the SNS Framework: Addressing Current Challenges and Exploring Solutions SNS Framework Discussing , community-consideration , sns	86	1261	January 15, 2026
New Voting Power Explorer Dashboard Developers	82	923	July 4, 2025
How to improve the SNS framework? Developers sns	14	821	June 3, 2024

100k+ developer opportunity - IC Dapp Auditing

Related topics