Very interesting list to build a discussion.<p>As a Web3 incumbent (more than 200 research, development, and security auditing projects done since 2014 in several blockchains and layers) I would start adding the following:<p>- Provide one or more robust multi-party computation (MPC) libraries. Awesome-MPC [1] provides a big list but most are not maintained or security audited, were acquired and closed by companies (cough, cough Coinbase [2]). There are existing projects such as <a href="https://web3auth.io/" rel="nofollow">https://web3auth.io/</a> but the core elements are not open source. Shameless plug: we have created an MPC wallet that is accessed through <a href="https://walletconnect.com/" rel="nofollow">https://walletconnect.com/</a> the interesting point about MPCs goes beyond Web3 and involves data custody in general.<p>- Encourage coopetition using data privacy offerings for computing over encrypted data. Companies such as [3] provides technologies around this using different strategies such as homomorphic encryption or security enclaves. For example we are working with pharmaceutical companies to share stats without revealing their private information. This could also be appled to a lot of industried. Idea: share Google Analytics / AdWords data for improving markets? The problem is politics, not technology, the technology already exists.<p>- Full backed stable coins to provide more liquidity to the ecosystem. It is a nice business: you create a stable coin backed by real money, the real money gains interest (efective FED rate at 4.25% - 4.50% [4]) while the stable coins are the same.<p>- Declarative programming languages for smart contracts. Since smart contract use cases could be reduced to a few use cases (beyond outliers) it could be useful to just declare and compose their features. Some blockchains such as Algorand have been playing around this but a lot of work needs to be done.<p>- Automated and assisted tools for security code reviews (static, dynamic). More stuff like [5]<p>- Descentralized stable coins: there are less popular ones that worked better than the top one (DAI). This means they resisted the fluctuations while DAI failed. For example <a href="https://moneyonchain.com/" rel="nofollow">https://moneyonchain.com/</a><p>- Better testing and sandbox infraestructure. For example, if you want to play with Uniswap protocol in the testnet the coin pairs don't have the real price and/or fake liquidity to play with. They could even put mocks to play with.<p>- Adversarial analysis of popular blockchain models. Bitcoin is most studied one but we have a blind spot on others.<p>[1] <a href="https://github.com/rdragos/awesome-mpc">https://github.com/rdragos/awesome-mpc</a><p>[2] <a href="https://www.coinbase.com/blog/coinbase-to-acquire-leading-cryptographic-security-company-unbound-security" rel="nofollow">https://www.coinbase.com/blog/coinbase-to-acquire-leading-cr...</a><p>[3] Examples: <a href="https://dualitytech.com/" rel="nofollow">https://dualitytech.com/</a> <a href="https://secretarium.com/" rel="nofollow">https://secretarium.com/</a> <a href="https://www.dpella.io/" rel="nofollow">https://www.dpella.io/</a> <a href="https://inpher.io/" rel="nofollow">https://inpher.io/</a>
<a href="https://www.stealthsoftwareinc.com/" rel="nofollow">https://www.stealthsoftwareinc.com/</a><p>[4] <a href="https://www.newyorkfed.org/markets/reference-rates/effr" rel="nofollow">https://www.newyorkfed.org/markets/reference-rates/effr</a><p>[5] <a href="https://en.wikipedia.org/wiki/Semmle" rel="nofollow">https://en.wikipedia.org/wiki/Semmle</a> and <a href="https://semgrep.dev/" rel="nofollow">https://semgrep.dev/</a>