# [CANCELED] Ethereum Protocol Attackathon Sponsorship

## Abstract

This proposal seeks funding from the Arbitrum DAO to support an Attackathon, a large-scale security audit event hosted by the Ethereum Foundation and Immunefi. The Attackathon will focus on securing the Ethereum protocol with three key phases: education, active bug hunting, and result evaluation. The initiative aims to raise over $2 million, with $500,000 already committed by the Ethereum Foundation. This effort is crucial for ensuring Ethereum’s stability, which is vital to maintaining the reliability of projects on Arbitrum.

## Motivation

As a Layer 2 on Ethereum, Arbitrum is directly dependent on the security of the Ethereum protocol. Given that Arbitrum is EVM-compatible, any vulnerabilities in Ethereum could potentially impact Arbitrum’s ecosystem. This Attackathon is particularly timely given the recent major Ethereum hard forks, which have introduced new code that requires careful auditing.

Additionally, the Attackathon will include an educational program featuring live technical walkthroughs and detailed documentation from Ethereum Foundation, client teams, Solidity developers, and Immunefi. This program will cater to security researchers at all levels, helping to build a stronger security community around both Ethereum and Arbitrum. The increased awareness and participation in Ethereum’s security will ultimately benefit Arbitrum by ensuring a more secure underlying infrastructure.

## Rationale

The Attackathon aligns with Arbitrum’s mission to support a secure and scalable Ethereum ecosystem. By contributing to this initiative, Arbitrum will directly enhance Ethereum’s security, which supports the reliability of Arbitrum. Moreover, the educational component will upskill security researchers, giving them the tools to audit and secure both the Ethereum and Arbitrum ecosystems.

Additionally, Arbitrum will benefit from increased visibility as a proactive participant in Ethereum security efforts, enhancing its credibility and reputation among developers, users, and security researchers. By sponsoring the Attackathon, Arbitrum positions itself as a leader in the ecosystem, contributing to long-term sustainability and security.

## Detailed Financial Justification

The goal of securing $2M in total funding aligns with other major security audits in the blockchain ecosystem. Comparable initiatives include:

* MakerDAO contest on Sherlock: $1.35M
* Euler contest on Cantina: $1.25M
* Uniswap v4 contest on Cantina: $2.35M
* Firedancer contest on Immunefi: $1M

The Attackathon funding goal reflects the importance of thoroughly securing Ethereum’s core protocol. With $500,000 already committed by the Ethereum Foundation, additional sponsorship from Arbitrum DAO will help us reach this $2M target, ensuring participation from top-tier security researchers and maximizing the event’s impact.

## Outcome Metrics

By setting clear goals for participation, reports submitted, and transparency, we can effectively track the impact of the Attackathon. Key outcome metrics include:

* Secure over 100 security researcher signups before the program's launch.
* Achieve participation from over 100 distinct individuals submitting reports.
* Submit more than 150 reports by the conclusion of the Attackathon.
* Publish an audit-style report summarizing findings for the Arbitrum and Ethereum communities.

These metrics will demonstrate the program's effectiveness in attracting top security talent and identifying critical vulnerabilities across both ecosystems.

## Community Feedback Loop

To ensure transparency and alignment with community expectations, we will provide regular updates on the Attackathon’s progress through Arbitrum forums and governance channels. These updates will include detailed reports on fund usage, security vulnerabilities identified, and overall outcomes. Community feedback will be encouraged through these platforms to maintain alignment with the community’s goals and priorities.

## Breakdown of Expenditures

100% of the funds raised from Arbitrum and other sponsors will be allocated to security researcher payouts based on the severity of the bugs they find. Immunefi has waived their usual fees for this event, so all funds will be directly used for researcher rewards. If any funds remain after the Attackathon, they will be rolled over to an audit contest focused on securing the Pecta hardfork.

## Estimated Timeline

* **November 20**: Detailed program announcement and education kickoff
* **November 27**: Attackathon hunting begins
* **January 22**: Attackathon concludes and results compilation begins
* **January 23**: Review period begins
* **Late March**: Results announced

## Overall Cost

The Arbitrum DAO is invited to sponsor the Attackathon with a **$100,000 USD commitment**, payable in ETH, ARB, or USDC. This sponsorship includes:

* 1x Unique NFT with leaderboard rank
* Leaderboard listing on the sponsor landing page
* Mid-roll logo placement on Sponsor and Program Landing Page
* An Arbitrum Boost (Audit Contest) on Immunefi with up to a $100K rewards pool at 100% Immunefi Discount within 180 days of the conclusion of the Ethereum program
* 1x Dedicated Twitter post announcing sponsorship from Immunefi Twitter handle

By supporting the Attackathon, Arbitrum will leverage the event’s findings to ensure its network remains secure and robust. This initiative not only enhances security but also demonstrates Arbitrum’s commitment to the broader Ethereum ecosystem.

## Multi-Sig Address for DAO Deposit

To deposit the funds, the Arbitrum DAO can use the following multi-sig address:
**0x022ec7543BfB377BbEB6676E5ba5Ecf3950dA889**

Arbitrum Core

Arbitrum

PL Arb Grants Safety

Arbitrum Treasury

Questbook ARB DAO GRANTS

ArbitrumDAO ARDC [Clawback Capability]

Arbitrum DAO Grants by QB

Arbitrum Delegate Incentives Zodiac Module 

ArbitrumDAO Procurement - Clawback Capability

EXCLUDEFEE

DELEGATIONWEEK

LEGACY_LAYOUT

COUNCIL

EXCLUDE_TALLY_FEE

DISPLAY_COMPLIANCE_NOTICE

DISPLAY_FEATURED_DELEGATES

PREDELEGATIONWEEK

SHOW_ARB_STAKING

SECURITY_COUNCIL_BANNER

DELEGATES_SORTED_BY_PRIORITY

Voter	Choice	Date	Voting power (ARB)	Share of token supply
L2BEAT 💗	Against	Sep 26, 2024	17.73M ARB	0.17%
Gauntlet - Arbitrum	Against	Sep 25, 2024	15.15M ARB	0.15%
Wintermute Governance	Against	Sep 23, 2024	13.7M ARB	0.13%
DK (Premia)	Against	Oct 3, 2024	7.48M ARB	0.07%
UniswapDAO	Against	Sep 23, 2024	1.47M ARB	0.01%
@0x_ultra	Against	Sep 21, 2024	1.08M ARB	0.01%
LobbyFi	Abstain	Oct 3, 2024	936.97K ARB	<0.01%
VertexDAO	Against	Sep 23, 2024	601.14K ARB	<0.01%
Axia Network	Against	Sep 26, 2024	315.83K ARB	<0.01%
StableLab_Historical	Against	Sep 27, 2024	221.12K ARB	<0.01%
Curia Lab	Against	Sep 24, 2024	151.32K ARB	<0.01%
ITU Blockchain	Against	Sep 25, 2024	94.81K ARB	<0.01%
coinruay.eth	Against	Sep 23, 2024	92.26K ARB	<0.01%
@0xDonPepe	Against	Sep 20, 2024	81.02K ARB	<0.01%
Tané	Against	Oct 3, 2024	66.14K ARB	<0.01%
ocandocrypto.eth	Against	Sep 25, 2024	60.24K ARB	<0.01%
Bruce1	Against	Sep 21, 2024	59.14K ARB	<0.01%
parangaricutirimicuar0.eth	Against	Sep 20, 2024	51.71K ARB	<0.01%
Oxytocin	Abstain	Sep 24, 2024	51.64K ARB	<0.01%
@0xTALV0.ETH_MTY	Against	Sep 20, 2024	51.11K ARB	<0.01%

Voter	Vote details
L2BEAT 💗	Against 17.73M ARB 0.17% of supply Sep 26, 2024
Gauntlet - Arbitrum	Against 15.15M ARB 0.15% of supply Sep 25, 2024
Wintermute Governance	Against 13.7M ARB 0.13% of supply Sep 23, 2024
DK (Premia)	Against 7.48M ARB 0.07% of supply Oct 3, 2024
UniswapDAO	Against 1.47M ARB 0.01% of supply Sep 23, 2024
@0x_ultra	Against 1.08M ARB 0.01% of supply Sep 21, 2024
LobbyFi	Abstain 936.97K ARB <0.01% of supply Oct 3, 2024
VertexDAO	Against 601.14K ARB <0.01% of supply Sep 23, 2024
Axia Network	Against 315.83K ARB <0.01% of supply Sep 26, 2024
StableLab_Historical	Against 221.12K ARB <0.01% of supply Sep 27, 2024
Curia Lab	Against 151.32K ARB <0.01% of supply Sep 24, 2024
ITU Blockchain	Against 94.81K ARB <0.01% of supply Sep 25, 2024
coinruay.eth	Against 92.26K ARB <0.01% of supply Sep 23, 2024
@0xDonPepe	Against 81.02K ARB <0.01% of supply Sep 20, 2024
Tané	Against 66.14K ARB <0.01% of supply Oct 3, 2024
ocandocrypto.eth	Against 60.24K ARB <0.01% of supply Sep 25, 2024
Bruce1	Against 59.14K ARB <0.01% of supply Sep 21, 2024
parangaricutirimicuar0.eth	Against 51.71K ARB <0.01% of supply Sep 20, 2024
Oxytocin	Abstain 51.64K ARB <0.01% of supply Sep 24, 2024
@0xTALV0.ETH_MTY	Against 51.11K ARB <0.01% of supply Sep 20, 2024