COZ has awarded 154 NEO to Pusharoo, a secure smart contract release workspace that consolidates artifact handling, deployment records, contract interaction, and webhook automation into a single developer environment for Neo N3.

The award was distributed to Gravey-Z and the source code is available on GitHub.

What Pusharoo adds

Pusharoo, labeled “Vault Keeper” in the round’s subheading, targets a common friction point in smart contract development: release workflows that fragment across separate tools and manual handoffs. The project brings those steps into one workspace.

This round’s contribution extends that foundation with a set of security and reliability features. The additions recognized by COZ include:

  • Wallet-signed webhook administration and encrypted webhook secrets.
  • Server-side request forgery and DNS-rebinding protections for webhook delivery. SSRF, is an attack in which a malicious actor tricks a server into making requests to internal systems it shouldn’t access. DNS-rebinding is a technique that can be used to bypass network boundaries by manipulating how domain names resolve. Together, these defenses limit exposure when Pusharoo processes outbound webhook calls.
  • Replay and idempotency checks, which prevent duplicate webhook events from triggering repeated actions.
  • Strengthened artifact and manifest validation.
  • Improved production configuration and network-aware contract tooling.
  • Dedicated TestNet and MainNet release workflows.

About Proof of Working

Since its January 2026 relaunch, the Proof of Working program has distributed 6,465 NEO to community contributors across 12 rounds. COZ staff members are excluded from weekly rewards, but consistent open-source code contributors are eligible to join COZ.

The full announcement can be found at the link below:
https://coz.io/blog/proof-of-working-2-12/

Tags: