Season 7 Nominations: Audit Request Team on the Developer Advisory Board

Season 7 Nominations: Audit Request Team on the Developer Advisory Board


Please post your self-nominations for the Season 7 Audit Request Team on the Developer Advisory Board by commenting your complete self-nomination in the comments on this post, according to the template and process outlined here. There are 2 elected positions open on this Team within the DAB in Season 7, according to the governance-approved Season 7 Developer Advisory Board Operating Budget and Charter.

Nominations must be posted on this thread by 19:00 GMT on Friday, January 3rd

Hey,

My name is m4rio and I’ve been part of the Audit Grants in season 6 and I am reapplying for season 7.
Optimism Profile

Please link to any contributions that demonstrate you meet the eligibility criteria outlined in the Charter for the specific Developer Advisory Board team you’re applying for:
I’ve been in web3 security for 5 years now. Currently, I am a Security Researcher at Cantina. You can see my profile here: https://cantina.xyz/u/m4rio.

Some of the names I’ve reviewed recurrently include MakerDAO and Euler, with more listed on my cantina profile. Disclosure there are more that are not listed under my profile because they are not public. I have over 200 security reviews to date of complex protocols.

During the Season 6 Audit Grants, I refined the process to ensure the grant money had a significant impact on the projects that applied. We currently have over 10 Audit Service providers, and I have been the main point of contact for many of them. I guided these providers to successfully apply for the grants.

Please disclose any anticipated conflicts of interest: If you are a top 25 delegate in another ecosystem, hold an elected position in another DAO, and/or are a multisig signer in another community please disclose here.
I am a security multi-sig signer via Spearbit DAO in ZKSync Security Council

Please verify that you understand you may be removed from this role via the Representative Removal proposal type in the Operating Manual
I understand

Please verify that you understand KYC will be required to receive Council rewards at the end of Season 7:
I understand

Please verify that you are able to commit ~20 hours / month to Board operations:
I am able to commit 20 hours per month to Board operations

1 Like

Hi everyone,

I’m Noah. Last season I participated as a DAB member and particularly enjoyed reviewing audit requests. As former Head of Security Reviews at Spearbit, reviewing projects for audit readiness was an important part of my role. To illustrate, I wrote a guide for projects to adhere to and prepare themselves before an audit: Security Review Readiness Guide.

Contrasting Season 7 from Season 6, I look forward to exclusively focusing on audits as a DAB member and teaming up with the other members to strengthen the acceptance criteria and intake application ensuring projects are demonstrating audit readiness prior to applying for a related grant.

Please link to your Optimist Profile or Organization ID here.

Please link to any contributions that demonstrate you meet the eligibility criteria outlined in the Charter for the specific Developer Advisory Board team you’re applying for:

Eligibility Criteria for Audit Request Team:

To be selected to the Audit Request Team, an applicant should have established themselves as a senior auditor, either with a role at a firm or through major successes in audit contests and bug bounties

I have over a decade of experience prior to getting into crypto and am now 8 additional years into my exclusive focus on this industry. Since June 2022 I’ve been a Lead Security Researcher with Spearbit, working hands on to review projects such as Llama, Kiln, Coinbase, and more noted here noah.eth (noah) | Cantina. Over this time, I spent nearly a year helping the Spearbit Core team directly engage clients to determine what form of security engagement is appropriate for their needs, what an appropriate budget looks like, and what steps are needed for the project to be ready for 3rd party review.

Now my time is largely spent again as a Lead Security Researcher conducting reviews and as a smart contract developer preparing my own codebases for review.

I would love the opportunity to team up with the other members to both evaluate requests as well as assist protocols in preparing their work for 3rd party security reviews.

Please verify that you have no conflicts of interest:

I have no conflicts of interest

Please verify that you understand you may be removed from this role via the Representative Removal proposal type in the Operating Manual

I understand

Please verify that you understand KYC will be required to receive Council rewards at the end of Season 7:

I understand

Please verify that you are able to commit ~20 hours / month to Board operations:

I am able to commit 20 hours per month to Board operations

3 Likes

I was part of a judging panel with Noah for a hackathon in Buenos Aires (remote) for the Crecimiento event with a few complex Optimism tracks, including interop stuff. Noah was of great help and clearly up to date with the status of interop and the future developments. It was great judging along you and thank you for all the support !

1 Like