[Here](https://polkadot.polkassembly.io/post/1491) is the previous community discussion on Polkassembly. 

### TLDR;
The purpose of this bounty is to nurture and develop WebAssembly smart contracts on parachains. As Gavin mentioned in this [CoinDesk article](https://www.coindesk.com/tech/2021/05/25/polkadots-gavin-wood-webassembly-is-the-future-of-smart-contracts-but-legacy-evm-is-right-now/), WebAssembly is the future of smart contracts. However, even in the Polkadot ecosystem, EVM smart contract is the go-to-market solution now simply because lack of ecosystem toolings and dApps new developers can refer to. To bootstrap the Wasm dApps in the ecosystem, we will fund canary dApps and toolings through this bounty.

### Context of This Bounty
Please see [this post](https://forum.polkadot.network/t/we-need-to-make-ink-showcase-projects/592) first. Currently, based on the data, smart contract Parachains are leading the Polkadot ecosystem in terms of market adoption. More projects are deploying dApps on Polkadot Parachains than making Parachains today and this trend will likely continue due to the high resource requirement to deploy a chain. The core problem is that the Polkadot ecosystem only supports EVM at the time of writing this and we are reproducing something which other L1s/L2s can do. One of Polkadot’s main differentiators and default environments is Wasm. In this bounty, we would like to push Wasm smart contracts adoption. The scope is as follows:

- Create easily accessible and audited ink!/ask! smart contract showcases
- Create ink!ubator - an incubation program to support community projects built with ink! and parachains that want to expose select APIs through contracts-pallet “chain extensions”. We will also help facilitate a smart contract auditing market.
- Develop a React hooks library “useInk” - the missing front-end library for Dapps on Polkadot.

### Bounty Proposal
[Here](https://docs.google.com/document/d/1y2QECPsXQktVGZIat_yNKTlodviTecMZ6IbiLNQ4NLM/edit?usp=sharing) is the full bounty proposal.

### Curators Candidates
**Sam Ruberti from Parity Technologies (Address: 13zqqP37p8HjLuWr7sha9GcAcYiiDgjqoNS3YbSELtgvaAfb):**  Sam Ruberti is a Senior Rust Developer with ink! and has over twelve years of experience delivering full-stack products for companies including Bloomberg, Peloton, and Clear, and five years of experience building full-stack Dapps in production environments. He has built microservices, DeFi platforms, NFTs, and contributed to open-source libraries for Ethereum.

**Sota Watanabe Astar Foundation (Address: 13VyvkXX3dYyeT7oAmaipZYNHzFJXofC5V8eqMuzd1isXY84):** Sota Watanabe is the founder of Astar Network. He joined the web3 space in 2015 and started developing Astar Network in 2019. Apart from his achievements, he is a director of the Japan Blockchain Association and used to be a blockchain researcher at the University of Tokyo and a task force member of Trusted Web led by the Japanese government. In addition to that, he was chosen for Forbes 30 Under 30 Asia in the IT division and Forbes 30 Under 30 Japan.

**Hernando Castano from Parity Technologies (Address: 15FjwNSxHhaJeknJjbydSo561ti1ea8sf3Y1fA263emujzxW):** Hernando is a Core Developer at Parity Technologies. Hernando joined the blockchain space in 2017, initially curious about the world of smart contracts on Ethereum. In 2019, Hernando joined Parity Technologies to work on the Parity Ethereum client, and has since transitioned to the team working on the ink! programming language.

**Markian Ivanichok 727 Ventures (address: 16FVZ2qVefqbr2zcEGVojEQBgx3nb8GqQCdjKiaq2nSs33T8):** Founder & CEO at 727.ventures, Brushfam & Dedali Metaverse. Web3 entrepreneur, Software Engineer. Brushfam onboards businesses to Polkadot WASM. Projects: Openbrush(Openzeppelin of WASM ink!), Typechain for ink!, sol2ink (transpiler from solidity to ink!), and substrate/ink! contribution itself. Also, WASM conference, was the first web3 WASM conference and gathered ~1000 participants.

**Hang Yin from Phala Network (address: 12BZFbrNksTKwHtaBojnVtoN8BoXKmBFzT3xDnHh7P9t2Cg5):** Co-founder and CTO at Phala Network. 5 years of Web3 core development and entrepreneur experience. Author of Phala Network Technical Whitepaper. Lead the team to build an off-chain computing protocol based on ink! and Substrate with 30k online servers. Ex-Googler on Machine Learning before joining Web3.

**Michał Świętek , Development Lead at Aleph Zero (Address: 5H6AVPSNv8GjEFiDKqhtCd6U494vGMm3r5vkzr5614sbfQnx0) :** For a couple of years, Michał has been fully devoted to the Aleph Zero project. From co-designing novel consensus mechanisms, and writing the first lines of code in core repositories, to the high-level architecture of Aleph Zero node implementation.

Wasm Smart Contracts Bounty

Anti-Scam projects rewards pool. Minimum rewards 5% 

This bounty proposal is created to reward community event activities in the Polkadot & Kusama ecosystem through child-bounties by the bounty curators.

This proposal shall allow actors in the Dotsama ecosystem to become rewarded faster and on a more regular basis for their events activities in the ecosystem.

Please read the [full proposal here](https://docs.google.com/document/d/1R0z3D0c1kYvnSP1PDZ8r9bCd3Arr1Iwf/edit#heading=h.gjdgxs)

Community Events Reward Bounty with Child-Bounty Distribution

This bounty aims to allocate up to 100,000 DOT for covering bug bounty rewards for [Open Runtime Module Library (ORML)](https://github.com/open-web3-stack/open-runtime-module-library). ORML is a community-maintained collection of Substrate runtime modules, widely used across the Polkadot/Kusama parachains.


# Context of the bounty:

The Open Runtime Module Library is a community-maintained library widely used by parachains across Kusama and Polkadot ecosystems. It’s a set of runtime pallets for commonly used functions that parachains may need. It allows constructing parachains with less time for development and focusing more on unique features. This helps the Kusama/Polkadot ecosystem grow faster.

Vulnerabilities in ORML are a common problem of Kusama/Polkadot community and will affect the whole ecosystem. Acala Foundation is running a bug bounty program that includes the ORML library. We propose to allocate up to 100,000 DOT to cover ORML part of Acala Bug Bounty.

# Problem Statement

ORML is a commonly used library across the Kusama/Polkadot ecosystems, vulnerabilities and security issues of this module will likely affect the whole network.

# Custody of funds

The main curator is suggested to be a multisig wallet controlled by Acala, Parity and potentially other users of ORML. Those who control the multisig wallet will be able to assess the validity and severity of found vulnerabilities, as well as to check their fixing.

# Curator Multisig Candidates (3/5 multisig)

Bryan Chen @ Acala  
Bryan is the co-founder & CTO of Acala as well as the initiator and core contributor of ORML. He is also one of the top community contributors to Substrate and Polkadot.

Shaun Wang @ Acala  
Shaun is one of the core developers at Acala, and core contributor of ORML. He is also an active contributor to Polkadot, Substrate and Cumulus.

Shawn Tabrizi @ Parity  
Shawn is one of the Lead Developers at Parity Technologies working on Substrate, Polkadot, Kusama. He specializes in FRAME, Runtime development, and benchmarking.

Wei Tang @ Parity  
Wei is one of the core developers at Parity Technologies. He maintains Frontier, the Ethereum-compatibility layer for Substrate.

Shumo Chu @ Manta  
Shumo is a co-founder of manta.network, the privacy layer for Web3 using zkSNARK. He was serving as research scientist at Algorand and assistant professor at UCSB before Manta.

# Additional costs

Acala team uses Immunefi as a service for managing bug bounty programs. 
Immunefi charges an additional 10% for each reward paid to whitehat. The service gives the next advantages:
- Manages privacy in submitting reports helps ensure that the vulnerability is fixed before being exposed to publicity;
- Immunefi serves as a third trusted party for resolving conflicts in submitting the same vulnerability by different bug bounty hunters;
- Provides secure communication with whitehats;
- Tracking & filtering out irrelevant reports;
- Exposure to a wide set of whitehat hackers.

# Cost Estimate

It is not possible to precisely estimate costs, as we don't know how many bugs with what severity can be found. Acala is working hard on finding vulnerabilities ourselves and doing frequent security audits. We propose to allocate rewards that will cover ~1.5 of the most severe bugs; and, if necessary, we can propose another allocation.

# Technical Process

Bug bounty rewards for ORML are paid in DOT. Each vulnerability needs separate payment, for which can be created child bounties with reward amount and 10% of Immunefi fee. The child bounty is curated by Immunefi team wallet, with the support and supervision of the on-chain curator,  and they manage to pay out to the whitehat and take their commission.

The following consists of the next steps:
- Whitehat submits bug report to Acala via Immunefi;
- The report will be accessed by the Acala team for its validity and specified level of severity; 
- The bounty details will be disclosed to the relevant party (e.g. Parity and affected parachain teams);
- After the bug is mitigated, the Acala team will determine the bounty value based on severity along with the curator;
- A child bounty will be created by the curator and funds transferred to pay out whitehat + fee to Immunefi for the work completed.

# Measure of Success

Vulnerabilities and security issues of ORML found by whitehat from bug bounty programs are carefully fixed on time.





Security Bug Bounty for Open Runtime Module Library (ORML)

![polkadot logo](https://polkadot.network/assets/img/logo-polkadot.svg?v=98f2dafeb1)
## Proposal Abstract: Polkadot Pioneers Prize, an Incentive Prize Program
---

We are excited to announce a proposal for a new incentive prize program called the Polkadot Pioneers Prize (“Pioneers Prize”).

The Pioneers Prize is a series of challenges created with the goal of propelling technical innovation on the Polkadot network. The first two of those challenges will be announced later this year and will cover categories including zero-knowledge research and Polkadot infrastructure improvements.

Challenge winners will receive DOT; the total prize funds available at program launch will be split between the first two challenge categories and is projected to be 993286.08 DOT — worth roughly 18 million USD.

The Pioneers Prize will be managed by an elected curator and will likely contain members of the on-chain treasury council, Parity Technologies, the Web3 Foundation, and other external ecosystem partners.

In addition to funding research, the Pioneers Prize and its proposal look to model how the community can achieve greater agency by directing on-chain treasury funds in new and creative ways. 

We hope you’ll join us in being excited about the Polkadot Pioneers Prize and are equally as eager to see what the community comes up with.

Let the challenges begin!


---

*If you would like to read the full proposal, you can do so [here](https://docs.google.com/document/d/1tQTh_svJnNSCn4XPBoQW2hOvSBZzKFtKjkj8-sIui2w/edit?usp=sharing)*


Polkadot Pioneers Prize, an Incentive Prize Program

New Proposal: Polkadot Pioneers Prize, an Incentive Prize Program

### Purpose of the bounty

Scams are plaguing our ecosystem, as they do the entire industry. However, as a community, we have shown time and again that we take scams seriously and strive to create a safe ecosystem for users. 

This bounty proposal aims to incentivise the community, both individuals and companies, to fight against scams and protect users from falling for them. We believe that anti-scam response should be a community endeavour and this is what this proposal aims to build.

This proposal expands on the community initiative targeting scam sites that has been ongoing for several months now with high levels of success. However, the current initiative is focused only on scam sites, while overlooking other aspects of scam fighting where we could be doing more. 

With this proposal we aim to create a holistic solution that addresses the problem from several aspects, while bringing awareness to the community, and educating users, of both the problems and the efforts to address them. The bounty for this proposal is meant to be open-ended, with the funds being distributed through child bounties that cover several aspects of the anti-scam response.

The tasks described in the child bounties utilise mostly off-chain tools and processes, but it is the goal of this initiative to evolve to bring as much of that as possible on-chain. These tasks came from feedback from the community and the experience garnered from the current initiative.

The child bounties will be opened gradually as potential implementers come forward, and more will almost certainly be added along the way. They are described in this proposal with varying levels of details, but all parameters of each child bounty, in terms of implementation, participation and rewards, will be defined in detail before the child bounty is opened.

And because this is an evolving process, changes to the bounties are almost certain as we gain more experience and get more feedback from the community. But the three main evolution goals of this initiative are:

- To move it on-chain as much as possible
- To have it being driven and coordinated exclusively by the community
- To become an anti-scam umbrella over the broader Polkadot ecosystem, covering parachains, other relay chains and projects 

Finally, all rewards are subject to change as we evaluate the efforts needed, receive feedback from implementers, curators and the community at large, and in case the price of DOT is very low or very high for prolonged periods of time. 

Details on the proposed child bounties and rewards can be found [HERE](https://docs.google.com/document/d/1V-39ktdgpvATPpV1cfI8iZlS8_3oBDAHdlcMDd_3jpo/edit?usp=sharing)