FAQ
Contents​
Fundamentals​
What problems does Drosera solve?
Monitoring systems are expensive and challenging to build and maintain. Drosera aims to solve this problem by providing a platform which enables developers to easily create these systems at a fraction of the cost.
The DeFi ecosystem has been rife with exploits and vulnerabilities. Drosera aims to mitigate these risks by providing a decentralized and trustless emergency response infrastructure for Protocols.
The DeFi ecosystem has been rife with exploits and vulnerabilities. Drosera aims to mitigate these risks by providing a decentralized and trustless emergency response infrastructure for Protocols.
What is a "trustless decentralized network"?
A trustless decentralized network is a network that does not rely on a single entity to maintain the network. It is a network that is maintained by a group of independent entities that are incentivized to maintain the network through rewards and slashing.
Does an Operator need to be an Ethereum Validator?
No, Drosera does not require an Operator to be a Validator. It only requires the Operator to broadcast the results of its computation and perform submissions. However, an Operator may prefer to use their own Validator to reduce latency when interacting with the execution client and not relying on 3rd party RPC providers
Technicals​
How would protocol owners give Drosera access to their protocols pause button or emergency response mechanisms?
A simple require statement that checks that the caller of the function must be the Trap contract created by the protocol itself.
require(msg.sender == trustedContract, "Caller is not a trusted contract");
Are there any limits on the type of functions an emergency response could invoke or is that determined by the Trap creator?
Determined by the Trap creator and constrained to be objectively triggered by the validation logic.
Effectiveness​
What percentage of exploits would Drosera be able to detect and mitigate?
Using the historical knowledge of previous exploits that have been conducted in the ecosystem, we believe that Drosera can detect the majority of exploits. Even with liquidity siphon detection and state data monitoring, Drosera should be able to cover a high percentage of the exploits seen in space. In a containment and mitigation context, we see this number approaching 90% efficacy, which equates to impact on $3.4 billion of the $3.8 billion in lost funds last year alone.
How effective is Drosera at preventing exploits?
Prevention is only possible with centralized mechanisms which is an attack vector within itself. It inherently introduces censorship and breaks composability. Drosera is designed to be a decentralized and trustless automation protocol that provides emergency response infrastructure to Ethereum. It is not designed to prevent exploits, but to contain and mitigate them.