Application for User Account Access Security in Wallets

[ainhoa-a]

Project Abstract

This research proposal targets analyzing Polkadot's user-facing security protocols, focusing on complex account generation and access mechanisms, including multi-signatures and proxies. It plans to model and evaluate these processes in popular Polkadot wallets, aiming to identify security loopholes and user lockout scenarios while streamlining authentication and enhancing user experience.

This project will serve as the basis for the Bachelor Thesis of Carlo Sala, who has been working during the last two years at zondax contributing in building and maintaining several Ledger apps in the Polkadot ecosystem. This research will lead him towards completing his degree in Mathematics at Universtat Autònoma de Barcelona.

Grant level

• Level 1: Up to $10,000, 2 approvals
• Level 2: Up to $30,000, 3 approvals
• Level 3: Unlimited, 5 approvals (for >$100k: Web3 Foundation Council approval)

Application Checklist

• The application template has been copied and aptly renamed (project_name.md).
• I have read the application guidelines.
• Payment details have been provided (bank details via email or Polkadot (USDC & USDT) address in the application).
• I am aware that, in order to receive a grant, I (and the entity I represent) have to successfully complete a KYC/KYB check.
• The software delivered for this grant will be released under an open-source license specified in the application.
• The initial PR contains only one commit (squash and force-push if needed).
• The grant will only be announced once the first milestone has been accepted (see the announcement guidelines).
• I prefer the discussion of this application to take place in a private Element/Matrix channel. My username is: @ainhoa_a:matrix.org (change the homeserver if you use a different one)

[github-actions]

The applicant has requested the discussion of the application to happen in a private chat room.

[PieWol]

Hey @ainhoa-a , thank you for the application.

I've started a conversation on element 👋

[semuelle]

I left some questions in the chat room.

[semuelle]

Thank you for the update, @ainhoa-a. Looks good to me.
While we wait for more reviews, could you fill out the KYB form?

[ainhoa-a]

Thank you for the update, @ainhoa-a. Looks good to me. While we wait for more reviews, could you fill out the KYB form?

Thank you @semuelle I've transferred this to our team to complete it.

[ainhoa-a]

Hi @semuelle we have completed the KYB form :-)

[semuelle]

Hi @semuelle we have completed the KYB form :-)

Thanks for the update, @ainhoa-a, but it looks like the submission wasn't completed.

[github-actions]

Congratulations and welcome to the Web3 Foundation Grants Program! Please refer to our Milestone Delivery repository for instructions on how to submit milestones and invoices, our FAQ for frequently asked questions and the support section of our README for more ways to find answers to your questions.

Before you start, take a moment to read through our announcement guidelines for all communications related to the grant or make them known to the right person in your organisation. In particular, please don't announce the grant publicly before at least the first milestone of your project has been approved. At that point or shortly before, you can get in touch with us at grantsPR@web3.foundation and we'll be happy to collaborate on an announcement about the work you’re doing.

Lastly, please remember to let us know in case you run into any delays or deviate from the deliverables in your application. You can either leave a comment here or directly request to amend your application via PR. We wish you luck with your project! 🚀

[keeganquigley]

Hi @ainhoa-a how is the milestone coming along? I believe it has been due for a few months at this point.

[semuelle]

@keeganquigley, please check with Bhargav about this. I believe it was submitted to him some time ago.