Quantstamp Receives Multiple Layer 2 Community Grants from Ethereum Foundation

Quantstamp Announcements
Share this article:

Quantstamp is excited to announce that we recently received three layer 2 Community Grants from the Ethereum Foundation Ecosystem Support Program.

Open for 6 weeks, 130+ applications were submitted across various categories including explorers, cryptography, and education. Quantstamp received grants in three categories: Cybersecurity, Data Analysis, and Data Visualization.

Below you will find a bit more about what these projects involve and what our team hopes to achieve with each initiative.
‍

🔒 Cybersecurity // Rollup Security Framework

The Rollup Security Framework will create a detailed security framework for unique features of rollups. We plan to establish a foundation for basic best practices and transparency for these features to assist new developers of these systems and enable the community to assess the security risks of a particular rollup before they use one. 

Similar to resources available for smart contract development and the very high-level overviews of rollup security (such as L2Beat.com), the framework will discuss concerns and details of escape hatch development and operational risks for end-users and developers. It will also establish consistent language around the details, risks, and other features associated with rollups.

🗄️ Data Analysis // Evaluating Rollup Compression

Compression is often overlooked when discussing rollups. By design, rollups are required to make data available in order to verify state transitions or state roots; however, the method for this publication varies and may include compressed data. Additionally, there is variability in the compression techniques used. 

This project will explore the use of compression in the rollup setting. The project will explicate places where compression is used and document the techniques that may be used. It will survey existing rollups to investigate the approaches that are currently in practice, evaluate approaches proposed or used across similar systems, and attempt to identify why these particular approaches were used. Finally, the project will use insights collected to suggest new approaches for the compression of rollup data and pose open problems to the community.

📊 Data Visualization // Back-End API Standard for L2 Block Explorers

This project will clearly define properties that a block explorer should implement in order to be considered feature-complete in the general layer 2 setting. Additionally, the goal is to propose and specify a standard API interface that the layer 2 networks should expose to general block explorers. We envision that a standardized interface like this will enable and simplify the development of multiple block explorers that can plug and play with any layer 2 networks supporting the standard.

In the ideal scenario, the standard would turn developing the core of a new block explorer into a project that could be completed by an experienced team during a weekend hackathon. Our goal will be to also define a standard that is consumer-agnostic. Consequently, it won’t matter whether it is consumed by a block explorer that is provided commercially, one that is open source, or potentially even decentralized. The project will pay special attention to what unique layer 2 data a block explorer should provide, with an emphasis on those related to the security of the chains it monitors.

--

We’re proud to have the trust of the Ethereum Foundation and excited to share more about these projects as they evolve further. With layer 2 solutions being crucial to Ethereum’s scalability, we’re thankful to have received these grants and make further progress in our mission to secure the future of web3.

Back
Quantstamp Announcements

July Security Beat: Keys Over Code (Again?)

Crypto lost more than $240 million across 29 incidents in July 2026, up roughly 216% from June's $75.87M, even as the number of attacks fell from 40 to 29. For the second month running, the damage didn't come from clever contract exploits. The same failure class ran through Web2, from a $12.3M rail-industry ransom to a 1TB bank breach that started with one employee's email. Here's the month in security 👇

Read more
Quantstamp Announcements

June Security Beat: Keys Over Code

$75.32M was lost across 32 crypto incidents in June, up from May's $59.52M. No coordinated campaign carried the month, but one targeted operation did. A targeted social-engineering attack against Humanity Protocol reached the keys behind the $H token and drained $32M, roughly 42% of every dollar lost in June. Quantstamp led the independent investigation and traced the tooling to a phishing campaign previously seen targeting macOS users. Offchain, a fresh npm supply chain wave hit Red Hat's packages on the first day of the month, and a PeopleSoft zero-day was exploited for two weeks before Oracle said a word. Here's the month in security 👇

Read more
Quantstamp Announcements

May 2026 Security Beat

$59.52M was lost across 29 crypto incidents, down sharply from April's ~$635M. No single hack carried the month. The bigger story happened off-chain, where a self-propagating npm worm called Mini Shai-Hulud kept resurfacing in new waves through the month, ultimately spanning more than 1,000 malicious package versions across the npm ecosystem.

Read more