CB-2Q23-04.2 : sBTC Stacks-Signer Support for Mobile

[will-corcoran]

Discussed in #843

^{Originally posted by will-at-stacks March 17, 2023}

Introduction:

Maintaining a well-decentralized graph of Stacks follower and mining nodes is important to the health of the Stacks network. Stacks 3.0 will require stackers to run a new signing application. Current users who are unable to securely run a signer application may be incentivized to delegate their signing responsibility. While potentially more convenient, delegating signing responsibility reduces the number of independent entities responsible for securing the sBTC threshold wallet and lowers decentralization.

Critical Bounty Mission Statement:

To address these challenges, this Critical Bounty seeks a solution that provides sBTC Stacks-Signers a simple web-app interface by which they can sign transactions related to:

• Depositing funds
• Withdrawing funds
• Casting votes
• Propose elections (related to sBTC script security, fee recovery parameters, and Nakamoto release related block production rules)

This will allow a wide range of Stackers/Signers to participate directly in the sBTC Threshold Signature protocol in a trustless manner. This application will have a high security consideration.

Functionality / Deliverables (shall include, but not be limited to):

• Mirror functionality outlined in CB-23Q2-02.1
• Debugging issues with building on iOS and Android
• Packaging and deploying to the iOS and Android App Store
• Building a UI app to manage the signer
• Notification & Alert system
• Product 'roadshow', feedback, and improvements: All recipients will be responsible for demonstrating functionality, championing early adoption, gathering feedback, and making one to two rounds of high-impact, feedback-based improvements.

Required Knowledge / Skills:

• Expertise with React Native and Hooks for Cross-Platform Android and iOS App development

References:

1. sBTC Whitepaper
2. Stacks Nakamoto Release Whitepaper
3. sBTC project dashboard
4. Clarinet Docs (reference for design system req’d for Typescript applications wrapped within a Rust application)
5. TM Repo (code & documentation standard)
6. Host a Web Server on Android

Critical Bounty Fee:

• Maximum Fee: $30,000

Reviewers / Advisors:

Igor Sylvester, Core Engineering Lead, Trust Machines
Friedger Müffke
Jude Nelson, Research Scientist, Stacks Foundation
Jesse Wiley, Integration and Security Lead, Stacks Foundation
Kenny Rogers, Developer Advocate, Stacks Foundation
Will Corcoran, Grants Lead, Stacks Foundation

Additional Comments:

Recipient will be expected to attend sBTC Core Engineering Working Group calls while the bounty is in development and provide weekly updates.

APPLY HERE

---

NOTES ABOUT CRITICAL BOUNTIES:

If you have thoughts, questions, or comments on the rough outline for this Critical Bounty above, please comments below.

Please note, all 2023 Q2 Critical Bounties that have funding approved for them will be moved to the Issues page (here) on Tuesday 03/21/2023.

Some procedural items to keep in mind with 2023 Q2 Critical Bounties:

1. Each Critical Bounty will have a pre-approved minimum and maximum budget listed within the issue.
2. All applications will be submitted via a BlockSurvey which will be linked within the Issue.
3. Applications will be open from 03/21/2023 to 04/03/2023.
4. Critical Bounty applications will be reviewed by relevant members of the sBTC Core Engineering Team and technical staff from the Stacks Foundation.
5. The selected recipient will be the low, qualified bidder (in the eyes of the reviewers).
6. Selected Critical Bounty recipients will be announced on 04/07/2023 and will be expected to start work immediately and attend sBTC Core Engineering meetings to provide weekly updates on their work.

[stacks-foundation]

👋 @will-at-stacks


Thanks for your application! We will do a pre-review and let you know if we have any immediate questions. In the mean time please refer to our review schedule here for a detailed timeline and response dates.


Best,
Will

[will-corcoran]

congrats on getting this awarded to you @setzeus !

[will-corcoran]

congrats on getting this awarded to you @setzeus !

Also, please post your original application for this bounty here for transparency sake. thanks!

[setzeus]

https://docs.google.com/document/d/1P1wPxQPxyUUDmQtOrkMCXE4I_NZ7C-YcT_REQG4NeQs/edit?usp=sharing

Right here!

Though scope has been changed since we decided to make this an auto-signing process.As opposed to both iOS & Android it's now either Android or RaspberryPI.