Alerting nominators the moment a validator flips commission or changes identity (feedback wanted)

Hey all! I’m Wesley, a Rust dev from Brazil. I’ve been building a small, focused monitoring tool on the side, and I’d love to share the idea and get your feedback before I take it to a treasury referendum.

This is a draft for discussion, not a finished funding ask. I want to know whether the problem resonates, whether the scope is right, and whether something out there already covers it.

The problem

When you nominate a validator, you’re trusting it to play fair. Several abuse patterns are well documented in the community, and a nominator has no way to be warned about any of them in real time:

  • Commission flipping: A validator advertises a low commission to attract stake, then quietly raises it toward 100% to keep the rewards.

  • Identity changes: A validator changes its on-chain display name after you’ve already staked on the strength of a name you recognized.

  • Compliance drift: A validator’s self-stake or commission slips below the network threshold, making it permissionlessly chill-able and putting nominator funds at risk.

Today you usually find out after the fact, once your rewards have already shrunk.

The idea

The tool follows the chain in real time, watches the validators a nominator cares about, and sends an alert via Telegram, email, or webhook the instant one of these patterns shows up. It subscribes to finalized blocks on Asset Hub for staking and the People chain for identity, decodes the relevant pallet events, and runs each through a dedicated detector.

The goal is a heads-up while you can still act on it. You don’t have to watch a dashboard or run anything yourself, the alert just comes to you.

What already exists

I’ve built and self-funded a working foundation, and it’s open source (Apache 2.0):

  • It connects to Polkadot Asset Hub via subxt, subscribes to finalized blocks, and detects commission changes on mainnet for a watched list of validators.

  • It establishes a baseline the first time it sees a validator, then detects changes against it.

  • It persists validators and their full commission history to PostgreSQL, and self-hosts with a single docker compose up.

What I’d build with treasury support

The work I’d want funding for turns that foundation into something any nominator can actually use:

  • Alert delivery across Telegram, email, and webhook, with per-event deduplication so nobody gets spammed.

  • Identity-change and compliance detection wired into the live pipeline (identity via the People chain, compliance via a per-era check).

  • Per-user accounts and subscriptions. Sign in with a Polkadot wallet signature (no passwords), manage your own watch list and alert channels over a small REST API.

  • A dynamic watch list so the watcher tracks every validator any user subscribes to, updated live without a restart.

  • Kusama as a second monitored chain, with the chain name shown in every alert.

  • A minimal web UI so a non-technical nominator can connect a wallet, add validators, and set alert channels without touching a server.

The end result is open-source public infrastructure that makes the validator set safer to nominate. Self-hosting always stays supported, and a hosted public instance would just be one deployment of it.

I’d like the community to tell me whether that gap is real and worth funding, or whether an existing tool already covers it (or could with a small addition).

On hosting sustainability

A public hosted instance has ongoing costs after any grant ends. My current thinking is that self-hosting always works (the public instance is just one deployment), and the hosted instance would be covered by a modest runway buffer plus a possible follow-on maintenance proposal rather than open-ended treasury spend. I’d like to hear how the community would prefer this handled.

What I’m asking the forum

Is this useful? Is the scope right, too big, or too small? And have I framed the comparison to existing tools fairly? I’d rather hear it now than after a referendum is live.

Thank you all for reading it, I appreciate. I’ll take any feedback about this project in consideration before creating any proposals.

Something we have asked about for a while, this feature of alerting commission flippers should be integrated into wallets and all staking interfaces natively but a validator bot for Telegram is always welcome. The alerting feature is useful, the recommendation would be to expand it a little bit more as a full validation / validator bot that tracks points, offline machines, etc. In other chains they call it the “degen monitoring” :laughing: as opposed as the classic Grafana, Alerts, etc. that validators use. Quite useful for delegators however and new validators, node operators, RPCs and so on.

Extra points for this. How many legit Polkadot projects (allegedly) wasted so much money on Google Cloud, AWS instead of using their own hardware which on the long run gives more flexibility and cuts costs.

Hopefully you go through with this with a little wider scope and not a crazy high budget (something we always recommended to everyone).

Looking forward to see what comes out of this

As I read the #1909 and #1910 referenda, I realised that this idea would be pointless for detecting commission flipping, so yeah, I’d take the health monitor road.

Maybe keep an eye out for:

  • Validator self-stake drops below the minimum amount
  • Validator gets chilled
  • Validator earning zero or low era points
  • Validator is offline
  • Slash or offence recorded against the validator
  • Maybe some node information like version, block height lag, and connection issues

As for the self-hosting part, I still believe that having one public instance for general use is the best approach, because people wouldn’t have to configure or run their own services. Self-hosting would still be an option for specialized entities or companies that prefer it.

As for the wallets, I think the webhook is the way in. A wallet’s backend could subscribe to it and forward the alerts to its users through their own push notifications.

Based on the structure of the project, I don’t think what I designed would change much, so the funding wouldn’t change either (it would need more testing, but that’s fine).