LEGO Grant Proposal: Decentralized, Privacy-Preserving EDR
This is 1 of 4 proposals in “LEGO Grant Proposal: Fixing Shared Problems Before They Turn Into Lost Funds”
Decentralized, Privacy-Preserving EDR: $30,000
Decentralized, Privacy-Preserving EDR (Auditware) · goal $300,000 · Lido $30,000 (10% of the goal) https://initiatives.thedao.fund/initiative/privacy-preserving-edr
In my opinion, this is one of the most important grants in the whole round.
The theft starts on a laptop. The North Korean groups keep getting us in the same way. OpSec auditors tell every team to run EDR software (Endpoint Detection and Response software, like CrowdStrike that tells you if your computer has been hijacked). Very few crypto teams do it, because commercial EDR sits in the kernel and sends your private data to a vendor. The EDR software available is pretty much the epitome of OG crypto values.
EDR crypto teams will actually run. Auditware, the team the concept was developed with, is building it: open source, self-hostable, in user space on macOS, Windows and Linux, with collected data encrypted unless it matches a detection rule.
Paid only on real use. Half the budget, $150,000, only pays out on adoption and trust: 25+ Web3 detectors, a public review by a recognized Ethereum security organization saying it is safe to install, and 15+ crypto organizations publicly confirming they run it in production.
What Lido gets. Every signer, oracle member and node operator would be able to have EDR software that doesn’t invade their privacy. They can sleep easy knowing if their system gets compromised, they will know, without having to compromise their values.
Budget. LEGO can send the $30,000, to the initiative’s Safe, 0x6178A7ae3f5855D8C902BD68370742E8200B0e48 (Ethereum mainnet, USDC, USDT, DAI or USDS). Or LEGO can pledge it and only send it once the $300,000 goal is fully funded. If that doesn’t happen by February 1, 2027, nothing is sent.
Full proposal: https://initiatives.thedao.fund/initiative/privacy-preserving-edr