# \[READY TO VOTE\] Fraud Proof CTF Mission Request **URL:** \ **Category:** Governance Fund Missions\ **Tags:** season-5\ **Created:** [January 17, 2024, 5:49pm UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445 "2024-01-17T17:49:14Z")\ **Posts on this page:** 18\ **Page:** 1
**Author:** ![Gonna.eth](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/gonna.eth/32/3379_2.png) [@Gonna.eth](https://gov.optimism.io/u/Gonna.eth)\ **Post date:** [January 17, 2024, 5:49pm UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/1 "2024-01-17T17:49:14Z")
Delegate Mission Request Summary: To ensure the security of fraud proofs in advance of the full launch, this mission proposes creating a public CTF / short-term bug bounty to draw focus from top security talent. S5 [Intent](https://gov.optimism.io/t/collective-intents-season-5/6883): Intent 1: Progress towards technical decentralization Proposing Delegate: Gonna.eth Proposal [Tier](https://gov.optimism.io/t/collective-trust-tiers/5877): Fledgling Baseline grant amount: 50k OP for coordination, up to 200k OP in potential rewards Should this Foundation Mission be fulfilled by one or multiple applicants: One Submit by: To be set by Grants Council Selection by: To be set by Grants Council Start date: ASAP Completion date: Before OP mainnet fraud proof launch **Specification** **How will this Delegate Mission Request help accomplish the above Intent?** - The most important step towards technical decentralization is getting fraud proofs live on OP Mainnet. - While they are currently live on Goerli, the bug bounty is low and not drawing much attention. - A ton of attention from top security researchers would help provide the security confidence needed to move towards a mainnet launch. **What is required to execute this Delegate Mission Request?** - Analyze fraud proof systems to determine complete list of possible risks that could arise. - Determine payouts for each possible risk being identified. - Set up a fun “event” structure to make it more like a concentrated CTF than a typical bounty. - Market it to gain awareness and excitement in the security community. - Run the event. - Judge submissions and determine payouts. **How should the Token House measure progress towards this Mission?** - Event coordinated with payouts and plan approved by OP security team. - Event runs successfully. **How should badgeholders measure impact upon completion of this Mission?** - Did the event surface vulnerabilities that could have created problems if deployed to mainnet? - At the end of the event, does the OP team feel confident that fraud proofs are ready for mainnet? **Have you engaged a Grant-as-a-service provider for this Mission Request?** no **Has anyone other than the Proposing Delegate contributed to this Mission Request? If so, who, and what parts of this application did they contribute to?** I’m sponsoring a Zach Obront proposal. ---
**Author:** ![MinimalGravitas](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/minimalgravitas/32/155_2.png) [@MinimalGravitas](https://gov.optimism.io/u/MinimalGravitas)\ **Post date:** [January 24, 2024, 10:12am UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/2 "2024-01-24T10:12:34Z")
> the bug bounty is low and not drawing much attention. Have you got a link to what current bug bounties have been set up already? In general this seems like a really sensible idea, if the fraud proofs can be exploited somehow then there isn’t much point in having them! ---
**Author:** ![kelvin](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/kelvin/32/3162_2.png) [@kelvin](https://gov.optimism.io/u/kelvin)\ **Post date:** [January 24, 2024, 2:25pm UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/3 "2024-01-24T14:25:05Z")
Very much in agreement about the direction here. IMO would be useful to coordinate with the OP Labs security team on this mission request to make sure that this augments existing efforts rather than conflicting with them. ---
**Author:** ![lefterisjp](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/lefterisjp/32/9240_2.png) [@lefterisjp](https://gov.optimism.io/u/lefterisjp)\ **Post date:** [January 27, 2024, 3:51pm UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/4 "2024-01-27T15:51:11Z")
If the bug bounty is low would it just not make sense to increase the bug bounty? As this is just another way of putting a bug bounty right? ---
**Author:** ![Jepsen](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/jepsen/32/11352_2.png) [@Jepsen](https://gov.optimism.io/u/Jepsen)\ **Post date:** [January 27, 2024, 8:32pm UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/5 "2024-01-27T20:32:36Z")
I’m strongly for this! I think our industry is making large improvements on the security of technical infrastructure and we should continue to provide incentive for collaboration on this effort securing critical infrastructure. ---
**Author:** ![brockelmore](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/brockelmore/32/8006_2.png) [@brockelmore](https://gov.optimism.io/u/brockelmore)\ **Post date:** [January 29, 2024, 5:18pm UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/6 "2024-01-29T17:18:50Z")
It is pretty much a bug bounty, but the bug bounty market is flooded and it can be hard to find good projects to look into (some refuse to pay out, some skimp on rewards and fight whitehats on criticality level, etc). Marketing via a CTF-like competition is an interesting idea. Depending on OP Labs security team’s response, I would be in favor of this. ---
**Author:** ![zachobront](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/zachobront/32/7861_2.png) [@zachobront](https://gov.optimism.io/u/zachobront)\ **Post date:** [January 29, 2024, 6:44pm UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/7 "2024-01-29T18:44:08Z")
Here is the current info on the bounty: [optimism/docs/fault-proof-alpha/immunefi.md at develop · ethereum-optimism/optimism · GitHub](https://github.com/ethereum-optimism/optimism/blob/develop/docs/fault-proof-alpha/immunefi.md) Sounds great! But if you look on Immunefi, any issues with Fault Proof system is considered Low Severity ($1000 payout): [Optimism Bug Bounties | Immunefi](https://immunefi.com/bounty/optimism/) ---
**Author:** ![zachobront](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/zachobront/32/7861_2.png) [@zachobront](https://gov.optimism.io/u/zachobront)\ **Post date:** [January 29, 2024, 6:45pm UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/8 "2024-01-29T18:45:42Z")
Yeah. The easiest option here would just be to increase the bounty from Low to High. But I think at best that encourages researchers to put it on their “I’ll look at it one day” list. A coordinated event will draw more eyeballs when they’re really needed. ---
**Author:** ![MinimalGravitas](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/minimalgravitas/32/155_2.png) [@MinimalGravitas](https://gov.optimism.io/u/MinimalGravitas)\ **Post date:** [February 5, 2024, 9:11pm UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/9 "2024-02-05T21:11:45Z")
Following @zachobront’s links I can definitely see value in this mission: I am an [Optimism delegate](https://vote.optimism.io/delegate/minimalgravitas.eth) with sufficient voting power and I believe this proposal is ready to move to a vote. ---
**Author:** ![jackanorak](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/jackanorak/32/1633_2.png) [@jackanorak](https://gov.optimism.io/u/jackanorak)\ **Post date:** [February 6, 2024, 12:05pm UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/10 "2024-02-06T12:05:50Z")
yeah this is the kind of thing an ecosystem gov fund is built for I am an [Optimism delegate](https://gov.optimism.io/delegate/jackanorak.eth) with sufficient voting power and I believe this proposal is ready for a vote ---
**Author:** ![404DAO](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/404dao/32/3916_2.png) [@404DAO](https://gov.optimism.io/u/404DAO)\ **Post date:** [February 6, 2024, 6:51pm UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/11 "2024-02-06T18:51:28Z")
We are an [Optimism delegate](https://vote.optimism.io/delegates/0xe93d59cc0bcecfd4ac204827ef67c5266079e2b5) with sufficient voting power and believe this proposal is ready to move to a vote. ---
**Author:** ![web3magnetic](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/web3magnetic/32/388_2.png) [@web3magnetic](https://gov.optimism.io/u/web3magnetic)\ **Post date:** [February 6, 2024, 7:01pm UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/12 "2024-02-06T19:01:55Z")
I am an [Optimism delegate](https://vote.optimism.io/delegates/web3magnetic.eth) with sufficient voting power and believe this proposal is ready to move to a vote. ---
**Author:** ![olimpio](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/olimpio/32/920_2.png) [@olimpio](https://gov.optimism.io/u/olimpio)\ **Post date:** [February 7, 2024, 11:54am UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/14 "2024-02-07T11:54:52Z")
Hello, I am an [Optimism delegate](https://gov.optimism.io/t/delegate-commitments/235/76) with sufficient voting power and I believe this proposal is ready to move to a vote. ---
**Author:** ![NathanVDH](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/nathanvdh/32/7825_2.png) [@NathanVDH](https://gov.optimism.io/u/NathanVDH)\ **Post date:** [February 7, 2024, 11:55am UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/15 "2024-02-07T11:55:54Z")
An extremely important endeavor and something that I’m happy to see tackled by different teams with different methodologies. I’m an Optimism [delegate](https://vote.optimism.io/delegates/0xf9551c66995ed3ff9bb05c9fd7ff148bd75dc99a)with sufficient voting power and I believe this proposal should move to a vote. ---
**Author:** ![Michael](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/michael/32/2489_2.png) [@Michael](https://gov.optimism.io/u/Michael)\ **Post date:** [February 7, 2024, 4:33pm UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/16 "2024-02-07T16:33:16Z")
I am an Optimism delegate with [sufficient voting power](https://vote.optimism.io/delegates/opmichael.eth) and I believe this proposal is ready to move to a vote. ---
**Author:** ![brockelmore](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/brockelmore/32/8006_2.png) [@brockelmore](https://gov.optimism.io/u/brockelmore)\ **Post date:** [February 7, 2024, 6:00pm UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/17 "2024-02-07T18:00:34Z")
The Developer Advisory Board has reviewed this Delegate Mission Request, and voted on its acceptance or rejection. The vote results are as follows: ACCEPT: 6 votes REJECT: 0 votes ABSTAIN: 0 votes therefore, the Developer Advisory Board **accepts** this delegate mission request with the contingency that the OP Labs security team signs off on it not inferring with their work. The Developer Advisory Board has reached this conclusion based on the fact Fault Proofs are a core part of the Optimism ecosystem’s future. A bug-free & heavily reviewed Fault Proof system via a CTF therefore will meaningfully move Optimism towards technical decentralization. We thank the proposer for putting this together. ---
**Author:** ![Gonna.eth](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/gonna.eth/32/3379_2.png) [@Gonna.eth](https://gov.optimism.io/u/Gonna.eth)\ **Post date:** [February 9, 2024, 1:09pm UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/18 "2024-02-09T13:09:13Z")
The Grants Council has opened early submissions as an Indication of Interest for this mission request [here](https://app.charmverse.io/op-grants/proposals/new?template=03b43cde-b01d-475f-8a1d-e07297000bc2) For your application to be considered, the Mission request must pass the Token House vote on February 14th. Submissions will not be considered if a Mission Request is not approved on the 14th. ---
**Author:** ![maxwell](https://dub1.discourse-cdn.com/bc41dd/user_avatar/gov.optimism.io/maxwell/32/8781_2.png) [@maxwell](https://gov.optimism.io/u/maxwell)\ **Post date:** [May 9, 2024, 3:17pm UTC](https://gov.optimism.io/t/ready-to-vote-fraud-proof-ctf-mission-request/7445/19 "2024-05-09T15:17:51Z")