Security reviews of core network components #410 - Milestone 4: _(SEQAPI) Sequencer Public API_

Milestone 4: _(SEQAPI) Sequencer Public API_

• Scope: The Sequencer Public API is the only protocol-level API publicly exposed on the network level in the Canton Network. In order to remove the need for managing whitelists in the Canton Network, an independent audit of the API should be performed in order to ensure a minimal attack surface.
• Estimated Delivery: EOY 2026
• Estimated Effort: 20PW
• Selected Independent Auditor: RFQ

| Milestone | Description | Amount | Note | |---|---|---|---| | _(SEQAPI) Sequencer Public API_ | Audit 4 | 1,080,000 CC | For DA upon completion of audit and remediation of all high-severity findings, and an approximate budget of up to 350,000 CC for the third-party auditor.This section can be repeated multiple times if additional audits are required. |

Total Funding Request: 6,420,000 CC for DA and a budget of up to 3,850,000 CC for the 11 third-party audits.

_Originally posted by @pedrodneves in https://github.com/canton-foundation/canton-dev-fund/issues/410#issuecomment-4907946596_