MPC

Mattie_Kadlec

Yes. 2P-MPC eliminates the risk of exposing your private keys by splitting the signature process between the user and a decentralized network like Pera, ensuring the private key is never fully revealed to any single party.

Important_Addition

From what I am getting 2P-MPC eliminates the risk of exposing your private keys right?

Natural-Acadia5679

Hi All! I wanted to show you guys EmailBTC, an app I’ve been working on for some time. It lets you send and receive bitcoin using just email addresses simplifying onboarding and making it super easy to use + send and receive. I think for a lot of non crypto folks crypto is this scary new thing because the onboarding and usage experience is really novel. Upon introduction you have to write down your 12 words and we put scary messages everywhere about it. And then when you want to send and receive you have to transmit this complex combination of numbers and letters to someone and get it exactly right. Often people (myself included) will send a test transaction to make sure they have the right address. EmailBTC aims to solve that by 1. Making the onboarding experience super familiar 2. Making basic usage (sending and receiving) super familiar and hard to get wrong How it works: EmailBTC uses NEAR chain signatures behind the scenes. In the simplest terms, this technology allows you to sign things using non-existent private keys controlled by a well audited, distributed mpc network of nodes. To get a signature you pass in a derivation path which could be any string. And the mpc network prefixes the derivation path with the caller’s account Id so that derivation paths are scoped to you and can’t be accessed by other accounts. EmailBTC submits a zero knowledge proof of your google token signature to a smart contract which then calls the mpc network after verification using your email address in the derivation path. This allow it to derive any Bitcoin signature using your token which is never submitted on chain, and your Bitcoin address can be computed using just your email address Disclaimer • We are still pending an audit of the smart contract so please don’t store large amounts of money on it just yet • Testnet addresses can be changed at any time. The MPC network does not guarantee the same keys on testnet Testnet - [https://testnet.emailbtc.net](https://testnet.emailbtc.net/) - uses Bitcoin testnet4 which has many faucets e.g. [https://mempool.space/testnet4/faucet](https://mempool.space/testnet4/faucet) that can be used for testing it out. Have fun with it and let me know what you think! Osman

kirtash93

>The newly-packaged technology solution plans to support end-to-end tokenization capabilities for stablecoin issuers: >Issuance: securely mint, custody, distribute, and manage tokenized assets—including stablecoins—via a tokenization engine. >Data synchronization: verify stablecoin collateral onchain with proof of reserves for enhanced transparency and to help guarantee the value of stablecoins in circulation. >Data connectivity and enrichment: real-time, market-wide price tracking for assets represented onchain, powered by hyper-secure oracle infrastructure. >Compliance: a customizable suite of KYT/AML and Travel Rule Compliance components for customers navigating the regulatory complexities of stablecoin use cases such as cross-border transactions. >Custody: securely custody and manage digital assets through Direct Custody Wallets-as-a-Service, which provides battle-tested multi-party computation (MPC) warm and cold wallets, governance policies, and robust APIs, with support for over 80 blockchains. >Interoperability: transfer data and value across public or private blockchains with industry-standard cross-chain infrastructure. >Liquidity and distribution: direct connectivity to, and distribution in, the crypto capital markets via the industry’s largest digital asset network with over 2,000 institutional counterparties. Great solution goals!

AutoModerator

Ping for verified users associated with MPC: /u/ZenGoOfficial *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/CryptoCurrency) if you have any questions or concerns.*

ZenGoOfficial

Like we said in the OP, this MPC architecture will not appeal to some seed phrase maxis. That's ok, you do you. Note that: In the extremely unlikely event that Zengo's servers go down for a long period of time (in any short period of time we have redundancies in place to prevent this) then Guaranteed Access will initiate, and you will be able to create a standard Private Key on your mobile device and access your assets with any standard wallet. Just remember that your keys = your problems, and statistically you are likely to lose assets if they are tied to a seed phrase. Also, remember that Zengo only has 1/2 of the Secret Shares (the Remote Share) on the server - the other one is locked to your device, leverages your device's Secure Enclave/TEE, and is the only one that can sign or initiate transactions. This is more decentralized than a traditional seed phrase.

ZenGoOfficial

Even if the Zengo Server was somehow hacked, the hacker wouldn't be able to do anything - your funds remain secure. That's the power of our 2/2 MPC system - there is no single point of failure that would allow the hacker to steal anything. There are a number of reasons why, but the main one is: Only you, with your device, can initiate and sign any transaction with your Personal Share. Your Personal Share is locked to your device. So even if the hacker got access to your Remote Share on the Zengo Server, they cannot drain your wallet.

ZenGoOfficial

Thanks for your feedback! We already have ETH and Tezos staking, but your point is noted about additional DeFi integrations. Which ones in particular would you like to see more of (and use)? Your Bonus AMA question: By far, Zengo stands apart from hardware and software wallets for its security. As noted in the OP, 0 Zengo wallets have ever been taken over or hacked. Because Zengo has no seed phrase vulnerability, its is much more difficult to hack a Zengo Wallet. That's the power of our MPC technology.

-Sharingan_

# Favorite Feature of Zengo: The standout feature is the elimination of seed phrases through MPC, reducing the risk of theft and loss while offering users a secure, hassle-free experience. # Suggestion for Improvement: To encourage wider adoption, Zengo could integrate with DeFi and NFT ecosystems, offering features like DEX access, staking, and NFT management. Price alerts and yield notifications could enhance user engagement.

ZenGoOfficial

Thanks! We're a huge fan of the Theft Protection feature too. We're about to level-up with it again - keep your eyes out for our Bitcoin Vaults feature (coming soon!) which will enable you to simply protect your Bitcoin at a level beyond anything on the market. Multi-chain swap support - noted! If you're not already aware, we do support multi-chain swaps directly inside of the app with our partners Changelly and THORChain, but we will be continuing to expand this support in the future. Let us know if you have a more specific request about this. Bonus question: Your point is noted! We build overlapping redundancies wherever possible, especially when it comes to critical infrastructure. Stay tuned for more on this. The main problem we found with the need to decentralize until now was the private key / seed phrase, which as you know is a massive vulnerability and represents a single point of failure. MPC allows for us to do this in a way no other cryptographic technology does.

ZenGoOfficial

Thanks! We believe that 24/7 support is not simply helpful for folks but also a critical part of user security. You've covered a number of questions and some of this requires going into more depth so here's the TLDR and then the details afterwards: TLDR: * Zengo does not have access to your funds and cannot spend them in any way. * We do not store your device key shard in your Dropbox (it's a decryption key, see below) * Not all use Dropbox with Zengo, but for those who do: The Zengo App asks for permissions, but this information is passed directly between the Zengo mobile (client) app on your device and Dropbox - it does not go through Zengo’s Servers (by-design.) * While in theory Zengo’s MPC could prevent transactions from being broadcasted, Zengo has never done so. Many use Zengo anonymously (no KYC) and 3D FaceLock is not required for normal operations. This tradeoff is balanced by our differentiated security - as stated in the OP, with over 1 million Zengo customers since 2018, 0 accounts have been hacked or taken over. Let’s dive into Zengo’s architecture and share pros and cons of our MPC infrastructure versus a traditional seed phrase based wallet. To ensure you can always recover your Zengo wallet if your device is ever lost or stolen, during wallet setup your mobile device: 1. Creates a Personal Share leveraging your device’s TRNG 2. Encrypts this Personal Share 3. Sends a copy of the encrypted personal share to the Zengo Server for safekeeping (which the server cannot unlock because it is encrypted) 4. Sends the decryption key to your cloud for safekeeping (never reaching the Zengo server) We call this encryption/decryption key your Recovery File (which is part of your Secure [Recovery Kit](https://help.zengo.com/en/articles/2603673-what-is-zengo-s-recovery-kit)). Zengo stores the user’s Recovery File in their Cloud (iCloud / Google Drive / Dropbox). (A similar architecture is used during [Legacy Transfer](https://zengo.com/secure-your-crypto-legacy-discover-legacy-transfer/).) As-is, any user can create a Zengo Wallet with a private email address (it can be anonymous), so those who are privacy focused are sharing no personal information with Zengo. While all of our cryptography is open-source and available on our [GitHub](https://zengo.com/research/), and we have been [audited and pen-tested](https://zengo.com/security/) numerous times, ultimately you do have to place at least some trust in us as a company - as you do with any company. Seed phrase maxis who want to trust no one but themselves will not want to use Zengo - we recognize that. They in particular do not like to rely on the Zengo Server to co-sign transactions (even though many are relying on the firmware of their hardware wallets). As stated above, while in theory this secure architecture could be used to prevent certain transactions from being broadcasted, Zengo has never done so – ever since the company was founded. Ultimately we’re focused on finding the right balance of tradeoffs that maximizes user security on one hand and control on the other. It's right for many and a great alternative to seed phrases, but perhaps not for all. Last point: Advanced features, including Legacy Transfer, Theft Protection (and soon, Vaults), leverages 3D FaceLock to add a biometric element of security. This technology is protected by a $600,000 bounty. While you do note that 3D FaceLock’s tech allows for audit images, this is not something that we have implemented - but we have updated information in many areas (including our [Security FAQ](https://zengo.com/security/)) to share how it works if folks have more questions about it.

ZenGoOfficial

Thanks! We get lots of love for our live support team, and they are indeed awesome. Support is a critical part of security - you can't believe how many people talk to our support about questions they have with their seed phrase wallets, too! Great insights about a multi-sig style wallet: Can you explain a bit more about what you're looking for? How/what would this use-case be? MPC allows for us to integrate these advanced types of 'user logic' and we are indeed working on some exceptional features in this space... so more details from you would be excellent!

ZenGoOfficial

One of the advantages of an MPC wallet like Zengo is that we can offer true true multi-chain support. Right now we support Bitcoin, Ethereum, thousands of ERC-20 tokens, a number of Ethereum Layer 2s including Base, Polygon, Arbitrum One and Optimism, Tezos, and Dogecoin. We have plans to add additional blockchains over time, and until then, our focus is on building features that bring advanced security to the assets we already do support (like our inheritance-style feature, Theft Protection, and coming soon... Bitcoin Vaults).

ZenGoOfficial

Zengo has the world's largest open-source MPC cryptographic library on GitHub and we were the 1st company to launch a consumer MPC wallet (in 2019). We also have a telegram channel focused on discussing MPC cryptography (not focused solely on Zengo) - you can see both here: [https://zengo.com/research/](https://zengo.com/research/)

uwu2420

https://zengo.com/zengo-and-open-source/ Their MPC code is open source but the wallet implementation itself (which imo is more relevant and where all the issues I found were) is closed source

AutoModerator

Ping for verified users associated with MPC: /u/ZenGoOfficial *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/CryptoCurrency) if you have any questions or concerns.*

SolutionEquivalent88

MPC wallets, custodial solutions to backup across different risks, and enterprise key management systems.

MaskingMan

Cobo MPC is all you need to understand https://www.cobo.com/products/wallet/mpc

GabeSter

Op is the founder of Gridlock: >There's a reason why "**they"** are using MPC This 100% reads like astroturfing and violated rule 3.7 >Do not promote something you have a professional connection to without disclosing it. Op is banned for 3 days as a warning.

Derek-Gridlock

Gridlock offers an offline way to export all stored assets so there's not risk even if the company goes out of business. And there is no risk with a MPC-based software solution. MPC is the most secure storage method that is already used by all exchanges. There's a reason why they are using MPC, because it is much better than hardware storage. It seems like you are solving part of the problem with the distribution of stored assets, but your asking the user to do all of that work AND pay you $199. It doesn't make sense when there are free alternatives that are more secure.

Derek-Gridlock

Hi all. I'm the founder of a crypto wallet called Gridlock and looking for feedback on these explainer videos. Please take a look and let me know if they make sense. As a thank you, I will give anyone that provides valuable feedback a free year of Gridlock Pro. What is Gridlock [https://lumen5.com/user/dfm/what-is-gridlock-abgb6/](https://lumen5.com/user/dfm/what-is-gridlock-abgb6/) How Gridlock works [https://lumen5.com/user/dfm/how-it-works-ry87l/](https://lumen5.com/user/dfm/how-it-works-ry87l/) What is MPC [https://lumen5.com/user/dfm/what-is-mpc-2kl5a/](https://lumen5.com/user/dfm/what-is-mpc-2kl5a/) What is a Guardian? [https://lumen5.com/user/dfm/what-is-a-guardian-8mwnd/](https://lumen5.com/user/dfm/what-is-a-guardian-8mwnd/) What makes Gridlock so secure? [https://lumen5.com/user/dfm/what-makes-gridlock-bn2mk/](https://lumen5.com/user/dfm/what-makes-gridlock-bn2mk/) How to replace a Guardian? [https://lumen5.com/user/dfm/how-to-replace-a-gua-gy0g8/](https://lumen5.com/user/dfm/how-to-replace-a-gua-gy0g8/) What is Gridlock Pro? [https://lumen5.com/user/dfm/what-is-gridlock-pro-k1l0v/](https://lumen5.com/user/dfm/what-is-gridlock-pro-k1l0v/) Gridlock verse hardware wallets [https://lumen5.com/user/dfm/gridlock-vs-hardwar-h92cb/](https://lumen5.com/user/dfm/gridlock-vs-hardwar-h92cb/)

DC600A

FHE is a great privacy-preserving technique and is catching on lately. For a long time, TEEs and ZKPs were the only two prominent solutions, and most Ethereum L2s still prefer ZK variations over others. As a follower of the Universal Privacy Alliance (UPA), in general, and Oasis, in particular, it is paramount that we align each other in privacy goals. Why I especially like Oasis so much is that TEEs can be used in combination with ZKPs, MPC, or FHE for more robust privacy solutions, and, imo, it is a great advantage to have in implementing DeAI.

apstl88

Data safety and privacy is an important subject lately. We definitely need some solutions in order to have safer and user-friendly AI. TEE, zk, MPC... They are all important but I think that FHE can be a real game-changer. I guess you know what I'm talking about. If not, take a look at the projects like Zama or Rivalz Network.

ZenGoOfficial

Hey OP: It's great you're thinking ahead about securing your assets and ensuring your children's future. While mailing individual words of your seed phrase over several weeks might seem like a creative approach, it comes with inherent risks. Even if one of the letters were intercepted or lost, it could compromise the security of your entire wallet. Additionally, it can be challenging to ensure that your cousin receives each word in the correct order without any errors. Instead, consider a wallet that eliminates the need for a seed phrase altogether. By leveraging advanced cryptography (like MPC), some wallets allow you to secure and transfer assets to your beneficiaries without the traditional vulnerabilities of seed phrases. For instance, you can use a self-custodial wallet that offers inheritance-style features (like ours) which ensures your assets are securely passed on without needing to share sensitive information like seed phrases. This way, your children’s inheritance is safeguarded, and you won’t have to worry about the risks associated with physical or digital transmission of your seed phrase. It's literally why we built this feature. Best of luck with whatever you end up doing.

CryptoRonaldo

Partisia MPC Blockchain is the next big thing.Research this diamond. MPC Partisia brings True sharding,ZK,TEE,HE,MPC all in one Blockchain. Forget Lightning to scale BTC. MPC BYOC is how to really make BTC scalable.

CryptoRonaldo

One of the next big gainers in the alt bullrun will be Partisia with its Multiparty Computation (MPC) technology.

Derek-Gridlock

It's impossible to prove that a solution is flawless, but the distributed security used by Gridlock is the best solution available. It's the same security used by exchanges. Consumers today can use a hardware wallet which has something equivalent for enterprise which is called an hardware security module (HSM). However, these are both single points of failure and it's not the ideal solution. That is why all advanced enterprises use distributed MPC storage. This is the same technology that Gridlock offers. As for common scams. A majority of these scams are centered around the seed phrase, which is a huge single point of theft. Gridlock does not have that problem because the idea of a seed phrase doesn't exist. Another common attack is centered around the fallibility of a human, where you, as a user, make a mistake when you are tired, distracted, drunk, etc. Gridlock can also protect against these social engineering attacks with its social protection model. You can set up your wallet to require multiple approvals from the guardians you've designated to help keep you safe. YOU might be tricked, but it's increasingly unlikely that a scammer will trick multiple people simultaneously.

Derek-Gridlock

It’s true that managing your own crypto security can be daunting. I found that using Gridlock, with its social recovery and MPC features, can help mitigate these risks. It offers a way to enhance security without needing to be an expert.

Derek-Gridlock

Most of us aren't cybersecurity experts, and that's okay. I found that using Gridlock with its social recovery and MPC features really simplifies keeping my assets safe. You might find it helpful too for managing your crypto securely.

Derek-Gridlock

Crypto gives you control over your money and security like never before. With solutions like Gridlock, you can enhance this control even further. Gridlock's social recovery and Multi-Party Computation (MPC) offer advanced security without single points of failure, making your crypto safer than traditional banking. It's designed to be user-friendly, ensuring high security even if you're not a tech expert.

Derek-Gridlock

This is a scam that I experienced firsthand, but fortunately, I was wary and figured out the scam before it was too late. There are many ways this could happen, but here's one common method for an in-person seed phrase scam: 1. You meet in person to discuss the deal. 2. They ask for proof of funds but claim they can't trust any old address you give them because it could belong to someone else, which makes sense. 3. They ask you to install a new wallet and create a fresh address. This is also fine if you download the genuine wallet from an official source (Google/Apple/official website), not a copycat from a link they send. 4. They scan your QR code to send $100 or more to your address to document the new address. Since they seem to trust you, it's logical to trust them back, right? 5. You finalize the deal and leave to gather your funds to show proof. 6. You send funds to your new wallet and inform them. 7. Your wallet is drained, and they cancel the deal because you no longer have funds. So, what happened? Where did your money go? The scam happens at step 4. During the meeting, you show the scammer your phone with a QR code showing your wallet address so they can send you money. They pretend to have trouble scanning it and ask to hold your phone. You hand it over, thinking it's safe since the new app has no funds. Then, in less than 10 seconds, they access the settings, reveal your seed phrase, and take a picture. Now, they can access any funds sent to that wallet and are ready to steal your money as soon as it is funded. - - P.S. - Seed phrase scams are a major way to steal crypto. Seed phrases are confusing and risky, and it's a huge hurdle stopping mass adoption. Thankfully, new cutting-edge wallets using MPC (Multi-Party Computation) technology aeliminate the need for seed phrases altogether.

MikeCagney

We offer a 12-month loan with a fixed rate. Aave rates move with supply and demand. We currently use a US regulated trust bank as custodian. I'd argue that's better than a smart contract, but ultimately we'll migrate custody to MPC wallets which is the best option. We allow for deferring interest to maturity. And your loan lets you trade on Figure Markets for free, and earn Hash rewards.

MikeCagney

We use an off-chain OMS, coupled with on-chain settlement and MPC custody. The underlying blockchain is Provenance - [provenance.io](http://provenance.io)

Derek-Gridlock

This is the core problem with any use of a seed phrase. It's a massive single point of failure. I highly recommend looking into advanced MPC solutions that do not use the concept of a seed phrase. I'm biased on which one to use but DYOR and choose one that works for you.

Mr_Hodlerr

I think ETFs should fail. Owning BTC is way more powerful then an ETF. As non custodial solutions like MPC etc. get better, who would want an ETF.

Derek-Gridlock

Gridlock is an MPC wallet that is better than any cold wallet because it doesn't have a single point of failure like a cold wallet.

Mr_Hodlerr

MPC wallet techniques and other infrastructure changes will make it easier to own real assets.

apstl88

Rivalz Network as well. Actually, as they are working on the first data intel layer in AI, they are utilizing several security mechanisms including MPC, FHE, TEE, ZK...

coinfeeds-bot

tldr; Coinbase International Exchange has partnered with Fireblocks, a cryptocurrency custody firm, to enhance the security of its exchange operations. Through this partnership, Coinbase International Exchange customers can connect their accounts to Fireblocks, utilizing its governance and policy rules to safeguard withdrawals, deposits, and other activities. Fireblocks employs Multi-Party Computation (MPC) technology and secure hardware enclaves to eliminate single points of compromise and prevent threats, including insider collusion. This collaboration aims to provide a secure and reliable trading infrastructure for global clients. *This summary is auto generated by a bot and not meant to replace reading the original article. As always, DYOR.

Derek-Gridlock

Gridlock MPC wallet offers the same functionality as Legacy Transfer for FREE and without any pre-set waiting time. Instead of relying on Zengo for THEIR permission to access YOUR crypto, you can simply distribute access approval across multiple trusted contacts. The result is the same functionality but faster, cheapers, and entire in YOUR control.

ZenGoOfficial

It is a fair point and one we will consider in the future. For now, our focus is building the most secure onchain crypto wallet - one that is secure by default and very difficult to mess up, even if the user does not understand the architecture behind it. It's difficult to find exact statistics, but it's clear that an overwhelming majority of all cryptoassets are kept with centralized players (well over 70%) - and one of the main reasons for this is user fear around seed phrases and getting their wallets phished/taken over. This is the main problem we are focused on now: Building the most secure wallet that allows for anyone to manage assets onchain. Introducing additional factors/shares may have control advantages, but it would likely also introduce security challenges in others - so if we do launch this, it would have to be an opt-in feature reserved for more advanced users. Zengo has one of the world's largest open-source MPC cryptographic libraries, and all of our cryptography is open source. You can see it all on our GitHub and join our Telegram group focused on MPC: [http://zengo.com/research](http://zengo.com/research) We have a more nuanced approach towards open-source "simply for open source sake" - see here: [https://zengo.com/zengo-and-open-source/](https://zengo.com/zengo-and-open-source/)

Derek-Gridlock

What you are looking for is Gridlock's MPC wallet. Compared to Zengo's centralized and custodial 2-of-2 key distribution, Gridlock uses a 3-of-5 key distribution model. This means Gridlock is not a central part of your key storage, making it an actual non-custodial wallet. Additionally, there is no need for some strange "Legacy Transfer" setup when Gridlock offers effectively the same solution for free as part of the base functionality.

uwu2420

> Zengo has well over 1 million users, and since we began 5+ years ago, not a single Zengo wallet has been phished or taken over, based on our MPC infrastructure. We have also never censored a transaction. Also, we do not know who you are (we do not KYC). While this is good, I think it’s a worthwhile problem to consider given the current regulatory climate. The fact that you have the technical ability to censor transactions means that one day you may be required to, even if you don’t want to. I also think this is a solvable problem. For example, maybe you can offer users the option to create an emergency key (generated on-device) to withdraw their funds in the case that Zengo cannot sign the transaction. They can be instructed that the key is only for emergency use as a last resort and should otherwise be stored safely for example in a safe deposit box. The MPC could be 2 of 3, so that 2 of 3 keys are needed: Zengo, the mobile device, and the emergency key. This takes away a lot of the “trust me bro” aspect of it, and possibly makes legal compliance easier for you while sticking to your core values. Btw, I also have one other question. Open source is a big part of the crypto core values, in part so that people can read through the code themselves and ensure that there are no back doors. As far as I can see, the source code for Zengo wallet is not released. Can you provide reasoning for this and whether or not it will be released?

ZenGoOfficial

Indeed - the advantage of MPC is it is chain agnostic - so Legacy Transfer applies to any asset supported by Zengo inside of your Zengo wallet, including Bitcoin, Ethereum, many ETH L2s like Base and Arbitrum One, Stablecoins, NFTs, etc.

ZenGoOfficial

We responded to your original post above but let us know if you have additional questions. We'd just highlight again, that MPC - with no seed phrase vulnerability - is much more secure and much less complicated, especially if you are a crypto noob (or your Legacy Recipient is a crypto noob).

ZenGoOfficial

You make an excellent point that highlights the value of an MPC wallet like Zengo, one that is secure by default. Because Zengo has no seed phrase or single point of failure, it is much more secure (by default) and much easier for a noob to use - even if they are completely new to crypto and the world of onchain assets. Based on the system design, only the Legacy Recipient can gain access to the Legacy Wallet (using their own Zengo wallet). We also have live, in-app 24/7 chat support and welcome Legacy Recipients to chat with us if they have any questions (support is a critical element in security, after all). You are correct in that Seed Phrase maxis may not like our MPC system because of the reliance on the Remote Share to co-sign transactions initiated by your Personal Share (from your mobile device). And that is OK. Ultimately there will be many ways to self-custody onchain assets, and we believe that MPC has been an (until recent) overlooked primitive. Every system has tradeoffs, even seed phrase wallets. Seed phrase wallets get drained. Every day. Even hardware wallets. Zengo has well over 1 million users, and since we began 5+ years ago, not a single Zengo wallet has been phished or taken over, based on our MPC infrastructure. We have also never censored a transaction. Also, we do not know who you are (we do not KYC). Ultimately it is up to the user to decide the system they want to use, but MPC, despite some of these perceived disadvantages, compensate with superior security, storage, and advanced security logic (like Legacy Transfer and Theft Protection...and soon, Multiple Accounts and Smart Vaults).

trungngo7799

1. How does the Legacy Transfer feature ensure that the assets remain secure during the transfer process, especially considering the absence of seed phrases? 2. Can you elaborate on the technical aspects of the 2-of-2 Multi-Party Computation (MPC) framework used in Zengo Wallet, and how it enhances the security and privacy of the users' assets?

ZenGoOfficial

Lots of questions! Will address them one-by-one: **Questions 1 and 2:** Zengo's Legacy Transfer system uses a similar recovery and security process as the architecture for wallet recovery. Since Zengo was created 5 years ago, 0 Zengo wallets have been taken over or phished (now with over 1 million customers). Learn more about our detailed Legacy Transfer system - with diagrams - in our White Paper: [https://zengo.com/secure-your-crypto-legacy-discover-legacy-transfer/](https://zengo.com/secure-your-crypto-legacy-discover-legacy-transfer/) This paper also explains our 2-of-2 MPC cryptography. **Question 3:** Legacy Transfer is a tool you can use to ensure that your Legacy Recipient can gain access to your account after a period of account inactivity. It is up to you as the user to determine how you would like to implement it. Right now you can only assign one person as your Legacy Recipient, and they must confirm on their end - but you can change or remove this person at any time if you'd like to. **Question 4:** We have a series of advanced security and self-custody features we're already launched and will be launching soon. Legacy Transfer and Theft Protection are part of Zengo Pro, and we will be releasing more features soon - learn more here: [https://zengo.com/pro/](https://zengo.com/pro/) **Question 5:** This depends on a number of factors, including where you are located in the world. Ultimately Zengo is a tool; it's a self-custodial crypto wallet; all of your assets remain onchain and only you control your assets.

stkw

Is there a way to use ZengoWallet without using Zengo's MPC System? As in, is it possible to generate a seed phrase from it? The reason I ask is because MPC does solve the seed phrase vulnerability, but it seems like we've centralized a few components, mainly the Zengo server. Does this potentially create a server vulnerability on the unlikely off chance that Zengo as a company does not exist anymore in the distant future? And in that scenario, how would the servers continue running to provide wallet recovery or Legacy Transfers?

ZenGoOfficial

Legacy Transfer - when activated - covers all assets inside of your Zengo wallet. We do not hold recovery keys because we do not use a traditional, centralized seed phrase or private key (they are a massive vulnerability). Instead we use MPC (multi-party computation) in a 2-of-2 system. Since we started 5 years ago, 0 Zengo wallets have been phished or taken over (unlike seed phrase wallets that see this every single day). Go here to learn more about how an [**MPC wallet**](https://zengo.com/mpc-wallet/) **works**.

ZenGoOfficial

Zengo has no seed phrase vulnerability. As noted in the OP, Zengo was the first consumer MPC wallet to take the tech used by billion-dollar institutions and make it available for regular folks. What this means: A wallet much more secure than traditional software wallets AND more secure than seed phrase hardware wallets! Learn more about Zengo's MPC here: Using a 2-of-2 Multi-Party Computation (MPC) framework, each of the two Zengo parties (Zengo app on the user device and Zengo server) independently generate their own “Secret Share” during the wallet creation process. The secret shares are cryptographically locked to prevent MITM attacks. * The share randomly generated on the user’s device is called the Personal Share and leverages the device’s hardware-based random number generator (TRNG). Only the Personal share can initialize and sign transactions, all of which are verified by the device’s hardware (Secure Enclave or TEE/Trusted Execution Environment). * The share randomly generated on Zengo’s remote server is called the Remote Share and is used to co-sign transactions emerging from the Personal Share. Using MPC, these two Secret Shares are able to compute their corresponding public key securely. Even if a hacker gains access to one of the two secret shares, it is still useless to them as they cannot spend user funds. 

ZenGoOfficial

There is no difference in personal experience between using an MPC wallet like Zengo and a traditional seed phrase wallet. One of the advantages of MPC is that it is chain agnostic. The blockchains we support (Bitcoin, ETH, many ETH L2s like Base, Arbitrum One, Polygon, etc) do not know your funds are being directed from an MPC wallet versus a seed phrase wallet. Perhaps you are asking something different? Please let us know if you need additional clarifications!

Odd-Recognition3849

You've explained how Zengo's MPC system uses a 'Remote Share' on your server to co-sign transactions. That's a clever setup, but it makes me wonder: what safeguards are in place to prevent malicious actors from gaining access to your server and potentially compromising the 'Remote Share'?

ZenGoOfficial

Ser... Zengo doesn't have a token. It's an MPC wallet more secure than traditional hardware wallets. How is that a pump and dump...?

uwu2420

The biggest challenge with legacy transfers has always been that the beneficiary might know absolutely nothing about crypto, and might not have the technical ability to figure it out. They don’t know what MPC is, they don’t even know what an exchange is, all they know is that their loved one has passed, their will mentions that they have been left a large sum of “bitcoin” whatever that is, and some additional USD in their bank account would really come in handy right about now. This of course often opens the door for scammers who claim to “help” the beneficiary. How does your service address this issue? Also, your MPC architecture from a quick glance at the whitepaper requires that one of the signers go through Zengo. One of the reasons of “not your keys not your crypto” is that Bitcoiners don’t want that a third party might have the ability to deny them access to their funds. Additionally, this may open the door to legal challenges where your company might be compelled to freeze access to a particular user’s wallet by a court order. How is this issue addressed on your platform?

Logical_Lemming

I've donated to the lone guy who maintains MPC-HC. And used it to pay for VPN.

coinfeeds-bot

tldr; Zilliqa, a high-throughput blockchain platform, has integrated with Fireblocks, an enterprise platform for managing digital assets, to enable Fireblocks customers to securely store and transact ZIL tokens. This partnership enhances Zilliqa's accessibility for institutional finance, supports EVM applications, and fosters multi-chain application development. Fireblocks, known for its MPC custody technology, serves thousands of financial institutions and has facilitated over $6 trillion in digital asset transfers. This collaboration aims to expand Zilliqa's presence in institutional finance and its Web3 ecosystem, benefiting sectors like luxury and entertainment. *This summary is auto generated by a bot and not meant to replace reading the original article. As always, DYOR.

Derek-Gridlock

dude what are you talking about? BIP39 compatibility IS THE PROBLEM. A seed phrase is a single point of failure....that's the point. Also, what are you talking about shitcoin? There is no related coin at all. It's simply the industry leading MPC cryptography...which IS the most secure option.

Derek-Gridlock

I'm going to start replying to all of your post everytime you mention Cypherock. You clearly work at the company judging from your history. While Cypherock might be useful in some cases, it still requires significant effort and is stressful. It requires complex setup and ongoing maintenance. Why would anyone pay $159 to own a pain in the ass when they could simply download Gridlock for free and have easy, simple, secure self-custody powered by the most secure MPC cryptography available?

Derek-Gridlock

Zengo's Legacy transfer is a joke and most certainly custodial, just like their so-called "non-custodial" MPC. Check out Gridlock which has actual non-custodial MPX and offers the same legacy transfer service FOR FREE.

AutoModerator

Ping for verified users associated with MPC: /u/ZenGoOfficial *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/CryptoCurrency) if you have any questions or concerns.*

rayQuGR

Absolutely, the rise of crypto AI makes privacy crucial. While FHE has limitations, TEEs stand out for their ability to synergize with techniques like ZKP and MPC, offering robust privacy solutions. [Oasis](https://oasisprotocol.org/blog) technologies, with their focus on smart privacy for web3 and AI, are indeed paving the way for the future we've all been anticipating.

apstl88

I'm going to check it up. The thing is that none of this security methods should be utilized alone. I also believe that Sight AI will deeply rely on ZK, MPC and TEE as well.

DC600A

As crypto AI gains momentum, the need for privacy becomes all-important. FHE is nice but it has its set of limitations keeping it down the pecking order of privacy-preserving techniques. Imo, [TEEs](https://oasisprotocol.org/blog/comparing-zkp-tee-privacy) have a great deal to offer, more so because they can work synergistically with other techniques like ZKP or MPC making robust privacy solutions for the next-gen web3 projects. A look into the [Oasis](https://oasisprotocol.org/) technologies that focus on smart privacy for web3 and AI can be the future we have been all looking forward to.

AutoModerator

Ping for verified users associated with MPC: /u/ZenGoOfficial *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/CryptoCurrency) if you have any questions or concerns.*

porkbacon

Adding to this, I wouldn't make serious transactions that you want kept private on it because their model is essentially: all of our on chain smart contract txs are encrypted, and they can only be decrypted by material stored in the Trusted Execution Environments (TEEs) of our validators... But TEEs are broken all the time and information can be leaked from them without anyone else knowing. Having untrusted validators have direct access to hardware that needs to keep secrets is a very difficult model to work with. That said, the last time I looked into this was a year ago and they were maybe going to try and do some MPC-like thing and I have no idea where they're at with that soy info could be out of date, but this is fundamentally a very difficult problem to solve in a scalable way

Beat_Me_If_U_Can

The security of the assets is backed by MPC algorithms, ensuring that you will not lose access to your tokens. As mentioned, exchange nodes only provide order-matching services, maintaining the integrity of your assets. Additionally, if you operate a DEX without engaging with U.S. persons or trading U.S. securities, you will have a significant safety cushion from U.S. regulatory scrutiny. This approach allows you to comply with international laws while benefiting from the security and efficiency of decentralized trading.

sabuche69

How does JayX Protocol's chain abstraction and MPC technology enhance the user experience compared to traditional and other decentralized exchanges, and what specific advantages does it offer in terms of transaction speed, security, and interoperability?

sita_wong

Thanks for contributing with your questions! 1. **MPC vs. Multisig:** * **MPC:** In Multi-Party Computation (MPC), private key shares are managed through a distributed protocol where each party holds a part of the key. The actual private key is never reconstructed, significantly enhancing security against insider threats and external attacks. * **Multisig Wallets:** Private key shares are held by different parties or devices, and signatures are aggregated to complete a transaction. This method requires careful coordination and secure storage of each share but can be more vulnerable to coordination issues and potential insider threats. 2. **Chain Abstraction and Fees:** * Based on data from centralized exchanges, high-frequency trading (HFT) costs typically range from 2-4 basis points. For high-frequency volume trading, the gas fee cost is a fixed fee, which is comparable or even lower than what CEXs charge. * Additionally, charging a fixed fee per transaction can help prevent wash trading and fake volumes, ensuring a more transparent and fair trading environment. 3. **Centralization Concerns with MPC:** * **JayX Account:** Similar to how centralized exchanges operate, each user has their own on-chain address. The exchange uses a script to monitor individual accounts, moving assets to a centralized pool upon deposit and withdrawing from this pool as needed. Each user's JayX wallet is generated using MPC, ensuring that only your wallet can access and authorize transactions, providing a high level of security and control. * **JayX Vault:** The Vault functions like a centralized pool but with enhanced security features. The balance of each account is maintained on our blockchain ledger, and the pool is created at the genesis block using MPC technology. Funds in the Vault can only be moved after consensus among all nodes, adding an extra layer of security. This setup supports high-frequency trading with lower costs and faster settlements by bypassing native chain confirmation times. * **Decentralization Measures:** To avoid a 51% attack on the Vault, when node-staked TVL (Total Value Locked) reaches 80% of the Vault TVL, the Vault will initiate rebalancing, where inactive funds are returned to users' MPC wallets. This ensures that assets remains decentralized and secure.

sita_wong

Appreciate you asking this, thank you! Absolutely, I agree that designing DEXs to feel more like CEXs can significantly improve user experience. Regarding the JayX Account and Vault, here’s a detailed breakdown: **JayX Account:** Think of how a centralized exchange operates: each user has their own on-chain address, and the CEX uses a script to monitor individual accounts. When assets are deposited, the script moves the assets to a centralized pool, and all withdrawals come from this pool. JayX follows a similar process. Each user's JayX wallet is generated using Multi-Party Computation (MPC), ensuring that only your wallet can access the funds and authorize transactions. This provides a high level of security and control similar to traditional financial systems. **JayX Vault:** The Vault functions like a centralized pool but with enhanced security features. The balance of each account is maintained on our blockchain ledger, and the pool is created at the genesis block using MPC technology. Unlike single wallets, funds in the Vault can only be moved after reaching consensus among all nodes, adding an extra layer of security. Once assets are in the pool, transactions can be settled on JayX’s layer-2 chain, bypassing the native chain confirmation times. This setup supports high-frequency trading with lower costs and faster settlements.

sita_wong

Thanks for the question! We do not bridge chains, which means the user experience on each chain remains consistent and unchanged. Our primary focus is on decentralized management and custody of assets across all chains, ensuring security and consistency without modifying the inherent user experience of each EVM-compatible chain. Additionally, by leveraging Multi-Party Computation (MPC), we are future-proofed and can support any private-public key encryption. This enables us to support native chains like BTC, SOL, and APTs, among others.

mmstoin

Thanks for asking, we love questions like these! JayX ensures seamless integration and interoperability through its innovative chain abstraction layer and Multi-Party Computation (MPC) technology. The chain abstraction layer simplifies interaction with various blockchains by providing a unified API that can seamlessly connect to multiple blockchain networks. This approach minimizes integration complexities and allows for the quick addition of new and emerging blockchains. MPC technology secures cross-chain transactions by allowing multiple parties to jointly compute functions over their inputs while keeping those inputs private. This ensures that cross-chain transactions are secure, verifiable, and resistant to malicious attacks. Current Supported Blockchains: Ethereum Binance Smart Chain (BSC) Polygon (Matic) Avalanche Bitcoin (BTC) and BRC20-related protocols Blockchains in the Pipeline: Solana Ton Polkadot Cardano

Wademoto9

Thanks for asking, we love questions like these! JayX ensures seamless integration and interoperability through its innovative chain abstraction layer and Multi-Party Computation (MPC) technology. The chain abstraction layer simplifies interaction with various blockchains by providing a unified API that can seamlessly connect to multiple blockchain networks. This approach minimizes integration complexities and allows for the quick addition of new and emerging blockchains. MPC technology secures cross-chain transactions by allowing multiple parties to jointly compute functions over their inputs while keeping those inputs private. This ensures that cross-chain transactions are secure, verifiable, and resistant to malicious attacks. Current Supported Blockchains: Ethereum Binance Smart Chain (BSC) Polygon (Matic) Avalanche Bitcoin (BTC) and BRC20-related protocols Blockchains in the Pipeline: Solana Ton Polkadot Cardano

Wademoto9

Thanks for the question! We do not bridge chains, which means the user experience on each chain remains consistent and unchanged. Our primary focus is on decentralized management and custody of assets across all chains, ensuring security and consistency without modifying the inherent user experience of each EVM-compatible chain. Additionally, by leveraging Multi-Party Computation (MPC), we are future-proofed and can support any private-public key encryption. This enables us to support native chains like BTC, SOL, and APTs, among others.

Bitcoinoverlord

Hi and thank you very much for this AMA! I have been following the MPC prospect in the NEAR protocol and find it fascinating. Here are my questions. 1. What is the difference and advantages of using MPC over simply using hot wallets with multisignature that divide private keys into several shares? As far as Im aware, both are fairly fast with transaction speed. 2. While the idea of chain abstraction to simplify multichain transactions is very appealing for your average Joe, does that not inccur additional SEED fees for the intent relayers/validators (on top of the regular cross chain tx fes)? If so, does that not make the whole prospect fairly unappealing for low volume high frequency traders? 3. If my understanding is correct, abstract chain transactions wind up with 1 MPC wallet holding all the assets. If that is the case, isnt the whole thing fairly centralized?

trungngo7799

1. How does JayX ensure seamless integration and interoperability of new and emerging blockchains through its chain abstraction and MPC technology? Can you provide specific examples of blockchains currently supported and those in the pipeline? 2. What mechanisms or technologies does JayX employ to ensure that its decentralized order-book exchange maintains high throughput and low latency, especially under heavy trading volumes? How does it compare with centralized exchanges in terms of performance? 3. Given the emphasis on security, what specific measures does JayX take to safeguard against common vulnerabilities such as 51% attacks, front-running, and smart contract exploits? Are there any third-party audits or formal verification processes in place?

AutoModerator

Ping for verified users associated with MPC: /u/ZenGoOfficial *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/CryptoCurrency) if you have any questions or concerns.*

AutoModerator

Ping for verified users associated with MPC: /u/ZenGoOfficial *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/CryptoCurrency) if you have any questions or concerns.*

praveenbm5

The whole code is available for you to understand what is going on inside to the last detail and there is not much in there either. Its just a simple MultiSig transaction and a couple of PSBTs distributed cleverly between the participants. There is no coomplex cryptography or anything like MPC. Also, whenever and wherever this solution is offered to end users, the entire code-base will be available for everyone's perusal too. You dont need to trust... you can verify.

lookaway11

MPC

Derek-Gridlock

You are correct that seed phrases are a terrble security practice. You need multisig for ultimate security. Multisig is based on a specific blockchain but there is another technology called threshold sig that allows for multiple signers and works with many different blockchains. Generally this technology is called MPC (multi-party computation) but that term is being used very loosly and you should research to understand the level of distribution used by each product.

AutoModerator

Ping for verified users associated with MPC: /u/ZenGoOfficial *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/CryptoCurrency) if you have any questions or concerns.*

Patient_Delivery_376

You are very wrong. Privacy, together with regulation, is the major reason for public blockchains to not be adopted. First, let us be clear what privacy means. By privacy, I don't mean privacy in the sense of a Monero-like blockchain. By privacy, it means privacy-preserverving smart contracts. Example of cryptographic protocols towards privacy is Fully Homomorphic Encryption (FHE), Multi-Party Computation MPC, etc. Applications of these are here [https://eprint.iacr.org/2023/122](https://eprint.iacr.org/2023/122) [https://link.springer.com/chapter/10.1007/978-3-031-32415-4\_17](https://link.springer.com/chapter/10.1007/978-3-031-32415-4_17) and range from TradFi all the way to real estates and e-commerce. Literally, anything that has to do with real-world transactions, whether that be financial or identity-related transactions. Now, the main reasons that we have not seen these protocols implemented in the wild yet is as follows. For FHE, there's a computational hurdle in the sense that it is highly computational intensive. For MPC, we have them in a permissioned setting, such as a centralised server like Google or in TradFi. But in a decentralized setting, they can't be deployed as their security assumptions are weak and they are also computationally intensive. There are other protocols, such as Zero-Knowledge proofs. But zero-knowledge proofs can only be used in order to verify credentials and cannot be applied to stuff like protecting against front-running, etc. Research are conducted towards these, but it looks like the progress is slow as these are really hard problems: [https://dl.acm.org/doi/abs/10.1145/3548606.3559397](https://dl.acm.org/doi/abs/10.1145/3548606.3559397) Another extremely interesting application of these cryptographic protocols, if achievable, is that we can fully train a machine learning model in a decentralized setting, while everything, including the models and datas encrypted. Finally, now, cryptocurrencies only represent 0.5% of global economy. That is far, far, far from being adoption. But get these privacy-preserving protocols to work efficiently, and in a secure manner, in a decentralized setting, then all of TradFi, Real Estates, a great par of internet, such as running ads and so on will move onchain. And you will get mass adoption. Protocols such as FHE, MPC will greatly enhance research in healthcare (such as cancer research). You can finally run a presidential voting onchain, and even implement CBDC in a way that preserves privacy.

AutoModerator

Ping for verified users associated with MPC: /u/ZenGoOfficial *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/CryptoCurrency) if you have any questions or concerns.*

ZenGoOfficial

A secure way to self-custody. More secure than single-factor hardware wallets. MPC stands for Multi-Party Computation. TLDR: No seed phrase or single point of failure. Think of a mental model like a distributed or decentralized Private Key. Learn more about Zengo's MPC model here: [https://zengo.com/security](https://zengo.com/security)

Y0rin

What's MPC?

alvinkan

Thanks for the question, here at Bitget Wallet, security is of utmost importance to us. We employ multiple security checks to ensure the safety of every transaction and interaction. In addition to that, we support MPC and AA wallets, offer hardware wallet compatibility and have conducted audits on Bitget Wallet core codes for swaps and NFT market protocols. Not to mention, Bitget Wallet users are also eligible to share in a $300 million user protection fund with Bitget, enjoying another layer of added security.

AutoModerator

Ping for verified users associated with MPC: /u/ZenGoOfficial *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/CryptoCurrency) if you have any questions or concerns.*

SurprisedByItAll

THE largest holdings in btc use multi party computation MPC. Why on earth are.peeps downvoting? Are they really that unaware? Good luck, dear God.

poco

"What's MPC I ask..." Looking it up, it's just multisig. From their site... > MPC wallets like Zengo replace the traditional private key with two independently created mathematical “secret shares.” One share is stored on your mobile device and the other on the Zengo server. > With no single point of failure, even if something happens to one of the shares, no one can access your crypto but you. Ouch, that's 1 of 2 multisig. So, instead of securing your seed phrase, you have to trust Zengo to not steal your Bitcoin. Sounds great. Sign me up.

SurprisedByItAll

Stop using seeds and start using MPC like the biggest players with the moat to protect do. Zengo is a good option.

aweimposing

Partisia MPC

Royal-Resolution4717

Partisia Blockchain (MPC). Just listed on KuCoin/gate/bitfinex and some other exchanges a few days ago.

Royal-Resolution4717

Memecoins are for gamblers. It’s just a bunch of idiots playing ‘money chicken’ with each other. Last one to pull out holds the bag. People should be doing their gambling with coins that have technology behind them, that way if it moons it has the potential to actually stay there and have some form of utility. I have an appetite for risk, I won’t deny it, but I risk it on new coins that have a purpose. Like I literally just dumped my bags into MPC on KuCoin, newly listed and has big tech behind it. So let’s see who’s left standing in the end, tech or memes, and I bet it’s tech.

Percula_Clown

They’re a nice platform that do things a little differently from many others. Segregated client accounts. Intelligent MPC wallets with FireBlocks. Easy access to realistic and risk assessed DeFi if you choose to. Probably the most transparent fees structure I’ve ever come across. Still over $500m AUM in this market, so doing ok. If anything they can be charged with being too transparent and risk adverse. As shown here, sometimes it makes customers irritated. And with offering realistic yields vs the others (lending platforms, not the same) Anyhoo. Clearly come bull time they need to market in your territory!

WingChungGuruKhabib

Any project that does a combination of the following: MPC, privacy, data.

rohanagarwal94

Interesting take. While many teams are building to make seedphrase backups obsolete through MPC, SSS, AA etc. Reading the contrarian view to why seedphrases are important is healthy.

LazyEfficiency7942

Most of the ones i know are custodians rather than wallets. Check out argent though, i think they are MPC based wallet

LazyEfficiency7942

Not exactly an authenticator, but you should look into MPC based wallets. Much safer than normal seed phrase wallets.

MikeLitoris5

Looking for me? Here I am. >Nillion, an internet infrastructure platform based on cryptography, has developed a technology called Nil Message Compute (NMC), which changes how data is stored, processed and decentralized. This new technology could have important implications for how companies and users pursue decentralization as an ethos. >When asked how decentralization without blockchains was possible, Nillion CEO Alex Page explained how NMC-basedtechnology takes arbitrary data, transforms and fragments it, and then distributes the resulting particles across a network of nodes. >“The nodes can store the particles or run computations with the fragments of data without sending messages between themselves, and return the results to the desired end-point for reconstruction (without relying on trusted hardware)," Page explained to Cointelegraph. “Throughout the whole process, nodes are blind to whatever they are processing, yet are able to run computations at speeds that in many cases are significantly faster than its predecessor technology, \[multi-party computation, or MPC\].”