PAL is an ecosystem initiative that operates as a bounty with the mission to make Polkadot a safer and more attractive ecosystem for users and builders, by providing funding for audits, security tooling, and other security initiatives (more info on https://dotpal.io).
As part of our security tooling mandate we are planning to initiate a Call for Proposals for the development of a tool that monitors the most important value flows within the Polkadot ecosystem, providing alerting and actionable insights.
Before proceeding, we would like to consult the Polkadot community on the specifications of the tool, all questions, comments and suggestions are welcome.
Specifications
Below you find a preliminary list of the most important flows and metrics that should be covered. This list includes both general metrics (applicable to the whole ecosystem, e.g. XCM), and specific metrics. In the case of specific metrics, priority is given to features and products which are of highest importance to the ecosystem (e.g. due to their high usage and economic importance - TVL, Volumes etc).
-
XCM
a. Flows between the various chains (e.g. identifying a spike in cross-chain volume)
b. Excessive minting from a parachain as compared to its reserves -
Bridges
a. Wormhole to Moonbeam
b. Snowbridge
c. Polkadot <> Kusama
d. Hyperbridge -
DEFI TVL and Volumes (includes trading and lending)
a. Hydration AMMs (Omnipool, Stablepools, Isolated Pools) and Hydration Lending (incl. HOLLAR stablecoin)
b. Acala
c. Polkadot AssetHub AMMs
d. Bifrost vDOT (total issuance)
e. Moonbeam (Moonwell, StellaSwap, Beamex) -
CEX Flows between CEX and Polkadot and any relevant chains (funding and trades; to Polkadot and any other chain eg: USDT AH <> Binance, HDX Hydration <> Kraken)
a. Binance
b. Coinbase
c. Kraken
d. Top 10 (list to be confirmed) -
Addresses of interest
a. Trigger alerts on addresses flagged already by CEX, DEX
b. Trigger alerts on a defined custom list of addresses to be flagged -
Governance (optional)
a. A new proposal is done
b. When proposals change future state (from deciding to confirming, from preparing to deciding etc)
c. When it is executed
All amounts should be tracked both in asset amount and approximate USD amount.
Ability to allow teams to define custom rules. E.g. storage value of X @ chain A + storage value of Y @ chain B - storage value of Z @ chain C <= 100