WhitehatSecurityDAO

White Hat Security DAO

Allows Staked Actors to a Create Bounty Opportunity and Staked White Hat hackers can submit vulnerabilities permissionlessly. The Vulnerability report s uploaded raw and data is encrypted and transferred to IPFS using a backend client. The IPFS CID is used to engage a storage deal with FileCoin (FIL) marketplace to ensure proper persistence of the Vulnerability submitted to the relevant Bounty Contact contract. Vulnerability details can be decrypted by the responsible parties and whitehats can be rewarded. Any Disputed Rating will be subjected to DAO's council review and staked funds are used to make payments in the event of a dispute.

We Issue SBT's with updatable attributes to present a leaderboard and programs can invite hackers based on their reputation.

We use Solidity and hardhat for smart contracts , they use FEVM as their runtime environment where vulnerability data is encrypted and transferred to IPFS using a backend client and the IPFS CID is used to engage a storage deal with FileCoin (FIL) marketplace to ensure proper persistence of the Vulnerability submitted to the relevant Bounty Contact contract.

FileCoin allows us to securely persist critical data and makes it easier to be transparent about our operations once the vulnerability is fixed and the report can be made public.

We use react for our front-end code