BlogChain by Adil Kazani

Delivering interesting content every single week on Web3, Security, Crypto, NFTs and AI. It's FREE, Takes less than 5-minutes to read, and you are guaranteed to learn something. Let's front-run the opportunity!

Delivering interesting content every single week on 

Web3, Security, Crypto, NFTs, Privacy & AI

, and you are guaranteed to learn something. 

Subscribe to get valuable News, Useful Resources and Insights every week to your Inbox!

Presearch is a decentralized search engine that protects your privacy, rewards you with cryptocurrency and delivers great results. Built for We the People.

Switch to Presearch and protect your privacy!

 is a groundbreaking platform that transforms internet searching. It operates as a decentralized search engine, aiming to empower users, safeguard their privacy, and enhance the search process. 

This system relies on nearly 70,000 user computers (nodes) across over 100 countries.

In an era dominated by large-scale Big Tech search engines, 

 distinguishes itself as a user-centric, privacy-focused, and community-driven alternative.

Conventional search engines face censorship risks and engage in extensive user data collection, compromising privacy. They also track and profile users for profit, essentially controlling global access to information.

, emphasizes the need for a search engine crafted by and for the people. Such a system must prioritize privacy, resist censorship, and operate on decentralized infrastructure to ensure resilience. This is the vision guiding Presearch's development.

Presearch is a search engine built on blockchain technology, committed to preserving user privacy and autonomy while offering incentives. Unlike traditional search engines, Presearch does not monitor your online behavior or trade your data to advertisers. Instead, it empowers you to shape your search experience by selecting your preferred search engine and tailoring your results.

In contrast to centralized search engines where users are commodified and traded to the highest bidder, Presearch adopts a different approach. Here, Presearchers retain ownership of the value generated from their web searches, a concept known as "

, the currency underpinning the Presearch ecosystem.

Moreover, these PRE tokens serve as incentives for individuals worldwide who operate Presearch's node software. These nodes, fueled by decentralized computing resources, power the search engine, departing from the model of large data centers employed by conventional search engines.

Advertisers participate by paying for ads in PRE tokens, closing the loop on the project's value ecosystem. The ultimate aspiration is for Presearch to become a platform characterized by resilience against censorship, independence, and antifragility, akin to 

: Your Presearch searches remain private and untracked, ensuring that your data isn't utilized for creating personalized profiles or targeting advertisements.

: Presearch provides users with the convenience of selecting from over 100 diverse search providers via a single click. This flexibility empowers you to obtain the results you desire.

: Presearch incentivizes users with PRE tokens for active engagement on the platform. These tokens can be staked, traded, or utilized to access additional benefits within the ecosystem, including AI-driven search capabilities.

: Presearch is driven by community funding and actively involves its user base in governance through the Presearch Foundation.

: Built upon blockchain technology and user nodes, Presearch operates on a decentralized infrastructure. As the project evolves, it will transition to full open-source status.

: Presearch's latest offering, PreGPT AI, currently harnesses the capabilities of OpenAI. However, the project is actively developing a decentralized AI solution designed to operate on the Presearch nodes.

: The Search API empowers other search engines, applications, and AI systems to utilize Presearch results, expanding its reach across various digital experiences.

: Search staking enables users to earn enhanced rewards for their Presearch searches. By staking a minimum of 1000 PRE tokens, you can access elevated rewards for up to 25 searches per day.

: Introducing a concept unique to Presearch, keyword staking allows companies to increase their website traffic by staking PRE tokens. The advertiser with the highest token stake has their ad displayed when their chosen keyword is searched. Advertisers retain the flexibility to withdraw PRE tokens at any time, making traffic acquisition cost-effective. The minimum amount for keyword staking is 100 PRE. 

: Nodes play a pivotal role in powering Presearch search results by providing computing resources. Node staking permits individuals to contribute to request processing within the Presearch ecosystem and earn rewards in return for their node operation efforts. The minimum staking requirement for nodes is 4000 PRE per node.

Founded in 2017, Presearch's mission is to deliver a user-centric, decentralized search engine that prioritizes privacy, choice, and community involvement. This platform is underpinned by blockchain technology and driven by a dedicated global community of users and developers.

Imagine getting paid for asking Google a question...

Introducing Presearch.com | The First Decentralized Search Engine

If you're enjoying today's newsletter, why not share it with your friends? They might find it just as informative and entertaining as you do.

Sharing is caring, and by spreading the word about this newsletter, you're helping to support ME and ensure that more great content gets produced in the future. Plus, you'll get to have even more conversations with your friends about the interesting topics covered in each edition.

There are three ways to show me that you enjoyed reading this article:

Protect your privacy, defend online freedom and earn cryptocurrency rewards. (5 mins read)

teleyinex.eth

Scam links pose a significant risk in the world of cryptocurrency, especially when it comes to minting new tokens. A few days ago, Vitalik's Twitter (or X, or whatever) account  was hacked, and a tweet message was posted:

The link is fake, but some people will not notice it because the Twitter card shows phony information, and people will try to claim it. Then, bad things happen.

Several red flags can help identify potential scam links. However, they involve a lot of effort, and usually, people will not check it. This is where wallets should start catching up ASAP because the safety of everyone is paramount, especially within the web3 ecosystem.

The trick in the previous tweet is that you can put any information in that card, so people can jump without checking anything. The subtle change of the domain is difficult to catch, and as this tweet comes from a genuine verified (sigh) account on Twitter, most people will trust it without double-checking.

Impersonating prominent people is one of the most successful vectors because people usually trust anything they publish. But when an account gets compromised, the links they publish should be verifiable so the users (or even better, the wallets) can double-check if the posted link is valid for the smart contract they are promoting.

Using GPG for signing and verifying minting links

In my head, the only feasible solution was to use GPG so creators, especially smart contract developers of NFTs, could sign their official site with their private key, and anyone could verify it using its public key. In this way, as users, we will be able to verify the posted link once we open it in our browser, or even better, before doing that, we could verify the link is legit because 

If the Twitter account gets compromised, they could publish a malicious link, but it will be much harder to sign the link unless they have hacked the user's laptop and password to unlock it. If we wanted top-notch security, this could be even "impossible" if the GPG key is stored in a Yubikey, as you will need again to steal the actual hardware and the pin to access it. 

While this sounds safe, I was missing the web3 approach to it. And then, I discovered 

Using attest for signing and verifying minting links

 you should check it out. This fantastic solution allows you to create, verify, and revoke on/off-chain attestations.

The exciting part is that you can create a schema that could be re-used by other projects and improve the security among the NFT community.

 site has several schemas that you can directly use. For example, a simple way of attesting links would be using the Website URL schema:

With this schema, then you can do an attest that can look like this:

With this schema, we can, as the owners of our NFT contract, attest the official link to our minting project. We will use our wallet address, the same that deployed the contract, in the 

 we will use the just deployed contract address.

Then, ANYONE can verify that the link is valid and safe because 

only the contract deployer would be the one attesting to a valid link to the contract she just deployed

This will be as secure as the wallet and the person who manages it. While soft wallets will be mildly secure, the best way would be with a hardware wallet or, even better, a multi-sig wallet. In the last two cases, only by stealing the hardware wallet and knowing the pin or hacking the multi-sig wallets would it be possible to publish a fake link to the minting site.

The best part of the attestations is that you can do them on-chain, so the wallets could verify this automatically when you are trying to mint to warn you or even forbid you to sign any transaction to protect you from fake links.

Now you might wonder: what if the link has expired, or if we want to change it? If the link has expired or has been updated, they can always revoke the attestation and create a new one with the updated URL.

Signing links could be the way to build trust within the NFT community, especially for those projects that have tons of users. When they have to publish a new project, they have to tell people to check retweets from other founders and double-check on Discord to know that the link is legit and none of the owners' accounts have been hacked (this has happened so many times on Discord that I've lost the count).

The process will be as simple as publishing the link and the attestation so anyone can verify that the attest was created by the wallet that deployed the contract and that the contract's owner is the attestation recipient.

Learn the best practices for secure minting and protect yourself from scam link threats.

Ensuring secure minting amidst scam link threats

 No need to run any compiled software on your system, just run the generated scripts using Terminal.

Enforce Privacy & Security Best-Practices on macOS Using Terminal in 15 minutes

Crypto Sapiens

Decentralized Autonomous Organizations (DAOs) have garnered significant attention in the Web3 space for their potential to revolutionize organizational structures and decision-making processes. With the rise of blockchain technology, DAOs offer a new paradigm where membership tracking, governance, and treasury management can be executed in a decentralized and democratic manner. However, navigating the legal landscape surrounding DAOs presents unique challenges due to the nascent nature of this technology. In the latest episode of Crypto Sapiens, 

 engages in a thought-provoking conversation with 

Joshua Hale, a lawyer from Fungibility Group

, to shed light on the legal considerations and frameworks for DAOs.

Adam talks about his journey into the crypto space, starting with his discovery of Bitcoin after reading about the Silk Road and eventually transitioning to Ethereum and becoming interested in DAOs. He left his corporate job to start MIDAO, a company that provides legal and regulatory frameworks for DAOs. Josh discusses his background in startups and how he got introduced to crypto through a client who wanted to explore a project similar to CryptoKitties. He shares his experiences as a crypto lawyer, the challenges he faces, and the excitement he finds in the Web3 community. The conversation touches on their personal experiences, including attending conferences and events related to the crypto industry.

Rachel starts the discussion by seeking a concise explanation of what a DAO is and why it has gained significant attention in the Web3 space. Adam defines DAOs as organizations that utilize blockchain technology for membership tracking, governance, and treasury management. He emphasizes that DAOs enable decentralized and democratic structures, allowing for rapid scaling, fundraising, and decision-making processes at a significantly reduced cost compared to traditional organizations. Rachel adds that DAOs combine the best aspects of Web2 and Web3, enabling organizations to leverage both traditional and decentralized approaches to achieve their goals. Rachel shares her perspective on the importance of individual compliance and the value of working with organizations like Opolis to ensure tax compliance and benefits. They also discuss various core principles of DAOs, including voting and governance, blockchain technology, decentralization, and collective vision. 

Transitioning into the legal considerations for DAOs, Rachel raises the question of how DAOs can incorporate and whether there are unique aspects that differ from traditional corporate structures. Adam, while clarifying that he is not a lawyer, mentions the work MIDAO has done in the Marshall Islands, creating a DAO Limited Liability Company (DAOLLC) that accommodates the needs of DAOs. He highlights that DAOs diverge from traditional corporate structures by eschewing the need for physical addresses, stock certificates, and hierarchical management positions. Instead, DAOs leverage on-chain governance and smart contracts for decision-making and utilize algorithms for vote counting. By adapting the existing legal framework in the Marshall Islands, DAOs can enforce decentralization while mitigating liability for individual members.

Josh, the legal expert, provides additional insights into the legal considerations for DAO incorporation. He emphasizes the importance of assessing the needs and goals of the DAO project when choosing a jurisdiction for incorporation. While the Marshall Islands has been proactive in embracing DAO-specific legislation, other regions, such as Malta and certain states in the United States, have also shown interest in creating DAO-friendly regulations. Josh stresses the significance of seeking legal advice to navigate the incorporation process and comply with jurisdiction-specific laws and regulations. Rachel emphasizes the importance of lawyers like Josh in navigating the complex tax and regulatory landscape of the crypto space. The discussion touches on the evolving nature of DAOs and their integration of centralized and decentralized elements.

Challenges and Opportunities for DAO Governance

The conversation then delves into the challenges and opportunities for DAO governance and collaboration. Adam highlights the distinction between evolutionary DAOs, which aim to fit within existing legal frameworks, and revolutionary DAOs, which seek to challenge and subvert established governance structures. Rachel adds that DAOs should adapt their governance models to align with their unique goals, emphasizing voting and governance mechanisms, the use of blockchain technology, decentralization, and a collective vision as core principles.

Josh notes the importance of considering collaboration and decision-making within a DAO. He points out that not all participants may naturally collaborate, leading to inefficiencies or stagnation. Contractual agreements and smart governance mechanisms can play a vital role in ensuring smooth operations and providing effective leadership and accountability within DAOs. The conversation highlights the need for legal frameworks and governance structures that strike a balance between democratic participation and efficient decision-making.

Future Outlook for DAOs and the Legal Landscape

The discussion concludes with a look at the future of DAOs and the evolving legal landscape surrounding them. Adam expresses optimism, noting that more jurisdictions are recognizing the importance of DAOs and working on creating supportive legal frameworks. He cites ongoing developments in the Marshall Islands, Malta, the European Union, Japan, and Switzerland as examples. The legal landscape will continue to evolve to provide clarity and support for DAO operations. Josh adds that Malta has been at the forefront of DAO legislation since 2018. However, they both emphasize the importance of carefully evaluating the options available in different jurisdictions and considering the specific needs and goals of the DAO project.

The conversation also touches on challenges and considerations related to collaboration, decision-making, and governance within DAOs. They discuss the importance of contractual agreements, smart governance mechanisms, and balancing democratic participation with effective leadership and accountability.

Josh shares his perspective on the future, emphasizing that the survival and resilience of cryptocurrencies such as Bitcoin and the crypto industry, despite regulatory challenges, can contribute to increased adoption and value appreciation. He also shares his overall optimism about the future of DAOs, highlighting their potential for innovation, collaboration, and decentralized decision-making. He underscores the importance of adapting to changing regulatory environments and the potential opportunities they present for DAOs. The conversation concludes by highlighting the transformative potential of DAOs in fostering collaboration, innovation, and decentralized decision-making in various industries.

Stay Connected: Resources and Final Thoughts

DAOs represent a paradigm shift in organizational structures and decision-making processes, enabled by blockchain technology.  As highlighted in the Crypto Sapiens episode, the legal considerations for DAOs are multifaceted, encompassing incorporation, HR compliance, and jurisdictional nuances. While challenges exist, various jurisdictions are actively working on DAO-friendly regulations to support their growth. While the legal landscape surrounding DAOs poses challenges, efforts are underway in various jurisdictions to establish DAO-friendly frameworks. Incorporation processes, governance models, and compliance with jurisdiction-specific laws and regulations are crucial considerations for DAOs. By blending the best of Web2 and Web3, DAOs have the potential to drive innovation, collaboration, and democratized decision-making across industries. As the legal landscape continues to evolve, DAOs will benefit from clearer frameworks and enhanced support, paving the way for their widespread adoption and long-term success. By adapting existing legal frameworks and leveraging contractual agreements and smart governance mechanisms, DAOs can navigate these challenges while remaining true to their democratic and decentralized principles. The future of DAOs looks promising, with increasing adoption and regulatory developments paving the way for innovative and collaborative organizational models.

Rachel expresses her gratitude to BanklessDAO and Opolis for supporting the show. She invites viewers to check out the links in the description to learn more about Bankless and join their community. She mentions that BanklessDAO is a great starting point for those interested in getting involved in Web3, with various guilds and projects to explore. Rachel also mentions her work at Opolis, a digital employment cooperative that offers services to individuals working in the Web3 space. Interested viewers can click the link in the description to learn more about 

. Thanks again for tuning in, and we encourage everyone to stay tuned for the next episode of Crypto Sapiens.

https://bookme.fungibility.group/free-non-client-consult

If you're interested in learning more about joining Opolis, a platform that supports the production of season eight of Crypto Sapiens, we've included a referral link in the description. Take a look and explore the possibilities it offers.

Before we wrap up, we want to emphasize the importance of following and

. We also have a podcast that you won't want to miss. By staying connected with us, you'll be sure to receive the latest updates, valuable content, and thought-provoking discussions.

To stay up-to-date with everything happening at Crypto Sapiens, make sure to visit our website

It's a great resource for accessing additional information, exploring past episodes, and discovering more about the fascinating world of blockchain and Web3.

Legal Considerations and Frameworks for Decentralized Autonomous Organizations (DAOs)

Say Goodbye to Privacy Concerns and Embrace NextDNS for Unparalleled Online Security

What Is NextDNS And Why You Should Set Up & Configure On Your Phone Right Now!

Thumbs Up (Finance)

Hello from the other side

Thumbs' Update: Out of Office

Author Allen Taylor

The news and views of author Allen Taylor featuring insights on travel, Web3, Christianity, and speculative fiction.

Collect this post and receive an airdrop of 200 free Taylor Tokens ($TAYL) to your wallet. To learn what Taylor Tokens are, read to the bottom of the post.

After studying Web3 for several years and having written two books on the subject, I've come to the conclusion that Web3 is definitely the next phase of the internet. That doesn't mean that everyone will onboard onto Web3 right away. It's likely that some net citizens will linger in Web2 for a while. In fact, most of us will likely have one foot in Web2 and one foot in Web3 until there's no sense pretending Web2 shouldn't be relegated to history. That could be a decade, or more.

I think there are several good reasons why Web3 is the future of the internet. That doesn't mean it will be perfect, but it will be better than what we have now. Here are 5 reasons the future of the internet is Web3.

The journey into Web3 will not involve a big splash, just as the migration from Web1 to Web2 did not happen overnight. The transition from Web1 to Web2 took place over several years and through several significant developments. I outline this process in 

. By the same token, the transition from Web2 to Web3 will be gradual and involve several different steps that benefit creators and fans in many ways.

4 Pillars of Content Monetization in Web3

Web3 is about more than content monetization, but content monetization is a big aspect to the emerging Web3 ecosystem. Here are the 4 pillars to Web3 content monetization:

It remains to be seen which of these monetization methods will be the dominant one going forward. Each has their pros and cons. I'd be willing to bet DAOs are here to stay, and it's likely that rewards will be an earning method over the long run. NFTs will likely see renewed interest during the next bull run, but as a long-term play, they may not have much earning power unless creators make NFTs with some sort of utility. The utility will drive the earning power. Social tokens are likely hit or miss as the SEC seems to have its sights set on destroying any value social tokens may have for creators. 

For me personally, I'm experimenting with all four of these monetization tactics. So far, rewards have proven to be the 

, but I've been working that model longer than the others. 

I've managed to earn a little bit of DAO money, but some of my tokens, such as CABIN, can't be sold. I've begun exploring literary NFTs, and so far they've done well in the short time that I've been creating them, mostly on Layer-2 solutions Optimism and Polygon. Whether income from NFTs will be consistent for me will depend on whether I can attract a loyal following and fanbase who are into collecting NFTs. I've noticed that NFT collectors and rewards chasers are two very different audiences, so focusing efforts on both sides of that coin makes sense. Recently, I issued 

, and I'm anxious to see how that plays out in the next few months.

Earning power in Web3 will be predicated in large part on creators' ability to build and maintain a community around their creations. Frankly, as a committed introvert, that scares the hell out of me, but I'm willing to give it a try.

Check Out Some Ways I Monetize My Content

The following are not all Web3 monetization platforms or protocols, but I list these as an invitation to check out my content, in both Web2 and Web3.

Cryptosocial: How Cryptocurrencies Are Changing Social Media

 was my first book on Web3 social media. Some of the information is outdated, but it's still a good book for people new to blockchain technology and Web3 social media. Heavily referenced.

Cryptosocial [Taylor, Allen] on Amazon.com. *FREE* shipping on qualifying offers. Cryptosocial

Cryptosocial

Cryptocurrency & Social Media Have Married and This is What It Looks LikeSocial media is a multi-billion-dollar industry where the platforms profit from user-generated content. Cryptocurrencies have arrived to end the exploitation.Cryptosocial&#58; How...

Cryptosocial: How Cryptocurrencies Are Changing Social Media|Paperback

Cryptosocial by Taylor, Allen and a great selection of related books, art and collectibles available now at AbeBooks.com.

Cryptosocial - AbeBooks

ThriftBooks sells millions of used books at the lowest everyday prices. We personally assess every book's quality and offer rare, out-of-print treasures. We deliver the joy of reading in recyclable packaging with free standard shipping on US orders over $15. ThriftBooks.com. Read more. Spend less.

Browse | New & Used Books from ThriftBooks

Browse and shop for books, home décor, toys, gifts and more on indigo.ca. Free shipping with orders over $35 and free ship-to-store.

Cryptosocial in all shops | chapters.indigo.ca

Cryptocurrency & Social Media Have Married and This is What It Looks Like Social media is a multi-billion-dollar industry where the platforms profit from user-generated content. Cryptocurrencies have arrived to end the exploitation. Cryptosocial: How Cryptocurrencies Are Changing Social Media surveys the history of social media and cryptocurrencies to show how these two unrelated technologies had a chance meeting that is changing the world.

Get the Interactive Book App for the Business Experts Press (BEP) book, Cryptosocial, by Allen Taylor. Use the online software app with your team and organization to create action plans based on the book.

Cryptosocial (Interactive Online eBook) | Praxie

Web3 Social: How Creators Are Changing the World Wide Web (And You Can Too!)

Web3 is emerging to expand the opportunities for creators by delivering tools that help them regain their content freedom, monetize their content better, safeguard their personal data, and fight back against censorship.

Amazon.com: Web3 Social: How Creators Are Changing the World Wide Web (And You Can Too!): 9798887592954: Taylor, Allen: Books

Check out this great listen on Audible.com. In this fast paced world of the internet, how can you make sure you are leaving your mark? Since 1990, the World Wide Web has developed through three phases. The read phase gave individuals and companies a platform for publishing on a broader scale than ...

Web3 Social

Experience, collect and trade digital stories while supporting your favourite authors.

Write, Read and Collect Stories and Books

Diamonds and Pearls: The History of the Top 10 Cryptocurrencies

In-depth news digests cataloging what's going on in crypto, Web3, and the decentralized web. With branded snark and commentary you won't get anywhere else.

Taylored Content

Why I decided to create the Taylor Token, how to get some of your own, and what you might be able to do with them once you have some $TAYLs.

$TAYLs: How to collect Taylor Tokens right now.

Feel free to connect with me on the following Web3 publishing platforms.

If you like this post, show me some love. There are three ways to show me that you enjoyed reading this issue of Web3 Writings.

4 pillars of content monetization: Which will dominate?

Why Web3 Is the Future of the Internet

Understanding BIP39 and Your Mnemonic Phrase

What is a BIP39 Passphrase?

Spearbit

Designed to execute EVM logic with full parity as quickly as possible

Arbiter - EVM Logic Simulator for Security and Performance Testing

Cantina

The first marketplace for web3 security. We've aggregated the security talent and solutions so you don't have to.

An emphasis on security is a function of maturity in any sector, people don't buy locks until they have something to protect. As many users and developers know all too well, smart contract risk is an issue that has plagued virtually every sector of the crypto space, resulting in loss of funds and trust. Achieving high-security standards is paramount for blockchain technology to expand and mature successfully. Can we ensure every piece of code is perfect? No. Can we improve the market to raise the industry’s collective security posture? Absolutely.

How to most effectively connect projects with tier 1 security researchers and firms? And beyond that, how to match them with experts in the specific kind of codebase they are working with at a price point that doesn’t break the bank?

Current security offerings aren’t providing an adequate solution, at least not at scale, and this is evidenced by the 

sheer amount of hacks we’ve seen in the space

We’re building Cantina, a first-of-a-kind security services marketplace connecting the top security researchers and solutions with clients to solve this issue and redefine how security reviews are done. Let’s dive into why we built Cantina and the gap it will fill in the blockchain security market. 

First, let’s explore the current landscape. 

Through extensive on-the-job experience, talks with developers, and building up one of the industry’s top security researcher guilds, our team has compiled the issues commonly facing both sides of the security market. 

Those seeking security services typically have a few common objectives: 

Security service providers can be divided up into a few categories:

Let’s take a look at how the existing landscape stacks up.

Going with a large, well-known crypto security firm may provide the desired optics and decent quality, but it has drawbacks regarding cost and specialized expertise. While having a big-name firm attached to your code might look good from a marketing standpoint, the top priority is always to stay off the Rekt Leaderboard. If you click into some of the exploits on there, it’s clear that these firms aren’t preventing major security issues effectively. There are few large-scale firms relative to the number of protocols in need of security reviews, and this centralization of security services hasn’t been the most successful model.

Senior security experts don’t want to deal with the unfavorable pay structure of big firms, where the researchers only see under 10% of the pay for a given contract. Add in the lack of flexibility with hours, and it makes sense why a big chunk of the top talent will typically be found outside of these firms. At the end of the day, Large firms don’t scale effectively, and the end consumer pays a premium for the ‘big name’ instead of a quality security review. Reputable security researchers tend to make these brands known, but without the proper incentives in place, they inevitably leave, and clients are left wondering what happened to the quality of the shop. In the past two years, this trend has accelerated as more options arise for researchers, and Cantina is embracing the shift.

Platforms like Code4rena, Sherlock, Immunify, and plenty of others host audit competitions, inviting all levels of security researchers to find bugs. One issue for clients here is that these services produce duplicate findings since competitions attract a bunch of researchers working independently. This is also inefficient for participants as the client isn’t going to pay out multiple times for the same finding. Ultimately, competitive reviews don’t incentivize top talent to stick around and don’t provide the same depth of coverage as a coordinated team.

Boutique firms are small shops that perform audits and security reviews and typically have an excellent team in house. While these firms often perform great reviews, they are naturally supply constrained and, consequently, fetch a high price from clients who wait in long queues. Moreover, these firms don’t have the resources to invest in business development and sales pipelines, which can make it challenging for them to meet the needs of higher touch clients.

Finally, there’s the world of independent researchers. This is often where clients will find tier-1 talent; as with any industry, the best want to work for themselves. However, this subsection of the market presents its own challenges. Establishing a reputation as an independent researcher can be tough. These researchers are even more supply constrained than boutique firms, and they don’t usually have the legal resources to deal with challenging situations. Ultimately, it’s a trust issue on both sides of the table; clients need to know they’re getting quality work, researchers need to guarantee they get paid. These factors often hold back independent researchers and small guilds from accessing major deals, as they don’t have the resources and/or recognition to land large deals. 

Incubated by Spearbit, one of the industry’s most successful and prestigious security guilds, Cantina was built to remedy these issues. Cantina’s curated marketplace approach has been guided by working with hundreds of independent researchers and small groups daily at Spearbit, a firsthand look at the current issues with the crypto security industry. Spearbit coordinates a network of 100+ vetted and independent security researchers to service the security needs of big-name brands including OpenSea, Polygon’s zkEVM, and Optimism.

Put simply, we can see the massive potential for improving the blockchain security landscape by connecting the right talent to projects in need. 

As the space matures, users will demand stronger guarantees of protocol security, and bugs/exploits must be mitigated for mass adoption to be realistic. Creating a security service marketplace allows top talent to connect with a broader universe of prospective clients, get paid appropriately, and operate on a more flexible schedule. The platform also handles legal and administrative processes, vetting clients and researchers to ensure contracts are coordinated smoothly. 

For those looking to take on contracts and monetize their smart contract security expertise, there are plenty of reasons to join Cantina. It's a place to build and display a public track record of your work and get your name in front of prospective clients without having to search them out. The pay distribution is much more favorable compared to working for a large firm (graphic goes here

On top of the economic advantages, your schedule is in your hands, as you can take on projects at your discretion. 

Lastly for researchers and guilds, Cantina has you covered on the legal and administrative side of the business. Our experienced team vets potential clients, and legal resources are available in the event of a contract dispute. Cantina wants to make reviewing code as easy as hosting on Airbnb. On Cantina, security researchers can focus on what they do best, reviewing code and preventing new additions to the Rekt Leaderboards.

On the client side, Cantina is the ‘bang-for-your-buck’ solution for teams in search of security services. Where else can you handpick from a curated group of tier 1 security experts, get multiple bids, and pay less than you would for a large audit firm? The talent available on Cantina allows you to find experts for your specific code. Cantina’s goal is to be a one stop shop for your security needs - no more months of shopping around with brand name security firms or hoping the bounties you put out catch everything. 

Get the best selection all in one place and reduce your security engagement timeline so you can ship faster.

We're kicking things off with a public goods security review to demonstrate the power of Cantina and contribute to the security of one of the most widely used codebases out there. The project is a multiple week security review of the Solady Solidity Library and will be the first public goods security review in crypto. We’ve started raising funds through sponsorship and crowdfunding to put together the dream team on Cantina. Public goods like Solady benefit the community greatly, but with no entity behind it, funding a full scale security review would typically be out of the question. 

For the platform itself, we’ll be releasing more details on the key features soon, and shortly after, Cantina will open up for security researchers, guilds, and clients. Join us on Twitter and follow here on Paragraph as we roll out all the information and updates heading into the launch. For potential clients and researchers, sign up details will be live soon at 

About Cantina: The first marketplace for web3 security. We've aggregated the security talent and solutions so you don't have to. Find the expert researchers that fit your needs at a price that doesn’t break the bank. 