Circle-Hackathon / Circle-Hackathon-HK-2023

0 stars 0 forks source link

Circle-HMAC-SHA256:API Security Hardening Solution based on Circle Programmable Wallet #11

Open yanboishere opened 10 months ago

yanboishere commented 10 months ago

Project Name

Circle-HMAC-SHA256

Track

Programmable Wallet

Product Introduction

The Web3 project is at the forefront of fintech innovation in the rapidly evolving world of digital currencies and decentralized finance.

Web3, as a form of application of blockchain technology, is centered on building a decentralized network and application ecosystem, in which digital wallets play a crucial role. Digital wallets are not only the medium for users to conduct digital currency transactions, but also the gatekeeper of their personal property security. With the accelerated pace of asset digitization transformation, the wallet holds not only transaction rights, but also extends to identity authentication, asset management and other fields. Therefore, its security is directly related to the stability and trust of the entire Web3 financial ecosystem.

In the current Web3 financial project, we can see a series of complex financial operations realized through smart contracts. The execution of all these operations in Circle relies on the APIs connected to the digital wallet, and the security of the APIs becomes the first line of defense to ensure the safety of funds, maintain user trust, and prevent hacker attacks.

Circle programmable wallet has powerful functions and flexible programmable features, and it is believed that it can be widely used in the market. However, before its popularity increases, it is indispensable to regulate its security, especially the management and protection of API keys, which has become a key issue that we need to solve urgently.

In response to this background, we have initiated this project with the aim of enhancing the security of the entire Web3 Finance project by building a security hardening solution for the Circle programmable wallet's API keys. Our goal is to ensure that every aspect of the API key lifecycle, including generation, storage, usage and revocation, meets the highest security standards through the latest security technologies and best practices, so as to ensure the security of user assets and the long-term sustainability of the project.

Product Preview Image

Presentation Slides

https://github.com/Web3-Club/Circle-HMAC-SHA256

Code URL

https://github.com/Web3-Club/Circle-HMAC-SHA256/blob/main/src/Circle-HMAC-SHA256.py

Team Information