Governance Bot Improvements
Context
As many of you know we host a bot which can poll proposals directly from the chain and post it into discord, well formatted and tag a specific role to inform about the new proposal. This reduces the headache of the team to post every proposal manually.
Not only that, it has all the necessary links:
- Link to proposal on explorer
- Link to keplr where one can connect their wallet and vote
We are currently hosting it for around 14 cosmos chains:
- Axelar
- Agoric
- Osmosis
- Evmos
- Gravity Bridge
- Juno
- Asset Mantle
- Stargaze
- Umee
- Regen
- Omniflix
- Quicksilver
- Planq
- Paloma
Improvements
Auto Publish
Now, it can auto-publish the messages it posts, and they will be cross-posted in all the servers that are following the channel. This was a feature highly requested by the community and other validators as many people were relying on our bot to get notifications for new proposals. Many of them were aggregating messages from different channels into their own proposal channels.
Some servers had auto-publish bots, but many didn’t, so we made sure that our bot comes as a complete package and didn't have a dependency on any other feature. With cross-posting enabled, every new proposal will be posted in all the other servers and channels that are following it.
Spam Protection
The bot posts the message into Discord as soon as a deposit is made and the proposal goes into the voting state. This was done specifically to avoid spam proposals, since it takes only a transaction fee to post a proposal on-chain, but it takes a significant economic value, aka deposit amount, to move the proposal to the voting state.
However, due to recent market conditions, this deposit amount no longer holds as much significant value. Consequently, some scammers have tried to take advantage of this and have taken the opportunity to post spam proposals with malicious links on-chain, to trick users into thinking it's a legitimate proposal and scam them. One such example is:
To counteract this, we aggregated tons of data and coded an API over it, to which our bot could send requests to determine whether a proposal is likely to contain any malicious URLs or not. For security purposes, we won’t disclose the code and logic of this API, but we have managed to detect spam proposals with over 99% accuracy using it.
So whenever there is a proposal with a malicious link posted on-chain, our bot does not post any malicious links. Instead, it warns the community that a certain proposal is likely to be malicious, advising them to avoid interacting with it.
This proves our dedication to serve the community and provide the best of our services to all the networks we validate on. We've made a ton of new internal optimizations in the bot, but those might be too mundane to make it into a blog post.
If you like this bot and want to get it hosted for your server, be sure to reach out to us via the Contact Us form.