This week’s Dev Letter goes over what happened for iExec during the past few months in the field of security. Our smart contracts were audited by Chain Security and the public report is now available. Today’s update also covers mainnet deployment and our future Worker Airdrop.

The iExec Security Audit Report Is Available

The iExec Marketplace is currently live and running. Before a mainnet launch, it was of the utmost importance for us to run extensive technical due diligence tests on our smart contracts, and undergo a rigorous independent review.

The strategy for testing our PoCo algorithm was to first cover the nominal use case with truffle tests. Thanks to the solidity-coverage, we have taken each contract and each function of each contract to be certain that we’ve covered 100% of all our lines of code.

This strategy required 185 truffle unit tests (28,000 lines) to cover the 2,000 lines of smart contracts code, 73 coffees and some long nights of hard work!

We afterwards performed a static analysis with Oyente, which is an analysis tool for smart contracts.

The final step of our security audit was to be analysed by both automatic tooling and expert auditors. For this matter, we chose to collaborate with Chain Security.

Chain Security is composed of blockchain experts from ETH Zurich that have developed tooling to automatically analyze known vulnerabilities. You can watch the introduction video of their solution during Devcon3 here.

In addition to their automatic tooling, they have provided us with custom analysis and expertise on our smart contracts. It was a very smooth collaboration and a real pleasure to exchange with the Chain Security experts. They have understood quickly the ins and outs of what we were building.

Armed with all the knowledge needed, they have produced within a short time frame a detailed report deeply analyzing our code. This report is public and open for everyone to read through.

The Marketplace V2 Contracts Deployed on Mainnet

Now that we have bulletproofed our smart contracts, you may ask us: “when mainnet?”.

We’ve promised it will be in June.

It is done! 🚀

The iExec Marketplace and iExecHub V2 Contracts have been succesfully deployed on Ethereum’s mainnet. You may see this last release on the Poco Github:

The next steps consist of deploying all the current worker pools on mainnet. Some testnet worker pools will remain active (Kovan, Dev, Bench) for developers to utilize in a transition phase. A first public worker pool will be deployed for the purposes of our next Worker Airdrop.

Connect Your Machines and Earn RLC

To celebrate this mainnet launch, a Worker Airdrop will be organized soon!

This worker airdrop is an opportunity for you to register your machines as public workers before the official release of public worker pools in September. You’ll be able to run works and get rewarded in RLC. Some random works will have an inflated amount of RLC attached to them for you to seize.

In the coming weeks, we will configure a workerpool specifically dedicated to this contest. We will choose an application for the airdrop, define an RLC reward policy for participating workers, dry run it on test network and test workers beforehand, prepare out-of-the-box worker clients in order for everyone to participate, prepare the associated marketing… and launch it. Stay tuned for more details!

iExec at Data Cloud 2018, Monaco