[NDC] NDC Upcoming Election Smart Contract Audit

As we move towards conducting the upcoming elections, it is crucial that we uphold the principles of transparency, security, and integrity. To achieve this, we propose a funding initiative to carry out comprehensive audits of three critical smart contracts:

  • Election,
  • Voting, and the
  • I-AM-HUMAN Registry.

These smart contracts are fundamental components of our electoral system, and ensuring their highest quality is paramount for the success of the NDC democratic process.

These three smart contracts play a pivotal role in modern elections, as they are responsible for automating various aspects of the electoral process. Through these contracts, we can minimize and reduce the likelihood of errors, and enhance the overall integrity of the election. However, like any piece of software, smart contracts are susceptible to vulnerabilities and bugs that could potentially compromise the election’s integrity.

The objective of auditing these smart contracts is three-fold:

  1. Security Assurance: Auditing helps identify and address potential security loopholes or vulnerabilities within the codebase. By thoroughly examining the code, we can mitigate the risk of cyber-attacks or unauthorized access that could manipulate or disrupt the election.
  2. Accuracy and Reliability: Auditing ensures that the smart contracts function precisely as intended and adhere to the predetermined logic. Verifying the accuracy and reliability of these contracts is vital to guaranteeing a fair and just electoral process.
  3. Compliance Adherence: Ensuring compliance is crucial for instilling confidence in the electoral system among both participants and the public.

Funding Proposal:

The auditing process will require the expertise of external security experts, who possess a deep understanding of smart contract development and auditing practices. This expertise comes at a cost, and we propose allocating a budget of $29,870 for the comprehensive auditing of the three critical smart contracts. The costs for each smart contract is as follows

Contract Name USD Amount NEAR Slippage 3% USD Amount with Slippage Auditor
Election $8,700 $261 $8,961 Ottersec - Selected for Reputation, Cost, & Availability to Perform Audit
Voting $8,700 $261 $8,961 Ottersec
I-AM-HUMAN Registry $11,600 $348 $11,948 Ottersec
Total $29,000 $870 $29,870

The breakdown of the funding allocation is as follows:

  1. Security Audit in USD paid to Auditor: $29,000.
  2. Slippage as requested for payment in non-stable coins paid to Auditor: $870 - To accommodate the slippage of conversion from NEAR to stable.

Benefits and Implications:

By funding the auditing of these critical smart contracts, we will be investing in the foundation of our democratic process. The benefits of this initiative are far-reaching:

  • Increased Trust and Confidence: A successful audit will demonstrate our commitment to transparency and security, fostering trust and confidence in our electoral system among stakeholders and the general public.
  • Protection Against Manipulation: Identifying and fixing potential vulnerabilities will reduce the risk of election manipulation, ensuring that the election outcome truly reflects the will of the voters.
  • Enhanced Reputation: A rigorously audited and secure electoral system will elevate our organization’s reputation and standing within the global community.

In conclusion, the auditing of the Election, Voting, and I-AM-HUMAN Registry smart contracts is essential to safeguard the highest quality of our elections. By providing the necessary funding for this initiative, we will be taking a significant step towards conducting transparent, secure, and credible elections. We urge the consideration for this proposal and take action in securing the integrity of our democratic process.

8 Likes

The audit amount is very expensive. Please share competitive analysis, give information about the audit team background.

@haywood Here are the competitive quotes from Blocksec:

Contract Name USD Amount NEAR Slippage 3% USD Amount with Slippage Auditor
Election $7,500 $225 $7,725 Blocksec: Not immediately available and was going to cause a delay.
Voting $7,500 $225 $7,725 Blocksec: Not immediately available and was going to cause a delay.
I-AM-HUMAN Registry $15,000 $450 $15,450 Blocksec: The earliest available time is around September 20th. We currently are fully booked according. The timing is not going to work for us
Total $30,000 $900 $30,900

Most auditors quote similarly based on the lines and the complexity of the contracts.

This auditor is not available on our timeline and cannot prioritize these contract audits. They are inline in terms of the costs.

1 Like

Hi Janes,

Thanks for sharing, what are the timelines for auditing these smart contracts? Can we delay the elections until the contract have been audited, and any changes implemented as required?

Hi @satojandro These contracts are being audited now. The work is currently in progress.

1 Like