Stellar Community Fund

Canary Protocol

SCF #45

Description

Canary will extend its production LayerZero DVN to Stellar with a Soroban DVN contract on mainnet and our off-chain verifier extended to Stellar pathways, attesting to ULN302. Canary has been live for nearly two years with zero security incidents.

Canary is the only fully custom-built independent verification client in the DVN market. Most operators run the same reference implementation, where the practical difference between them is which cloud holds the signing key. Canary was built from scratch.

Verification runs inside TEEs, chain state is validated through K-of-N quorum across independent RPCs, and keys are protected in HSMs. We are expanding across multiple clouds and TEE architectures, including Nitro, TDX and SEV-SNP, reducing reliance on any single vendor or hardware stack. Next is on-chain ZK verification, allowing apps to verify the correct code actually ran.

USDT0, Ethena and Paxos already verify through Canary today. All three are named in this RFP as issuers coming to Stellar. They arrive to a verifier they already use, not one they need to evaluate.