Authors: Abbas & Kru
Category: Project Update & Governance Proposal
Proposal Threshold: -3% (team-based)
Requested: $150,000 (audit) + $100,000/month (operations)
Purpose: Mainnet launch preparation, security audits, and operational expansion

Summary

As we approach the final stretch of development for Umbra, we are defining a concrete timeline for our Mainnet launch. This proposal focuses on finalizing security audits, establishing core DAO parameters, and expanding our operational budget for legal, accounting, and security monitoring.

Note: MetaDAO will execute the migration instructions asynchronously. These specific migration actions will not appear in the standard proposal simulation.

1. The Launch Timeline

Private Mainnet (Next Week)

• Rollout Rate: Weekly cohorts of 100 users. Priority for November/December registrants and top token holders. Selected users will receive a DM with a unique access code and TestFlight download link.
• Platforms: TestFlight (iOS), Android APK, and Web Extension.
• Access Control: 6-digit alphanumeric one-time use password sent to verified registrants.
• Safety Limits: $500 deposit limit during this phase to minimise risk while validating the system in a live environment.

Public Mainnet (February)

Following the private phase and final audits, Public Mainnet launches in February. Deposit limits and access gating will be lifted.

2. Governance Proposal: Security, Audit, and Operations

A. Codebase Evolution & Final Security Audit

Since December, the Umbra codebase has matured significantly. We have moved beyond our initial architecture to ship a version that is substantially faster and smoother, featuring an expanded feature set designed for a superior user experience.

Given our tight launch timeline, we solicited expedited quotes from three top-tier firms, receiving proposals ranging from $150k to $370k.

• Vendor: Halborn Security
• Cost: $150,000
• Scope: Complete stress test of ZK circuits and Solana program logic
• Why Halborn: Returning partner with deep context on our architecture, enabling fast and precise execution
• Details: SOW from Halborn Security attached for verification. Upon passing this proposal, final invoices and transaction details will be shared in the governance forum.

You can read more about the scope of work here: (Halborn SOW)

B. Operational Budget Increase

Requested Monthly Limit: $100,000

This increase is driven by three key initiatives:

1. Enhanced Security with Groom Lake

• Cost: $8,750/month (included in the $100k total)
• Purpose: Identify security gaps and enhance security posture across the organization
• Scope: Incident Response, Security Engineering, and Intelligence services
• Details: GL operatives will integrate with the team and unburden Umbra team members from security initiatives

You can read more about the scope of work here: (Groom Lake SOW)

2. Legal Advisory & Accounting

• Vendor: Ascent Partners
• Cost: $6,000/month (included in the $100k total)
• Scope of Services:
  • Core Accounting: Bookkeeping, Financial Statements, and Payment Support
  • Transparency & Insight: Transparency Reporting and Internal Financial Dashboards
  • Strategy & Compliance: Budgeting, Account Policy Creation, Tax Planning, and Account Risk Management

You can read more about the scope of work here: (Ascent Partners SOW)

3. Initial Anonymity Set Seeding

• Cost: $50,000 USDC
• Purpose: Bootstrap the anonymity set to ensure privacy guarantees are effective from Day 1, providing early users with immediate privacy coverage

Trusted Setup

To ensure the highest standard of cryptographic security for the Umbra privacy protocol, we are adopting a robust multi-stage trusted setup:

• Phase 1: Utilizing output of the Perpetual Powers of Tau ceremony (industry benchmark for universal setups)
• Phase 2: Hybrid contribution model:
  • Lower-constraint circuits: Web-based contribution interface for community participation
  • Higher-constraint circuits: CLI-based ceremony with Umbra technical team and prominent ecosystem leaders

Special thanks to Kollan, Proph3t & MetaDAO team for making this proposal possible.