FaucetTOTP.md

[labturna]

Project Abstract

The FaucetTOTP is a secure, sybil-resistant platform specifically designed for developers in the Polkadot ecosystem, facilitating safe and efficient access to test tokens. By leveraging Google Authenticator's Time-based One-Time Password (TOTP) mechanism, the faucet reliably verifies user identities, significantly reducing the risk of sybil attacks and spam.

To further ensure fair token distribution, the faucet incorporates Redis-powered rate limiting, enforcing a strict 24-hour cooldown period between token claims per user. This approach ensures that resources remain available for legitimate developer use, enhancing both security and user experience. By streamlining token distribution, our solution supports developers in effectively building and testing parachains and decentralized applications on Polkadot.

Grant level

• Level 1: Up to $10,000, 2 approvals
• Level 2: Up to $30,000, 3 approvals
• Level 3: Unlimited, 5 approvals (for >$100k: Web3 Foundation Council approval)

Application Checklist

• The application template has been copied and aptly renamed (project_name.md).
• I have read the application guidelines.
• Payment details have been provided (Polkadot AssetHub (USDC & DOT) address in the application and bank details via email, if applicable).
• I understand that an agreed upon percentage of each milestone will be paid in vested DOT, to the Polkadot address listed in the application.
• I am aware that, in order to receive a grant, I (and the entity I represent) have to successfully complete a KYC/KYB check.
• The software delivered for this grant will be released under an open-source license specified in the application.
• The initial PR contains only one commit (squash and force-push if needed).
• The grant will only be announced once the first milestone has been accepted (see the announcement guidelines).
• I prefer the discussion of this application to take place in a private Element/Matrix channel. My username is: @_______:matrix.org (change the homeserver if you use a different one)

[github-actions]

CLA Assistant Lite bot All contributors have signed the CLA ✍️ ✅

[labturna]

I have read and hereby sign the Contributor License Agreement.

[keeganquigley]

Thanks for the application @labturna have you seen proof or heard from the community that there are issues with the current test faucets? https://faucet.polkadot.io/ works pretty well for me. I also don't see any complaints on their forum support post.

[labturna]

Hi @keeganquigley. https://faucet.polkadot.io/ works fine as you said. However, I got an error with the faucet app developed by karoolis and the other telegram bot seems to be quite old. I wanted to implement this project because it was identified as a possible interesting project under the wallets table at https://wiki.polkadot.network/build/build-open-source/

[keeganquigley]

Thanks @labturna I will mark the application as ready for review and ping the rest of the committee. In the meantime, I have another question:

Just to clarify, you wouldn't be building a TG bot for this correct, just the website? Would it be mobile-friendly?

[keeganquigley]

Additional question: as you can see here, there have been multiple implementations of sybil-resistant faucets in the past, most of which are no longer maintained. Can you explain what makes yours stand out and how you plan to fund maintenance moving forward?

[labturna]

Just to clarify, you wouldn't be building a TG bot for this correct, just the website? Would it be mobile-friendly?

Correct, I'm not building a TG bot — only a web-based faucet. Yes, the site will be fully mobile-friendly and responsive.

Additional question: as you can see here, there have been multiple implementations of sybil-resistant faucets in the past, most of which are no longer maintained. Can you explain what makes yours stand out and how you plan to fund maintenance moving forward?

What makes it stand out: My faucet takes a unique approach to Sybil resistance by using TOTP with Google Authenticator, offering a decentralized, privacy-friendly alternative to social logins or IP-based rate limiting. This method doesn't depend on third-party APIs and works reliably across different platforms.

Maintenance funding: I plan to apply for ecosystem grants and may consider community donations or small sponsor banners to support long-term maintenance.

[Noc2]

Thanks a lot for the application and all the effort that you put into this. We discussed your application today and decided to close. If you want to work on a faucet, it might make sense to immediately apply for treasury funding and also include a long-term plan to maintain the faucet. At this stage, it's less about the open-source development of another faucet (supported by Web3 Grants), but more about creating a long-term plan to maintain and potentially do marketing around this faucet.

[Noc2]

see above