// STORY CDR HACKATHON 2026

Private Risk Intelligence.Encrypted On-Chain.

PrivaScan Confidential Reports brings threshold encryption to smart contract risk data — so protocol teams, auditors, and investors can share findings without broadcasting vulnerabilities to attackers.

01

THE PROBLEM

PrivaScan publishes security risk scores for EVM privacy protocols. The scores are public — useful for transparency, but dangerous for protocols with unresolved findings. When a HIGH Slither finding is public before a patch lands, it hands a roadmap to attackers.

⚠️Public Slither findings = attacker roadmap
📧PDF-over-email is not programmable access
🔍No on-chain access control for risk intel
02

HOW IT WORKS

01
// STEP 01
Score

Enter any EVM contract. PrivaScan runs Slither analysis across all 6 risk dimensions.

02
// STEP 02
Encrypt

Full findings AES-encrypted locally. AES key protected under Story validator threshold DKG — no single party can decrypt alone.

03
// STEP 03
Share

Grant read access to any wallet. Each grantee gets a unique vault keyed to their address. 2 transactions per grant.

03

WHAT IS CDR?

// CONFIDENTIAL DATA REGISTRY

CDR is Story Protocol's on-chain encrypted data primitive. It uses threshold decryption — a network of validators each holds a key fragment — so no single party can decrypt without a quorum cooperating.

Access conditions are enforced on-chain via Solidity contracts. Fully programmable — EOA, license token, time-lock, or any custom condition.

Threshold DKG

No single point of failure. Validators split the key.

On-chain rules

Access conditions are Solidity contracts. Fully composable.

IPFS + TDH2

Encrypted payload on IPFS. AES key under TDH2 threshold encryption.

Story L1

Vault allocation and writes are on-chain txs on Story Aeneid.

04

ACCESS MODEL

RoleTypeHowCost
Protocol TeamOwner vaultOwn wallet as read condition2 txs · ~0.003 IP
AuditorGranted vaultOwner mints for auditor's EOA2 txs per grantee
DAO VoterGranted vaultEach member gets own vault2 txs per member
InvestorGranted vaultVault keyed to their address2 txs per investor
05

POWERED BY

// STORY CDR HACKATHON — JUNE 2026

Try the live demo. All transactions on Story Aeneid testnet — free.