进入区块链的大门 — — 取消钱包授权(第五讲)
前面我们有讲到不同钱包的使用方法,和如何访问Dapp。对于经常访问Dapp和使用DeFi应用的人们来说,若想在DeFi协议上使用代币,‘’代币授权‘’是经常性的步骤。什么是代币授权?以太坊链、EVM链(BSC/HECO/OKExChain/Polygon等)和波场链上的Dapp大都涉及到合约操作,授权即表示允许该合约地址提取用户的代币。Dapp需要访问代币才能需要对其操作。比如你想在uniswap卖掉WBTC,则需要‘’Approve‘’ Uniswap的智能合约访问你钱包内WBTC的权限,然后才能通过第二笔交易把WBTC转换成其他代币。在钱包上面,你可以看到该授权。为了提升用户体验,减少授权次数,Dapp会要求无限授权,即该智能合约有权对钱包内的某个币种有不限量的转移权限。对于靠谱的知名平台,如uniswap等,不会恶意操作转移用户的钱包资产。如果该Dapp一开始就是恶意的,则该钱包对于已经授权该平台的所有币种都有极大的安全隐患。即便是成熟的项目,也有可能存在漏洞而被攻击者利用。所以一旦用户给Dapp授权,钱包的该代币就会陷入风险。 虽然硬件钱包可以保护私钥,并且没有人能绕过硬...
进入区块链的大门 — — 网页插件钱包(第三讲)
我们前面讲到了加密货币钱包的概览,上一讲是关于imtoken钱包的使用。本讲的主要内容是Metamask。metamask 有两个版本,一个是在谷歌浏览器chrome的以太坊钱包插件,也是最常用的,另一个是手机的app。这里主要讲最常用的chrome浏览器插件版。 1. 下载谷歌浏览器:https://www.google.com/chrome/ 记住一定要在官网下载,或者在有保障的平台下载,不要下载未知源头下载的谷歌浏览器。 2. 下载metamask的chrome浏览器插件 metamask的官方网站为https://metamask.io/ 点击下载,然后选择Chrome, Install metamask for chrome 这个时候就会跳转到chrome商店然后添加插件到chrome浏览器就可以了。 安装完成后,浏览器的插件栏会出现metamask小狐狸图标,安装完成可以开始使用。 3. 开始使用生成钱包根据引导一步一步走,点击”开始使用”2. 导入或者创建 根据你的钱包习惯,喜欢用自己老的钱包去作为metamask钱包的话,可以直接用助记词导入钱包,在metamas...
进入区块链的大门 — — 硬件钱包的使用(第四讲)
我们前面讲到了加密货币钱包的概览,imtoken和metamask的使用。本讲的主要内容是硬件钱包 — ledger nano X的使用。 为什么选择Ledger? Ledger是法国的硬件钱包品牌,是目前销量最大的硬件钱包。产品经过了市场和安全机构的验证,使用方便。Ledger目前有三款产品,是ledger nano S,Ledger nano S plus 和 ledger nano X。Ledger nano S 只能连接电脑端并且最多安装3个币种的app。Ledger nano X 可以连接电脑端,并且可以通过蓝牙连接手机端。存储空间大,可以同时安装几十个app。因为Ledger nano X可以连接手机,适合对于操作频繁的用户购买。Ledger nano S plus则是 Ledger nano S的升级款,也可以同时安装几十个app,但是无法通过蓝牙与手机连接。在这里我推荐用户购买ledger nano S plus 或者ledger nano X,用户可以按需购买。为了保证安全,这里硬件设备只推荐从官网购买,因为无法判定其他经销商的真伪。避免因为买到假的硬件钱包或者...
<100 subscribers

Share Dialog

进入区块链的大门 — — 取消钱包授权(第五讲)
前面我们有讲到不同钱包的使用方法,和如何访问Dapp。对于经常访问Dapp和使用DeFi应用的人们来说,若想在DeFi协议上使用代币,‘’代币授权‘’是经常性的步骤。什么是代币授权?以太坊链、EVM链(BSC/HECO/OKExChain/Polygon等)和波场链上的Dapp大都涉及到合约操作,授权即表示允许该合约地址提取用户的代币。Dapp需要访问代币才能需要对其操作。比如你想在uniswap卖掉WBTC,则需要‘’Approve‘’ Uniswap的智能合约访问你钱包内WBTC的权限,然后才能通过第二笔交易把WBTC转换成其他代币。在钱包上面,你可以看到该授权。为了提升用户体验,减少授权次数,Dapp会要求无限授权,即该智能合约有权对钱包内的某个币种有不限量的转移权限。对于靠谱的知名平台,如uniswap等,不会恶意操作转移用户的钱包资产。如果该Dapp一开始就是恶意的,则该钱包对于已经授权该平台的所有币种都有极大的安全隐患。即便是成熟的项目,也有可能存在漏洞而被攻击者利用。所以一旦用户给Dapp授权,钱包的该代币就会陷入风险。 虽然硬件钱包可以保护私钥,并且没有人能绕过硬...
进入区块链的大门 — — 网页插件钱包(第三讲)
我们前面讲到了加密货币钱包的概览,上一讲是关于imtoken钱包的使用。本讲的主要内容是Metamask。metamask 有两个版本,一个是在谷歌浏览器chrome的以太坊钱包插件,也是最常用的,另一个是手机的app。这里主要讲最常用的chrome浏览器插件版。 1. 下载谷歌浏览器:https://www.google.com/chrome/ 记住一定要在官网下载,或者在有保障的平台下载,不要下载未知源头下载的谷歌浏览器。 2. 下载metamask的chrome浏览器插件 metamask的官方网站为https://metamask.io/ 点击下载,然后选择Chrome, Install metamask for chrome 这个时候就会跳转到chrome商店然后添加插件到chrome浏览器就可以了。 安装完成后,浏览器的插件栏会出现metamask小狐狸图标,安装完成可以开始使用。 3. 开始使用生成钱包根据引导一步一步走,点击”开始使用”2. 导入或者创建 根据你的钱包习惯,喜欢用自己老的钱包去作为metamask钱包的话,可以直接用助记词导入钱包,在metamas...
进入区块链的大门 — — 硬件钱包的使用(第四讲)
我们前面讲到了加密货币钱包的概览,imtoken和metamask的使用。本讲的主要内容是硬件钱包 — ledger nano X的使用。 为什么选择Ledger? Ledger是法国的硬件钱包品牌,是目前销量最大的硬件钱包。产品经过了市场和安全机构的验证,使用方便。Ledger目前有三款产品,是ledger nano S,Ledger nano S plus 和 ledger nano X。Ledger nano S 只能连接电脑端并且最多安装3个币种的app。Ledger nano X 可以连接电脑端,并且可以通过蓝牙连接手机端。存储空间大,可以同时安装几十个app。因为Ledger nano X可以连接手机,适合对于操作频繁的用户购买。Ledger nano S plus则是 Ledger nano S的升级款,也可以同时安装几十个app,但是无法通过蓝牙与手机连接。在这里我推荐用户购买ledger nano S plus 或者ledger nano X,用户可以按需购买。为了保证安全,这里硬件设备只推荐从官网购买,因为无法判定其他经销商的真伪。避免因为买到假的硬件钱包或者...
Share Dialog
With the U.S. Treasury sanctioned the Tornado Cash on August 8, the biggest token mixing pool shut down immediately. Tornado Cash is very notorious due to the rise in crypto accidents. It is usually the best place for hackers to launder their stolen funds. Now let us talk about Tornado Cash, its mechanisms, ethics, and other investment opportunities in the privacy area.
Tornado Cash is a fully decentralized protocol. People can deposit tokens in Tornado Cash, and withdraw through different addresses. Tornado Cash can mix all the deposited assets with a pool and generate a private key for users to withdraw assets to different addresses. Before it closed, there were 3.2 million ETH in the service.
Many projects’ stolen tokens were laundered through Tornado Cash before it closed, such as Beanstalk Farms, Ronin Network, Nomad and so on.
To make a deposit user generates a secret and sends its hash (called a commitment) along with the deposit amount to the Tornado smart contract. The contract accepts the deposit and adds the commitment to its list of deposits.
Later, the user decides to make a withdrawal. In order to do that the user should provide proof that he or she possesses a secret to an unspent commitment from the smart contract’s list of deposits. zkSnark technology allows doing that without revealing which exact deposit corresponds to this secret. The smart contract will check the proof, and transfer deposited funds to the address specified for withdrawal. An external observer will be unable to determine which deposit this withdrawal comes from.

In order to prevent transactions from being tracked due to obvious values, Tornado Cash only allows users to withdraw a fixed amount each time, such as 1ETH, 10ETH, etc.
To avoid the risk of being tracked online, users can use VPN, proxies, or Tor browser to hide the IP address.
Is it reasonable to ban Tornado Cash? Legally speaking, it is unreasonable.
From a legal perspective, "whether an individual has the ability to think and judge independently" is a very important criterion. This is why the conviction criteria for minors and mentally ill people are different from those with full capacity for civil conduct. As an inanimate and unconscious object, it is naturally impossible to condemn the tool. For example, if a person kills a person with a knife, will the knife be considered guilty? The answer is of course not. Because the knife has no self-consciousness, it is impossible to convict the knife.
Secretary of the Treasury for Terrorism and Financial Intelligence Brian E. Nelson said, “Despite public assurances otherwise, Tornado Cash has repeatedly failed to impose effective controls designed to stop it from laundering funds for malicious cyber actors on a regular basis and without basic measures to address its risks. Treasury will continue to aggressively pursue actions against mixers that launder virtual currency for criminals and those who assist them.”
In fact, this passage is unreasonable and illogical. Tornado Cash is a fully decentralized, non-custodial protocol. Tornado Cash is not like an accomplice and will become the subject of a crime, it is actually a tool in nature.
This is not simply an unreasonable sanction against Tornado Cash, but the control and suppression of decentralization and privacy by the US government system. If they really want to secure citizens’ assets, they should work on how to catch hackers, and how to improve the code of projects and protocols to avoid exploitable vulnerabilities.
Actually, the mechanism of Tornado Cash is very simple but efficient and useful, so it’s the best choice for hackers laundering money. There are few privacy protocols based on the Ethereum Virtual Machine (EVM), and there are three competing products of Tornado Cash: Typhoon Cash, Typhoon Network, and Cyclone.
Typhoon Cash is a project endorsed by Huang Licheng. It is built on Ethereum and reuses most of the code of Tornado Cash. The TVL is only tens of thousands of dollars. The last deposit occurred 3 months ago, and it was relayed. The service is entirely provided by the official, and there is a very strong risk of a single point of failure; Typhoon Network is built on the Binance Smart Chain (BSC) and reuses most of the code of Tornado Cash, and the total lock-up volume is less than 40,000 US dollars. And the relay service is entirely provided by the official, so there is a very strong risk of a single point of failure; Cyclone is developed on the basis of Tornado Cash and deployed on Ethereum, Binance Smart Chain, and IoTeX, which requires additional on-chain base currency (such as ETH, BNB, and IOTX) and the governance token CYC can complete the deposit, and users are required to use CYC to pay the anonymous pool fee and relay fee. In addition, all relay facilities are provided directly by the official, which has a very strong single point of failure risk.
As can be seen from the above projects, Tornado Cash has an absolute advantage in this area. But with the closure of Tornado Cash, is there a chance for these similar projects? I don't think there will be another chance. If these privacy protocols can grow due to the shutdown of Tornado Cash, the U.S. government will still impose sanctions on it to force it to shut down.
Monero and Zcash are two major blockchains in the privacy area. Monero uses Stealth Address and Ring Confidential Transactions (RingCT) technologies, taking into account both anonymity and transfer efficiency. Zcash is the first blockchain to use zk-SNARK (Zero-Knowledge Succinct Non-Interactive Argument of Knowledge). Tornado Cash also uses this technology as a security guarantee for private transactions.
However, the public chain of privacy coins has the same problem, that is, it is impossible to add support for smart contracts on the premise of ensuring privacy transactions. Liquidity is also an important part. Low liquidity cannot play a privacy role. The number of users and liquidity are also key indicators. At the policy level, if a privacy blockchain is widely used, will it encounter sanctions from the US government again? In fact, we don't know, but we can still pay attention to the primary market and new privacy blockchains and look for investment opportunities.
Written by: Lucio Lyu
Twitter: @imLucio_eth
With the U.S. Treasury sanctioned the Tornado Cash on August 8, the biggest token mixing pool shut down immediately. Tornado Cash is very notorious due to the rise in crypto accidents. It is usually the best place for hackers to launder their stolen funds. Now let us talk about Tornado Cash, its mechanisms, ethics, and other investment opportunities in the privacy area.
Tornado Cash is a fully decentralized protocol. People can deposit tokens in Tornado Cash, and withdraw through different addresses. Tornado Cash can mix all the deposited assets with a pool and generate a private key for users to withdraw assets to different addresses. Before it closed, there were 3.2 million ETH in the service.
Many projects’ stolen tokens were laundered through Tornado Cash before it closed, such as Beanstalk Farms, Ronin Network, Nomad and so on.
To make a deposit user generates a secret and sends its hash (called a commitment) along with the deposit amount to the Tornado smart contract. The contract accepts the deposit and adds the commitment to its list of deposits.
Later, the user decides to make a withdrawal. In order to do that the user should provide proof that he or she possesses a secret to an unspent commitment from the smart contract’s list of deposits. zkSnark technology allows doing that without revealing which exact deposit corresponds to this secret. The smart contract will check the proof, and transfer deposited funds to the address specified for withdrawal. An external observer will be unable to determine which deposit this withdrawal comes from.

In order to prevent transactions from being tracked due to obvious values, Tornado Cash only allows users to withdraw a fixed amount each time, such as 1ETH, 10ETH, etc.
To avoid the risk of being tracked online, users can use VPN, proxies, or Tor browser to hide the IP address.
Is it reasonable to ban Tornado Cash? Legally speaking, it is unreasonable.
From a legal perspective, "whether an individual has the ability to think and judge independently" is a very important criterion. This is why the conviction criteria for minors and mentally ill people are different from those with full capacity for civil conduct. As an inanimate and unconscious object, it is naturally impossible to condemn the tool. For example, if a person kills a person with a knife, will the knife be considered guilty? The answer is of course not. Because the knife has no self-consciousness, it is impossible to convict the knife.
Secretary of the Treasury for Terrorism and Financial Intelligence Brian E. Nelson said, “Despite public assurances otherwise, Tornado Cash has repeatedly failed to impose effective controls designed to stop it from laundering funds for malicious cyber actors on a regular basis and without basic measures to address its risks. Treasury will continue to aggressively pursue actions against mixers that launder virtual currency for criminals and those who assist them.”
In fact, this passage is unreasonable and illogical. Tornado Cash is a fully decentralized, non-custodial protocol. Tornado Cash is not like an accomplice and will become the subject of a crime, it is actually a tool in nature.
This is not simply an unreasonable sanction against Tornado Cash, but the control and suppression of decentralization and privacy by the US government system. If they really want to secure citizens’ assets, they should work on how to catch hackers, and how to improve the code of projects and protocols to avoid exploitable vulnerabilities.
Actually, the mechanism of Tornado Cash is very simple but efficient and useful, so it’s the best choice for hackers laundering money. There are few privacy protocols based on the Ethereum Virtual Machine (EVM), and there are three competing products of Tornado Cash: Typhoon Cash, Typhoon Network, and Cyclone.
Typhoon Cash is a project endorsed by Huang Licheng. It is built on Ethereum and reuses most of the code of Tornado Cash. The TVL is only tens of thousands of dollars. The last deposit occurred 3 months ago, and it was relayed. The service is entirely provided by the official, and there is a very strong risk of a single point of failure; Typhoon Network is built on the Binance Smart Chain (BSC) and reuses most of the code of Tornado Cash, and the total lock-up volume is less than 40,000 US dollars. And the relay service is entirely provided by the official, so there is a very strong risk of a single point of failure; Cyclone is developed on the basis of Tornado Cash and deployed on Ethereum, Binance Smart Chain, and IoTeX, which requires additional on-chain base currency (such as ETH, BNB, and IOTX) and the governance token CYC can complete the deposit, and users are required to use CYC to pay the anonymous pool fee and relay fee. In addition, all relay facilities are provided directly by the official, which has a very strong single point of failure risk.
As can be seen from the above projects, Tornado Cash has an absolute advantage in this area. But with the closure of Tornado Cash, is there a chance for these similar projects? I don't think there will be another chance. If these privacy protocols can grow due to the shutdown of Tornado Cash, the U.S. government will still impose sanctions on it to force it to shut down.
Monero and Zcash are two major blockchains in the privacy area. Monero uses Stealth Address and Ring Confidential Transactions (RingCT) technologies, taking into account both anonymity and transfer efficiency. Zcash is the first blockchain to use zk-SNARK (Zero-Knowledge Succinct Non-Interactive Argument of Knowledge). Tornado Cash also uses this technology as a security guarantee for private transactions.
However, the public chain of privacy coins has the same problem, that is, it is impossible to add support for smart contracts on the premise of ensuring privacy transactions. Liquidity is also an important part. Low liquidity cannot play a privacy role. The number of users and liquidity are also key indicators. At the policy level, if a privacy blockchain is widely used, will it encounter sanctions from the US government again? In fact, we don't know, but we can still pay attention to the primary market and new privacy blockchains and look for investment opportunities.
Written by: Lucio Lyu
Twitter: @imLucio_eth
No comments yet