This is 1 of 4 proposals in “LEGO Grant Proposal: Fixing Shared Problems Before They Turn Into Lost Funds”
Production-Ready Local-First Safe UI: $20,000
Production-Ready Local-First Safe UI (open RFP, co-drafted by Griff Green and pcaversaccio) · goal $120,000 · Lido $20,000 (17% of the goal) https://initiatives.thedao.fund/initiative/production-ready-local-first-safe-ui
pcaversaccio and I wrote this RFP together, and I see it as insurance for the whole ecosystem.
One frontend between every team and its Safe. Everything before execution runs through the hosted Safe{Wallet} frontend. That is where the Bybit theft happened: malicious code showed signers one transaction while their hardware wallets signed another. Almost every team on Safe depends on that one interface, and soon Safe’s top security tools are becoming pay to play with SafePro.
A Safe interface you run yourself. This RFP pays for a complete, open-source Safe interface that runs on the signer’s own computer or from IPFS, with nothing but an RPC endpoint and a hardware wallet. Nobody is pre-selected; there is no shortage of great candidates to carry out the task, including the people behind localsafe.eth and Eternal Safe.
Paid only on real use. $55,000 of the $120,000 is tied to adoption: 20+ named teams publicly keeping it as their Safe backup, and the team’s business model earning at least $20,000. Another $20,000 covers 12 months of maintenance.
What Lido gets. Teams get a way to sign and execute on Safe that doesn’t depend on any single company staying honest and online. The RFP requires Safe v1.3.0 and v1.4.1, the versions the LEGO, Treasury Management and Dual Governance Emergency Execution Committee Safes run, so those committees could still sign if Safe’s hosted service were down or compromised. And everyone gets the ability to run a local, trusted UI to double check everything is as expected.
Budget. LEGO can send the $25,000, to the initiative’s Safe, 0x2bC9a3Fe3953E08fA9F322FeA3941B921687bDCc (Ethereum mainnet, USDC, USDT, DAI or USDS). Or LEGO can pledge it and only send it once the $120,000 goal is fully funded. If that doesn’t happen by February 1, 2027, nothing is sent.
Full proposal: https://initiatives.thedao.fund/initiative/production-ready-local-first-safe-ui