Add a new section for operational security best practices.

[maurelian]

ISSUE: There are many security consideration outside of programming and architecture, which are not covered here.

PR REQUEST: A new section should be created (including modifying the [yaml config(https://github.com/ConsenSys/smart-contract-best-practices/blob/master/mkdocs.yml)), which presents the various operational considerations necessary when deploying a contract system.

These include existing issues:

[] #92
[] #85
[] #79
[] #97

As well as:
[] proper cold storage for critical private keys
[] possible recommendations for M and N on a multisig wallet
[] other

[gitcoinbot]

This issue now has a funding of 0.3 ETH (98.15 USDT) attached to it. To view or claim this funding, click here.

[owocki]

hey @maurelian did you want me trying to source this still? i see the bounty has expired.. so you now has the option to clawback the funds or to just keep it open (and ill continue looking for someone to help)

[maurelian]

I'd like to claw it back. This task was too open ended.

Unfortunately, I can't see how to do that.

[owocki]

@maurelian no problem. just sent you the clawback link on slack.

[owocki]

hey @maurelian happy new years :) let me know if you got that clawback link and if you need any help :)

[KevinSmall]

is this one still available? It says status = active, but expired = 1 month ago (and from comments above it looks closed)

[maurelian]

It's available on a voluntary basis only now.

[gitcoinbot]

The funding of 0.3 ETH (291.99 USD) attached to this issue has been approved & issued .

• Learn more at on the gitcoin issue page
• Questions? Get help on the Gitcoin Slack
• $14867.33 more Funded OSS Work Available at: https://gitcoin.co/explorer

[owocki]

Please disregard the message from Gitcoinbot above.. The bounty was killled, not approved.

[mimoo]

It should probably have a mention about contract audits.

[shayanb]

Also:

• Document the short address attack mitigation failure #128
• Similar to Section on deployment instructions #97 but more practical guide. e.g. do not use the same machine as the node and the signing server. Recommendation: run node on the cloud/ Infura, use secure server for signing/holding private key
• Include Encourage more activity to move off chain and other gas cost reductions #93 or mention/link to it in OpSec

[maurelian]

Current Modus Operandi is to reduce scope and improve the core content.