Security

Gitcoin & KERNEL Fellowship

About Gitcoin

We’re on a mission to build an internet that is open source, collaborative, and economically empowering.

We are creating community and infrastructure for Web 3 — a diverse range of tools, technologies, and networks that enable people to work for the open internet.

By funding projects, building community, and making learning resources accessible, we are teaming up to create the digital public infrastructure of tomorrow.

KERNEL is an 8-week, invite-only program for top tech talent looking to build relationships, products, and companies in blockchain and Web 3. It is foremost a community initiative, supported by Gitcoin.

You can apply for the next block of participants here: https://apply.kernel.community/. 

Curious about the Gitcoin KERNEL fellowship? Have look at Mikko Ikola's write-up about his experience of the 8-week program!

One of the sub-tracks available is the security track. Please note that they also have a free learning track 🌱.

Syllabus of the security track:

  • Week 1 — Web3 differences from traditional security (w/ Corey)

    • zero trust models everywhere
    • data responsibility is on the end user
    • “there is no castle”
    • pyramid of pain

  • Week 2 — Automated Tooling (ToB / Dilligence)

    • what is automated tooling good for?
    • invariant definition
    • CI/CD
    • Tooling available

  • Week 3 — Manual Review (ToB / Diligence)

    • why is manual review necessary when there is so much automated tooling available
      • architectural overview
      • intent
      • the human factor
    • risk assessment / threat modeling

  • Week 4 — Process Quality (Rex)

    • the development process
    • preparing for an audit
    • documentation

  • Week 5 — Org Security (Mehdi)

    • zero trust models
    • oversight
    • incident response
      • failure mode plans
    • red/blue teaming
    • education

  • Week 6 — Monitoring / Alerting (OpenZeppelin)

    • CI/CD
    • Asset monitoring
      • on-chain
      • off-chain
  • ToB = Trail of Bits
  • Diligence = ConsenSys Diligence
  • Gitcoin is not the first organisation fostering growth in the crypto, but they are one of the most prolific in the area (or at least, it's a name I often see popping up, i.e. besides all the crypto venture capital companies 😏)