To me it reminded me of laying out the concrete foundation, all of the steel and iron beams of the building and the wiring and plumbing.

For this I have altered the styling slightly to its v1 version of an industrial grey tone. It has deeper meaning than that as well to me, for as such it is bland and boring(still a little classy), but when the community NFT’s are brought in all of the energy and vibrancy comes along with it and the grey accentuates the art piece rather than distracting from it.

Without the community, the website is dull and meaningless, but with the community the life and vibrancy and colors of the world are brought in!

I want to see your colors shining brightly!

A community center has formed in PharOut!

Head to the Community page and click on the Community Center link to visit the newly forming PharOut p2p decentralized networking center for NFT communities!

You’ll be able to create your own Chapters of your Community and launch your own encrypted nodes to host exclusive activities!

Stream audio/video content, gameplay, file sharing and much more to come!

The only components enabled at the moment are the landing page and the IPFS uploader that anyone can use! These files will not be permanently pinned, but they will remain relevant the more they are requested! They may disappear though!

PharOut NFT Holders can now pin any file to Pinata!

If you hold a PharOut NFT, first of all thank you very much for the support and belief in this build! If you are connected to the site, You can now upload and pin any file to IPFS/Pinata automatically!

The website reads the chain and can tell if you are a holder, if so it will automatically pin every file you upload!

Upload Size Limits: Each individual upload (whether it is a file or a folder) is limited to 25 GB.

There’s much more exclusive content to come, I hope this custom IPFS uploader is useful to all of the world

Mint a NFT to pin any file and help support the build!

下面开始我们的测试教程：

1）安装Keplr插件钱包

2）进入测试网，连接钱包。（点击右上角 Connect Wallet 连接钱包，然后会让你添加 Korellia 网络， 点击两次确定，添加完成后再点击 Keplr 切换到 Korellia 网络。）钱包切换到Korellia 网络

3)进入主页

1/ 首先看到是验证节点池子，池子可以委托节点、做资金贡献、跑节点验证。

2/左侧第一个菜单是KYVE测试网测试数据，有当前KYVE测试币供应数量，节点池子参数等数据。

3/第三个菜单是治理提案。有KYVE测试币可以针对各个提案投票。

4/第四个菜单是当前用户委托抵押、资金贡献、验证节点的数据。

5/第五个菜单水龙头，领取测试代币。当前有三种方式领取：一是每个推特可以领取1一次300个；另一个每隔24小时在官方DC faucet频道领取，一次20个；最后一种是每隔24小时，滚动盘抽奖领取。

🤑The coins obtained from airdrops are airdropped to the On-chain Testing Network and the main chain at the same time. The coins on the On-chain Testing Network are transferable test coins, but the transfer of the coins on the On-chain Testing Network won’t affect the release of coins on the main chain. That is to say, after coins are airdropped to Node A, it will transfer them to Node B on the testing chain, while coins are still airdropped to Node A on the main network.

📍JOIN our Airdrop LIVE event NOW!
🙌15th — 30th November

📲For more info Join Telegram
https://t.me/AuroraFS

🎮Join Discord: http://discord.gg/p8VgahRXm6

• Algorithmic Stablecoin (secured by real assets)

• Term loans on favorable terms secured by cryptoassets

• High yield deposits

• Integration with Binance Smart Chain and Chainlink

All this BaksDAO🚀

To celebrate the platform’s imminent release, we are announcing a contest where we will raffle off BAKS Stablecoins (1 BAKS = 1 USDT) and BDV control tokens 💫

Prize fund: 1,600 BAKS Stablecoins and 400,000 Baks Voice tokens.

After the launch of BaksDAO, participants will be able to exchange BAKS Stablecoins on the platform for any currency: USDT, BNB, BTC, or ETH.

To become a member, simply sign up for our social media accounts by December 20, 2021:
1. BaksDAO telegram community: https://t.me/BaksDAO_INT_COMMUNITY
2. Our channel: https://t.me/BaksDAO_IntBlog
3. Twitter https://twitter.com/BaksDao
4. Our Medium page.

The first 100 subscribers will receive 10 BAKS + 500 BAKS Voice tokens;
Next 200 subscribers: 3 BAKS + 500 BAKS Voice tokens;
Subsequent 1,000 subscribers: 250 BAKS Voice tokens.

Contest results will be announced by the end of December 2021.
To enter the contest: https://t.me/baksdao_bounty21_int_bot

https://thesannilark.medium.com/?source=post_page-----9e01e89a1721-----------------------------------

Sanni Lark

https://thesannilark.medium.com/in-a-world-that-fetishizes-romance-platonic-intimacy-is-extremely-underrated-9e01e89a1721?source=post_page-----9e01e89a1721-----------------------------------

17 hours ago·4 min read

In our society we are conditioned to prioritize romance with the opposite sex as if that is the only worthy goal in life, besides procreating with the lucky individual who proves themselves to be a viable life partner.

We refuse to compartmentalize romance as being just that: a small side dish that makes up the beautiful and…

We are excited to announce our partnership with Morpheus.Network, a blockchain-powered supply chain SaaS middleware platform that integrates legacy technologies with emerging technologies. 

Through the partnership, Horizen and Morpheus.Network will instantiate a blockchain using Horizen’s scalability protocol, Zendoo, to act as a blockchain component for the Morpheus.Network platform. The benefit of the choice is a lower operating cost for the Morpheus.Network platform and that businesses will be able to record each step in the supply chain process on a public, permissionless, and decentralized blockchain. Furthermore, projects will explore the implementation of privacy features leveraging zero-knowledge technology and the integration of IoT devices for supply chain workflow automation.

“Morpheus.Network’s middleware platform is a much-needed solution for the global supply chain industry and we’re excited to provide our users and businesses with new use cases. Following our first project integrating Horizen as the notarization layer, we will seek to collaborate on launching a  dedicated blockchain and developing privacy use cases for the Morpheus.Network platform.”

This partnership will enable Morpheus to further optimize its supply chain operations to help clients maximize revenue through digitization and process automation, protecting sensitive data, and untangling complex issues. 

“Partnering with Horizen provides us with the opportunity to continue to grow our supply chain platform,” said Danny Weinberger, CEO of Morpheus.Network. “We are working together to elevate the future of the supply chain industry, continuing our mission in optimizing global trade by providing a novel notarization layer and privacy tech for our customers. “

Be sure to follow us on Twitter, Facebook, or Discord to stay up to date on partnership details. For more information, please visit https://www.horizen.io/ and https://morpheus.network/.

About Morpheus.Network

At Morpheus.Network, we are intensely focused on optimizing supply chain operations. Our team and global network of partners have extensive experience in implementing cutting-edge solutions leveraging our breakthrough supply chain platform.  The enterprise platform has been adopted by SENASA, the National Food Safety and Quality Service of the Argentine government, FCL, one of the 50 largest companies in Canada, and VitcalCan, Argentina’s biggest pet food supplier. We help clients maximize revenue through digitization and process automation, protecting sensitive data, and untangling complex issues with the legacy supply chain system while delivering effective, fairer, and more sustainable global trade.

About Horizen

Launched in 2017, Horizen is a technology platform that enables businesses and developers to quickly and affordably create their own public or private blockchains on the largest node network in the industry. Through its fair and inclusive ecosystem, Horizen fosters a community where everyone is empowered and rewarded for their contributions. With its unique Sidechain technology, Zendoo, Horizen provides all necessary components for an easy and fast deployment of fully customizable blockchains. For more information, visit horizen.io.

TL;DR: Check the Anoma repository or documentation out.

Shortly after Anoma’s announcement at the end of March, the core developers of Anoma released the whitepaper, which provides a comprehensive overview of the design and features of the protocol. Following the ethos of the project and its core developers, the current implementation of the protocol has been open-sourced — paving the way for a more accessible research and developer journey of Anoma.

In the Anoma codebase

From the beginning of the year, the core developers of Anoma have been working continuously on the Anoma ledger, its intent gossip system, and the matchmaker system. The ledger is characterized by its integration with Tendermint BFT consensus and WASM, in addition to basic capabilities such as key-value store, transactions, and a command-line interface. Over the last moon cycle, the support for validity predicates on WASM, gas metering, and storage improvements among other changes were added to the ledger; the intent gossip system is able to broadcast and support simple token barter intents; and the matchmaker is integrated with a WASM matching algorithm, allowing the system to match simple token barter intents. For a more in-depth view of the architecture of Anoma, take a look at the documentation.

Learning by playing with Anoma

As the design of the Anoma protocol is distinct in several ways, some features might appear unfamiliar, especially if you’re accustomed to protocols designed to be cryptocurrencies or platforms for arbitrary computation. Besides learning about Anoma via the growing base of resources, a swifter way for the playful minds would be by trying Anoma out.

If you’re interested in setting up your own local testnet of Anoma, you can find the guidelines for installing, building, operating an Anoma node here. You can also find the Rust docs for the Anoma crates here. Some of the most notable interactions involve validity predicates, creating and submitting intents, and operating the intent gossip and matchmaker systems.

Contributing to Anoma

Nothing would delight the core developers of Anoma more than feedback on the design, code, or documentation from the community at any scale — from typos to reviews on the design. Find the contribution guidelines here and a list of open issues here.

If you feel aligned with the vision of Anoma and would be interested in getting more involved with the project, know that the current team is growing and looking for more team members driven by the purpose of making privacy-preserving and self-sovereignty tools accessible. Take a look at this list of open positions, including but not limited to distributed systems research, zero-knowledge cryptography research and protocol engineering in Rust.

What’s next?

An upcoming development of the Anoma protocol is in the works and it combines the above with proof-of-stake and a dynamic validator selection mechanism. Later, support for Ferveo for front-running protection will be integrated, with other notable features to follow. The prototype is being refined along with the technical specifications and documentation in preparation for the very first experimental public testnet of Anoma. To stay tuned with the progress and updates, find us on Twitter, join the community on Discord, or receive updates.

Anoma is a sovereign, proof-of-stake blockchain that enables private, asset-agnostic bartering among any number of parties. To illustrate the capabilities of Anoma, we’ll go through three examples and provide an overview of some of the key components of the protocol.

Private transfers with one asset type

In the first example, there are two participants: Alice, residing in San Francisco, and Bob, residing in Zürich. Alice and Bob had dinner together abroad, before they returned to their respective countries. To settle the bill for dinner, Alice wants to pay Bob in BTC.

In this example, two parties wish to transact, where the sender’s asset type (BTC) coincides with the receiver’s asset type. The Anoma blockchain is able to settle this transaction in zero-knowledge privacy. On Anoma, observers will not be able to infer any information about this transaction between Alice and Bob. Additionally, this transaction will look indistinguishable from any other transaction involving BTC, ETH, or any other cryptocurrencies.

Private transfers with two asset types

In the second example, Alice is on a business trip in Shanghai and visits 1984 Bookstore & Café, a trendy coffee shop in the bustling megacity. Alice, who holds primarily BTC in her mobile wallet, wants to pay for coffee.

Just like the first example, this transaction involves two parties: Alice and the coffee shop. However, the sender’s asset type (BTC) does not coincide with the recipient’s asset type, as the coffee shop only accepts CNY or CNYC, a stablecoin form of 人民币. Through Anoma, Alice can spend BTC and the coffee shop can receive CNYC.

Under the hood, the Anoma blockchain automatically facilitates exchange between BTC and CNYC at the best market rate at the time, and all intermediate transactions (sending BTC, the BTC/CNYC exchange, and receiving CNYC) benefit from privacy provided by a multi-denomination zero-knowledge transfer circuit, which enables different types of assets to share one anonymity set. This way, the privacy guarantees will not be limited by the transaction volume of each individual asset.

This transaction is enabled by Anoma’s custom-tailored state machine, which has an built-in trade system supporting cross-chain asset transfers and settlement, a novel account system based on validity predicates, and an intent matching system with liquidity incentivization.

N-party bartering

In the third example there are three parties: Alice, Bob, and Charlie. Alice holds BTC and wants DOT, Bob holds ETH and wants BTC, and Charlie holds DOT and wants ETH.

In this case, there are three parties, and no two can directly trade with each other because their desires are pairwise mismatched. The Anoma intent matching system and blockchain are able to match and settle the wants of all three participants at the same time. In other words, Anoma enables *bartering *among all three parties, as Alice, Bob, and Charlie do not need to agree on a common means of exchange in order to satisfy their individual wants.

Using the components described above, combined with custom zero-knowledge circuits, all interactions involved in an 𝐍-party barter can benefit from the same privacy guarantees as a simple two-party asset transfer. Moreover, users of Anoma can barter any types of assets, including cryptocurrencies, stablecoins, fungible-assets, non-fungible assets or any upcoming types that represent more complex valuables.

Lastly, the Anoma blockchain is equipped with a distributed key generation and threshold decryption scheme to prevent reordering transactions and front-running trades.

The motivations behind Anoma

The motivations behind Anoma are threefold: the loss of individual financial privacy, the loss of local financial sovereignty, and the inability of humankind to coordinate at scale.

First, the loss of financial privacy is fueled by the non-consensual usage of sensitive data about each individual’s financial activity by third parties. In mild cases, this results in intrusive commercial practices, such as targeted advertising or monetization of sensitive information. In more severe cases, this contributes to national and foreign governmental and corporate surveillance programs.

Second, the loss of local financial sovereignty results from the dependence on traditional financial systems — from electronic forms of fiat currencies to the permissioned backbone of international wire transfers. These systems, which often consist of a complex web of direct and indirect intermediaries, are susceptible to capture by governments, who can leverage them to enforce their sanctions on domestic or foreign residents.

Third, humankind lacks the tools to solve problems of a cross-border nature which require the coordination of large groups of distinct economic agents. An existentially threatening subset of them, collective action problems, are currently only addressable through mechanisms that rely on the intervention of governments. Unfortunately, said problems often transcend national borders, thereby rendering the enforcement capabilities of Westphalian nation states inadequate.

The vision behind Anoma

The Anoma blockchain protocol aims to facilitate “Self-Sovereign Communities” by providing tools that grant increased control to individuals and communities’ of the systems governing their day-to-day aspects and activities, such as financial privacy, sovereignty, and coordination.

As the first instances of the Anoma protocol focus on granting privacy-preserving financial tools, the Anoma blockchain protocol places special emphasis on supporting any kind of asset and on zero-knowledge privacy regardless of the denomination of the assets.

The purpose of *undefining money *refers to the removal of any artificial constraints around what can be used as money or means of exchange, providing higher flexibility and control to the users of the protocol in deciding what to use — be it assets created by others or assets they created themselves. Anoma’s focus on financial self-sovereignty is also illustrated by the N-party barter system, which facilitates asset-agnostic private cash in the simplest cases, but can assist in exchange, trades, and other financial activities of entire communities.

Finally, in alignment with the vision, the design of the Anoma blockchain protocol scales via fractal scaling. Simply put, each Anoma blockchain instance is designed to integrate seamlessly with other instances, which can be specialized geographically (e.g. when Alice pays for coffee in Shanghai, this transaction is settled by the Chinese instance of Anoma) or are tailored to satisfy the needs and purposes of any real-world or virtual community (e.g. an Anoma instance that allows Animal Crossing players to trade furniture).

The team building Anoma

The Anoma blockchain protocol is being built by Heliax, a team currently composed of 23 cross-disciplinary members and supported by the Anoma Foundation.

Anoma was first introduced in March, followed by the publication of Anoma’s whitepaper in April, the open-sourcing of the codebase in June, and the release of the Vision paper in July. Today, we’re thrilled to announce Anoma’s first public testnet: Feigenbaum.

Announcing Feigenbaum: Anoma’s first public testnet

What is Feigenbaum?

Feigenbaum is Anoma’s first public test network, developed and currently maintained by the team building Anoma. It is the first milestone in Anoma’s public testnet roadmap, which has been constructed to enable a progressive deployment of components and features, and to facilitate the participation of early users in testing and interacting with the implementation– thereby parallelizing the development of further features, and the gathering and integration of external user feedback.

Fractals are a recurring theme in the design of Anoma, noticeable, for instance, in how the protocol upgrade mechanism works or in how Anoma’s ecosystem scales via the co-existence of many instances. Thus, Anoma’s protocol version names take inspiration from fractals, beginning with the Feigenbaum testnet, named after the Feigenbaum attractor, a deterministic fractal with a very low Hausdorff dimension.

More in-depth reading:

• Anoma Tangram article on Fractal Upgrades

• Anoma Tangram article on Fractal Scaling

What features does Feigenbaum support?

The current version of the protocol provides an early demonstration of the intent gossip and matchmaker components in the peer-to-peer layer, which are very particular to the design of the Anoma protocol and unprecedented in the architecture of other Layer 1 blockchains. It also offers a playground for customizing and deploying validity predicates and transactions in Rust. Anoma implements proof-of-stake (PoS) as its sibyl resistance mechanism and Tendermint, a variant of the practical Byzantine Fault Tolerant consensus mechanism (PBFT). Finally, interactions with the protocol are facilitated via the command-line interface (CLI) client, node, and wallet.

What can you do on Feigenbaum?

In addition to the basic interactions with the ledger, Feigenbaum already enables experimentation for users who might be interested in operating and directly participating in the network at mainnet launch.

The roles* supported are operating validator nodes, intent gossip, and matchmaking nodes. For builders that enjoy playing with Rust, we encourage them to try customizing validity predicates, transactions, or even the matchmaker node. For early end-users that are not intimidated by the command-line, it’s not too early to start with the basics, such as setting up a wallet with addresses, getting some testnet tokens from the faucet account, making transfers, and staking– or, for the most adventurous ones, a primer to Anoma as a multivariate, multivariable protocol, you can start crafting custom intents and deploying them directly to the intents gossip network.

More in-depth reading:

• Anoma Tangram article on Intent Gossip & Matchmaking system

• Anoma Tangram article on Validity Predicates

*Stay tuned for a new series of articles on our blog that explain each role in the Anoma Network!

How do I participate in the Feigenbaum testnet?

As a public, permissionless testnet, anyone can join anonymously by pulling the code from the repository and following the instructions in the docs.

A few members from the team building Anoma will also be participating in the Feigenbaum testnet to ensure that it runs smoothly. Furthermore, some will be available on Anoma’s Discord server (#feigenbaum channel) to help out with installation or any other issues, as well as for gathering user feedback.

Finally, to stay up-to-date on all news and communications related to Anoma’s Feigenbaum and future testnets, we recommend that you fill in this form to receive the testnet newsletter.

With its flexibility, the Synapse network can bring big and small investors to the same table.

Communications between the citizens and magnates of our society have never been more strained — with phenomena such as the Gamestop debacle pitching in the interests of one directly against those of the other. This can’t go on. As the masses swarm into a space formerly reserved for the elites, Synapse promises to unite both by enabling them to share in the spoils of the same investment process.

In 2020, Brian Armstrong — a CEO of the Coinbase cryptocurrency trading company — hosted a panel titled “Setting Up and Scaling a Crypto Company.” He pointed out that raising money for a start-up is very difficult as it requires access to a perfect match of investors who understand the drive of a project and have the will to get behind it. “Crypto has the potential to democratise fundraising and make it available. This alone could increase the number of start-ups in the world by an order of magnitude which would be really good for the world.” From the CEO of one of the most successful companies operating in the space of cryptocurrencies, the sentiment that fundraising through ICOs might be one of the most important breakthroughs offered by the DeFi space serves as an apt introduction for the synapse network.

If there’s any quandary more nerve-wracking than the decision of where to invest your hard earned wealth in 2021, it’s where to invest the billions of corporate and government funds entrusted to your care.

With crypto, investors are gathered in the same virtual room to make their own value judgments on an investment. The rules and protections are equal whether you are investing millions of dollars or a single cent and, with Synapse, speculators can move their stake from one medium to another as was previously impossible without tariffs and administration costs.

Founded on a basis of integrity, Synapse paves the way for a new consensus between those who have always been on the opposite sides of the spectrum. The eternal conflict between the Davids and Goliaths seems to be coming to its conclusion. We are witnessing a paradigm shift in crypto investment perception and with the discourse revision comes an actual implementation of the democratic ideals. Coming back to the very concept that gave birth to the crypto space, Synapse establishes a platform based on equality and accessibility.

Worldcoin is launching by giving as many people as possible a share of a new currency.

Imagine a world where everyone around the globe, regardless of who they are, could participate in the growing space of digital economies and benefit from decentralized, collective ownership. What would it take to get there?

The first step is getting the same currency into the hands of as many people as possible. The more people there are that collectively hold and use the same currency, the more useful that currency becomes for each participant. While it’s not hard to see that widespread adoption is desirable, every currency faces a coordination problem on the way.

The same applies to cryptocurrencies and, so far, crypto as a technology has only reached about 3% of the world’s population[1]. While there have been amazing technological breakthroughs, there has not yet been a successful coordinated effort to achieve widespread, global adoption.

Worldcoin aims to overcome this coordination problem by aligning the incentives of all participants and allocating the majority of the currency to new users as a reward for joining the network.

Distinguishing new users in a way that can scale to the whole world is a hard problem. Our approach relies on a custom biometric device - we call it the Orb - that verifies the uniqueness of a person through iris recognition, while preserving their privacy through zero knowledge cryptography.

There were many technical challenges along the way. In the following sections, we describe our design decisions for different aspects of the problem including biometrics, hardware, crypto and economics. But to start, we want to offer a glimpse into what the global launch of Worldcoin might look like by providing the results from our field tests, which are already underway!

Field Tests: Towards 1 Billion Sign-Ups & Beyond

It is core to the mission of Worldcoin that the network is not run by a single entity, but instead by entrepreneurial individuals all around the world who apply to receive an Orb to run independent operations in their communities. We call these individuals *Orb Operators *and they have the autonomy to build their operations from the ground up, doing everything from running their own marketing campaigns to collaborating with local partners.

In order to test this model and technology, we have onboarded twenty-five Operators that run more than thirty devices in twelve countries across four continents (Africa, South America, Europe and Asia). In the coming months, the scale of these tests will increase as hundreds more devices and Orb Operators come online. After launch and an initial Orb production ramp-up phase, around four thousand devices will be distributed per month.

So far, the best performing Operators have been able to onboard around *one thousand users per Orb per week, *with our best performing Operator even signing up 2,198 users in one week with a single Orb. They have achieved these results despite using prototype devices (which are slower than the production model), facing frequent COVID disruptions, and not having the benefit of a public Worldcoin presence. In the four weeks before this post was published, the average weekly sign-up rate across all Operators was 764 per Orb and 1,069 per Operator.

To illustrate the success and potential of these Operators, we will dive deeper into the operations from the following five countries: Chile, Kenya, Indonesia, Sudan and France.

Chile

Currently, the longest-active Orb Operator in the world is based here. He has managed to sign up over eighteen- thousand users in a little over six months by running his operations like a business. He employs twenty people who work in shifts—at any given time, he has four people supporting his Orb operation. This allows him to keep his Orb active for eight hours a day, every day. His commitment to the project and its vision is astounding—while he normally operates out of Santiago, he aims to spread the project all throughout Chile, occasionally flying his team to smaller, more remote Chilean towns where he has had to secure special permission to operate and give away Worldcoin.

Orb Operator in Chile

"I wake up every day knowing that we are educating hundreds of people about the future of tech. It is a real honor to be able to give them access to a new financial system run by the people, not by centralized organizations like governments and banks. We're building Singapore in Chile…unlocking opportunities for everyone."

Kenya

One of the Orb Operators in Kenya typically partners with universities to run sign-up events. He has assembled a team of over thirty people so far. At optimal capacity, he runs events six days a week, all at different universities. At each event, he signs up between three and four hundred people. As word of what he was doing spread, universities around the country began to invite him to their campuses, with some invitations even sent directly from the presidents of the university. To keep up with this ever-increasing demand, he will often run two events concurrently in different locations, splitting up his four Orbs to efficiently sign up more people.

Orb Operator in Kenya

"Worldcoin has been an absolute eye-opener for me. It has been amazing to see cryptocurrency take off like this here in Kenya. Kenyans have been using mobile money for ages and see the possibility for Worldcoin to take things one step further: to help us become a cashless society. When it comes to people with no prior crypto knowledge, I love taking them through the history of cryptocurrency and explaining how Worldcoin will open up a whole new world for them. I do also like taking on the skeptics and the naysayers—I like the challenge!"

Indonesia

The best performing Orb Operator is currently based here, signing up over thirty thousand users in a little over four months. In his first week as an Operator, he set the highest single weekly sign-up total (at the time). Since then, he has partnered with one of the biggest food delivery companies in the country to sign up its drivers, rented out a storefront in a shopping mall to capitalize on high foot-traffic, and even been invited to a nearby village to sign up all those who live there to Worldcoin. His time signing up the village was so successful that it resulted in eight other villages asking him to do the same.

Orb Operator in Indonesia

"Of course, I was highly motivated by the Worldcoin sign-up incentive scheme: I want to provide a better life for my family. But along the way, seeing people who don't have access to crypto - who don't even know this technology exists - makes me grateful to be a part of this project."

Sudan

The four Orb Operators in Sudan secure partnerships with coffee stores in Khartoum and strike deals with various Sudanese influencers to market Worldcoin. Each Operator runs a large team that, out of pure passion, works up to fourteen hours a day. On a busy day, people will often wait up to three hours to sign up. To support this demand, the Operators recently booked out the largest and most well-known venue in Khartoum, which has even hosted presidential speeches, to run an event at which they aim to sign up over a thousand people in a single day.

Orb Operator in Sudan

"I get to meet new people every day and give them something that may benefit them in the future. We have suffered a lot financially here in Sudan, so getting a chance to add value to my community is really fulfilling."

France

This Operator has set up a team of 15 people, mostly local students, and ensures that they are well trained so that they can speak intelligently about Worldcoin and cryptocurrency in general. He has set up a digital platform for his employees so that they can easily book a time slot to use the Orb. He has also created a very detailed incentive system for his employees that rewards them for both additional employee referrals and performance in the field. He and his team operate around Paris’s famed Châtelet metro station, the biggest underground train station in the world.

Orb Operator in France

"There are two main reasons I believe the project will succeed: accessibility and equality. Worldcoin offers what has been missing in the crypto-sphere for a while now: equal opportunity to enter the world of DeFi for free. Worldcoin’s approach is simple and will give access to millions, if not billions of people."

Our Operators

We decided to perform a thought experiment using the numbers we have seen in the field to make these results more tangible and help visualize what could happen with increased Orb production. The figure below demonstrates how cumulative sign-ups over time could increase significantly as more Orbs come online. Although we anticipate there will be all kinds of saturation effects and other complications, we believe that there is a path for this model to onboard billions of users.

!Figure

!Figure

!Figure

!Figure

**Fig. 1
**
Thought Experiment
Schematic visualization of how Orb performance (sign-ups per week) could increase with the planned production schedule. The lower end illustrates an average of 350 sign-ups per week, while the maximum is at 1400. The dotted line represents 700 sign-ups per week, which is approximately equal to the average performance observed in the field in early October 2021. This is by no means a prediction but rather an oversimplified model to visualize some different scaling scenarios.

**Testing Sign-ups
**Testing data since May, 2021, showing key operator milestones and cumulative field test sign-ups. So far, over 130,000 users have signed up to Worldcoin, with 60,000 of these sign-ups coming in just the last four weeks. All of this has been achieved with less than 30 prototype Orbs in the field.

We are thrilled by these results—they show that our strategy for getting crypto into the hands of as many people as possible just might work. Of course, these are still early days and achieving widespread adoption is really just the beginning, but these results are certainly promising. 

In the following sections, we want to present the technical challenges that we needed to solve in order to get to this point.

Solving the “Unique-Human” Problem

The launch of Worldcoin requires a robust and scalable way to determine whether someone is unique (in a sense of new) and actually human (not a bot). So-called Proof-of-Personhood protocols[2, 3] try to solve this problem by allowing people to prove they are “unique humans”[4]. This “unique-human proof” would unlock many meaningful applications[5], but none of the existing approaches have yet reached a global scale.

Could one just use existing government IDs for Proof-of-Personhood?  Aside from requiring a central authority, they are a poor choice for reasons related to privacy and practicality. Not to mention that many people simply don’t have government IDs[6]. Phone numbers, emails, or social accounts have similar issues, and also fail to ensure uniqueness because they can be acquired multiple times.

The all-too-familiar CAPTCHA[7] was one of the first approaches towards a Proof-of-Personhood for the internet. It is a test designed to be difficult for bots, but easy for humans.  While it does well in verifying humanness, CAPTCHA fails to verify uniqueness: as a human, you can pass as many tests as you want. This could be addressed by requiring everybody to solve a CAPTCHA challenge** at the same time**[8], but that would be very difficult to coordinate on a large scale. 

Many other approaches to Proof-of-Personhood[9, 10, 11] have been deployed. Some of these use social verification to ensure accounts are owned by unique humans. This often requires that existing users meet (physically or virtually) new users and deposit some form of financial stake that can be taken away in case of fraud. Social verification systems may lead to a robust Proof-of-Personhood, but they also face difficult scaling challenges.

Biometric approaches (e.g., Aadhaar in India) are promising as they are both accessible and enable accurately verifying uniqueness. The key challenges for biometric approaches are related to privacy, fraud detection, and scalability. We believe that recent advances in technology offer a way to solve these issues.

Worldcoin leverages biometrics, cryptography, and incentives to create a scalable, privacy-preserving solution to the “unique-human problem”. The following sections describe how the system works and details how we plan to deploy it globally.

Using Biometrics to ensure human-uniqueness

Verification & Identification

At their core, biometric systems usually consist of:

1. A device that acquires biometric information (e.g., fingerprints) and converts them to a compressed representation (an “embedding”); and

2. A database that stores these embeddings for later retrieval and comparison.

Embeddings are designed so that one can calculate a distance (in the sense of similarity) between two embeddings. If this distance is above a certain threshold, the two embeddings are assumed to belong to different people.

One typically distinguishes between two modes of operation for biometric systems: verification and identification.

Verification is the most familiar use case of biometrics. For example, access to a building may require a keycard and a fingerprint scan. Here, fingerprint verification helps ensure that a stolen keycard cannot be used to enter the building. Behind the scenes, the keycard is linked to an embedding in the database, which is compared to the one of the scanned finger.

FaceID works in the same way. But instead of the user providing a keycard, the phone already knows which face(s) it needs to compare to as the database of users consists of only a single user.

In the case of identification, there is no keycard available to help: the biometric system has to determine a user’s identity from the biometric scan alone. A common use-case for biometric identification is in forensics where, for example, a fingerprint or DNA sample is compared with every entry in a database to identify a suspect.

!Figure

!Figure

!Figure

!Figure

Fig. 2

Schematic explanation of the difference between biometric verification and identification:

While verification only requires comparison to a single piece of data, identification requires searching an entire database for a match.

Biometric Proof-of-Personhood

A biometric system can be used as the foundation for Proof-of-Personhood by ensuring each person can only register once. Similar to biometric identification, the system needs to compare each user’s embedding to every other entry in the database. If none match, the user’s registration is successful and their embedding is added to the database. If there is a match, the user has likely registered before and is therefore rejected. 

However, there is a significant challenge with this approach: the identification problem becomes increasingly difficult with a growing database. Issues with search complexity and performance come into play, but more importantly, the system starts making more errors while trying to match users. These errors are largely governed by the “false match rate” (FMR). The FMR measures the likelihood that two biometric scans are incorrectly considered the same. At the scale of billions of users, the FMR must be extremely small to avoid frequently rejecting legitimate new users.

The key to being able to scale such a system to onboard billions of people is capturing an information-rich biometric source at a high level of fidelity. The more information the source contains, the lower the probability of false matches.

The likelihood of incorrectly rejecting legitimate new users is related to the Birthday Problem[12]: in a group of n randomly chosen people, how large should n be for two people to share the same birthday with a probability greater than 50%. The answer, 23, is counterintuitively low and demonstrates how likely random collisions are. In our specific implementation it turns out that the FMR has to decrease quadratically with the total number of expected users. To keep false rejections low at the scale of one billion users, the FMR needs to be below 1e-12 (that’s one in a trillion).

Iris recognition ensures uniqueness, fraud resistance, and practicality

We evaluated many different technologies and believe that iris recognition is the best-suited for our biometric approach to Proof-of-Personhood. Compared to other biometric methods, like face recognition, fingerprints and DNA sequencing, iris recognition stands out by simultaneously satisfying the following three criteria: 

1. Uniqueness: The iris theoretically contains enough information to distinguish nearly all humans uniquely.

2. Fraud-resistance: The iris is difficult to physically modify and the biometric capture can be made hard to spoof.

3. Practicality: The required imaging technology already exists, and for the user, presenting their iris can be a fast and simple process.

On a global scale, a biometric uniqueness check must confidently distinguish each person from every other person. The information density of the iris is high enough to allow this, and no two irises are alike (even for identical twins). It also turns out that it is possible to capture most of this information with high-resolution imaging of the iris. 

The same is not true for today’s face recognition technology: at the scale of billions of people, there is simply not enough information in, for example, a selfie to reliably tell people apart. Even advanced algorithms such as neural networks can’t help. 

The information of the iris pattern is distilled into an embedding, in our case the so-called IrisHash, which is derived from a one-way function with the iris image as the input. This code is stored in a database and is the only data used for checking uniqueness. Under this approach, the original image of the iris does not need to be stored anywhere.

We describe this in more detail in our post on privacy.

We target an FMR of 1e-6 per eye (thus 1e-12 for both eyes combined). At a scale of one billion people, we estimate that around 0.05% of users will be accidentally rejected. We also target a false non-match rate (FNMR) of 1/7000, such that (on average) a user has to try signing up seven thousand times before they can register twice.

Using the iris also enables a strong degree of fraud-resistance. In the context of our biometric uniqueness check, this means we need to reliably detect if someone attempts to spoof the biometric capture (e.g., using animals or special contact lenses). Since cheating a uniqueness check only requires looking different than any existing user, the fraud resistance property of the iris is critical. The iris is inherently hard to modify and enables better ways to verify liveness compared to other common biometrics like faces and fingerprints.

Finally, any scalable uniqueness check must be fast and simple. From the user’s perspective, presenting an iris is as easy as posing for a photo. In fact, the practicality of iris recognition has already been proven at scale. One notable example is the border control system for the United Arab Emirates, which leverages iris recognition[13]. Some other biometric approaches, like DNA sequencing, may not provide the same degree of simplicity for the user, and can feel invasive.

!Figure

!Figure

!Figure

!Figure

Fig. 3

Schematic representation illustrating the importance of high-quality imaging for decreasing error:

Here we sample pairwise comparisons by calculating the distances between embeddings. Since we  do this on an evaluation dataset, we know the ground truth and can plot the two distributions: the match distribution for pairs of the same identity (blue) and non-match distribution for pairs of different identity (red). 

In a perfect system, the match-distribution would be a very narrow peak at zero. However multiple sources of error widen the distribution leading to more overlap with the non-match distribution and therefore increasing False Match and False Non-Match rates. High quality image acquisition narrows the match-distribution significantly and therefore minimizes errors. The width of the non-match distribution is determined by the amount of information that is extracted by the biometric algorithm: the more information is encoded in the embeddings the narrower the distribution.

Ensuring human-uniqueness at scale: The Orb

Using iris recognition for a scalable Proof-of-Personhood requires an iris scanner that’s secure, high-resolution, and easy-to-use. We searched for existing devices that meet these requirements at a global scale, but found none. For this reason, Worldcoin developed the Orb.

Fig. 4

A photo (not a render) of the Orb production model. The device has a diameter of 20 centimeters and weighs around 2.5 kg (5 lbs).  The surface of the Orb is mirror chrome. An LED ring guides the user through the sign-up process. Behind the black surfaces, the Orb has an eye-imaging system, infrared LEDs for illumination, and a fraud-detection system. An exchangeable battery is accessible from below to enable continuous mobile operation.

High resolution imaging is key for biometric systems at scale

The primary function of the Orb is to capture detailed images of a person’s eyes, and convert them to an IrisHash. From the outside, the UX is simple: users simply look into the camera (which is behind the black surfaces) and press a button. On the inside of the Orb, a custom optical system automatically finds the user's eyes and brings them into focus. The Orb then captures high-resolution images of both irises at multiple infrared wavelengths, then uses them to locally compute the user’s IrisHashes.

To work at scale, the Orb must reliably capture high-quality iris images across a variety of lighting conditions and distances from the user. This adaptability is achieved using a combination of custom optics hardware and machine learning. To quickly find the user’s eyes, the Orb uses a movable mirror that is guided by a neural network. Once the eye is in-frame, another neural network controls a custom liquid lens to focus on the detailed patterns in the user’s iris. All of this happens while the Orb’s infrared LEDs are adaptively illuminating the eye, ensuring consistent images across lighting environments.

Together, these systems enable the Orb to capture irises with significantly higher quality: up to two orders of magnitude higher resolution compared to the industry standard[14, 15]. At this level of detail, the unique patterns in the iris can be used to reliably distinguish between billions of people.

To reduce complexity, the majority of commercial iris scanners today use goggles to align the subject precisely with the camera and block external light.

Fig. 5

On a high level, the Orb performs the following tasks:

Scan QR code
The device scans a QR code on the user's phone such that she can later prove that she has signed up.

**Capture Images
**After scanning the QR code the device captures multiple high-resolution multispectral images of the user.

**Generate IrisHash
**Based on the captured images, the device calculates a unique IrisHash through a one-way function.

Verify integrity
A custom set of security sensors ensures that the sign-up is legitimate.

The Orb’s security measures resist fraudulent activity

Security is core to the Orb's design. After all, Worldcoin requires trusting that the IrisHashes are legitimately produced by an Orb. The Orb’s security system ensures the authenticity of each IrisHash by robustly detecting a wide range of fraudulent behaviors. Broadly, we can classify such behavior as either spoofing or tampering.

Unlike iris scanners used at border checkpoints, the Orb is deployed to unsecured environments and used by independent Operators. This is made possible by the Orb’s secure design, and is a key requirement for scaling Worldcoin.

Spoofing attacks involve presenting the Orb with modified, fake, or non-human irises. For example, an attacker might show the Orb a photo of an iris or an animal iris, hoping to generate a unique IrisHash. To defend against attacks like this, we’ve equipped the Orb with a suite of multi-spectral sensors and custom fraud-detection algorithms. This advanced anti-spoofing system complements the iris imaging system, and operates locally on each device.

The Orb is also resilient to various forms of tampering, including attempts to modify its software, extract its cryptographic secrets, or disable its anti-spoofing system. This resilience is critical, since any of these intrusions might allow a hacker to generate fraudulent IrisHashes. The Orb’s embedded systems reliably detect advanced attacks of this kind, and prevent corresponding fraud.

No biometric system is impenetrable to spoofing or tampering, given enough resources. That said, we’re confident that the Orb’s state-of-the-art security systems will prevent fraud deemed profitable for a would-be attacker.

To further increase the difficulty of an attack, Orbs will be remotely monitored and compared to other Orbs. Such monitoring is based on non-biometric metadata from the Orb, including battery level, temperature, and network strength. Anomalies will be flagged and lead to Orbs being deactivated. This anomaly detection happens in a controlled environment in the cloud and therefore comes with higher security guarantees than device-level spoof and tamper detection.

Aligning incentives to grow the network

!Figure

!Figure

Fig. 6

Left: Incentive model built around the Orb. Operators receive a  reward for each sign-up, incentivizing them to maximize their sign-up rate.

Right: Orbs are a scarce resource and must be allocated to the most efficient Operators. To this end, short-term contracts for operating the Orbs are allocated to Operators via a bidding process.

While the Orbs are important to solve the unique-human problem, it must also be ensured that those Orbs are used in the most effective way. Therefore, each Orb will be handled by the Orb Operator whose task it is to explain Worldcoin to new users and to operate the Orb to help them sign up. Operators receive a small reward(in Worldcoin) for each sign-up, which incentivizes them to maximize their *sign-up rate *(i.e., the number of sign-ups per week). Combined with the proof-of-personhood, this makes Worldcoin the first cryptocurrency to directly encode, into its trustless protocol, the economic incentives for users to join the network: giving every new user a share of its currency.

Cryptocurrencies like bitcoin typically pay miners for block production via issuance of its own currency. However, since Worldcoin and the Layer 2 are secured by the underlying Ethereum network, there is no need to incentivize miners or validators via the currency. Instead, the issuance of the currency can be directly allocated to users.

Still, one challenge is to find Operators that can actually achieve a high sign-up rate. This can be done at scale through a *bidding process *that allocates Orbs to the most efficient Operators. Concretely, Operators bid for the right to operate one or multiple Orbs for a defined period of time. Operators who sign up more users than others will achieve a higher monthly revenue, so they can be expected to submit higher bids, making them more likely to win the bidding process. Additional incentive structures are in place for promoting not only raw number of sign-ups, but also high-engagement of users and disincentivizing fraud. We will share more details about those mechanisms in the future.

The described incentive mechanism is core to Worldcoin. Out of the fixed supply of 10 billion tokens, twenty percent are used to fund Orb production and initial protocol development. But the rest and vast majority of the tokens will be given to users and Operators that are helping to launch Worldcoin through the protocol. Finally, to incentivize early adoption of the currency, the number of tokens that users and Operators receive per sign-up will decay over time.

Scaling a cryptocurrency and protecting privacy

With the Orb, Worldcoin aims to onboard the first billion users into the world of cryptocurrency. We believe Worldcoin can reach this unprecedented scale by leveraging recent innovations in blockchain scalability and embracing compatibility with the existing crypto ecosystem. This section details our approach, including the mechanisms for ensuring user privacy.

We expect most Worldcoin users to receive their account via the Orb, but this is not required. Anybody can create a Worldcoin account using any digital wallet built with our open-source SDK (see Wallet & SDK below). However, accounts created without an Orb do not receive free tokens at launch.

Scaling and Compatibility

Worldcoin’s scalability is provided by an optimistic rollup[16, 17] on top of Ethereum. This "layer 2" scaling solution ensures transactions will remain cheap, fast, and reliable as the Worldcoin network grows. Importantly, this solution maintains the open and permissionless nature of Ethereum: anybody can create accounts, submit transactions, and participate in validation. The optimistic rollup is built using the open-source Hubble project[18], extended with a high-performance node that will be open-sourced in the coming weeks.

Worldcoin aims for broad compatibility. The underlying token is based on Ethereum’s popular ERC-20 standard, enabling compatibility with many existing tools and services. In addition, our open-source SDKs (see Wallet & SDK) will make it very easy for developers to interact with the currency and the Layer 2. 

Users are free to withdraw their funds to Ethereum mainnet or migrate through bridges to any Layer 2 on Ethereum (e.g., Optimism, Arbitrum, and many others) or even separate and aspiring ecosystems, such as Solana or Polkadot.

Fig. 7

Protocol architecture

1. The user generates a Semaphore public key and presents it hashed as a QR code to the Orb.

2. The Orb performs the iris scan and sends the created IrisHashalong with the Semaphore key to the current sign-up sequencer.

3. The sequencer validates the sign-up by checking the IrisHash for uniqueness in the database. If successful, it registers the Semaphore key on-chain.

4. The app locally generates a Hubble public key and submits it with a Semaphore zero knowledge proof to claim the reward.

5. The proof is verified and the reward is sent directly to the user’s public key in the Hubble rollup.

Account Privacy

Worldcoin inherits Ethereum's privacy model: accounts are pseudonymous and transactions are public. Crucially, Worldcoin accounts are never associated with any biometric data from the Orb. Zero-knowledge proofs (ZKPs) are the enabling technology behind this privacy-preserving biometric approach. We use the open-source Semaphore[19] zero-knowledge proof system to transfer the uniqueness of IrisHashes to the uniqueness of user accounts, without linking them.

A zero-knowledge proof (ZKP) ensures a given statement is true, without disclosing any information about the statement (except that it's true). For Worldcoin, the "statement" is "this account is associated with a unique IrisHash". And that statement is either true or false. The corresponding IrisHash is never revealed. Recent advances in zero-knowledge proofs have made their use on smartphones practical.

Phase 1: Sign-up and uniqueness check

1. The user generates a Semaphore keypair on her phone

2. The user presents the hashed public key (via QR code) to the Orb.

3. The Orb scans the user’s irises and locally computes the user’s IrisHashes.

4. The Orb sends a signed message containing the hashed public key and the IrisHashes to the sign-up sequencer node.

5. The sequencer node verifies the Orb’s signature, then checks if the IrisHashes do not match any already in the database. If the uniqueness check passes, the IrisHashes and the public key are saved.

Phase 2: Claiming the reward

1. The user’s app locally generates a wallet address.

2. The app uses Semaphore to prove that it owns the private counterpart to one public key registered in phase 1. Because it’s a zero-knowledge proof, it does not reveal which public key.

3. The proof is sent again to the sequencer, which verifies it and initiates the deposit of tokens to the provided wallet address.

4. A so-called *nullifier *is sent along with the proof and ensures the user cannot claim the reward twice.

Those two steps - decoupled by the zero-knowledge proof - enable a biometric-based Proof-of-Personhood without linking user accounts to biometric data. A more visual explanation of account privacy can be found in our dedicated privacy blog post.

The "sequencer node" can operate trustlessly via optimistic verification in a smart contract. It also exists for optimization reasons. Users actually don’t submit proofs directly to a smart contract, but the sequencer first verifies and then batches them together with many other proofs.

!Figure

!Figure

!Figure

Fig. 8

**Privacy
**The whole process consists of two independent actions: Sign-up and Claim. The Orb sign-up links the IrisHash to the SemaphoreHash. This SemaphoreHash is never used publicly for anything that could be directly tied to the user. It is only used to prove membership within a set of registered users. However, this can be done through a zero knowledge proof that does not leak any other information about the user. This makes it possible for the verifier to check whether the user has signed up without knowing any identifiable information from the sign-up.

Wallet & SDKs for usability and compatibility

Worldcoin is designed to be the first widely-adopted cryptocurrency. Making this a reality means going further than having an inclusive launch: Worldcoin must be useful and understandable to people with no prior experience using digital money. In addition, users must be confident in the privacy and security of their accounts. Because of this, we are developing a mobile wallet application.

The wallet allows users to learn about Worldcoin and other cryptocurrencies, find Orb Operators, claim their share, view their balance, send global peer-to-peer payments, and use their Worldcoin throughout the Ethereum ecosystem. No central authority mediates transactions; users always have full control and ownership of their Worldcoin (i.e., the wallet is “non-custodial”), which they can back up if they choose.

Fig. 9

**Wallet
*****Illustrative wireframe, not actual product images.
*For most people, Worldcoin will be their first contact with a cryptocurrency, and for some, their first with any kind of digital money. The applications of crypto are far bigger, but as the initial use-case for first-time users, the wallet will enable instant peer-to-peer payments to anyone in the world.

In addition to the wallet, we are developing a collection of open-source Software Development Kit (SDKs) to help developers build products around Worldcoin—things like alternative clients, tools for niche use-cases, digital tipping, in-store payments, and professional interfaces. These SDKs, coupled with pre-existing decentralized financial protocols, will allow anyone to serve the needs of local, regional, and global markets.

Most excitingly, these SDKs will eventually include zero-knowledge Proof-of-Personhood for third-party applications, maintaining user privacy as described in the Account Privacy section. While we built the Orb to help make Worldcoin a reality, we know this primitive can unlock much more. That’s why we want to give everyone the ability to reuse their already issued proofs to access other projects.

We believe the wallet and SDKs will help make Worldcoin — and the larger crypto ecosystem — more accessible and useful. We’re excited to share more details about these tools over the coming months.

What’s Next: A new era for the internet

There are many ways in which Worldcoin can have substantial positive effects on our society. Still, we strongly believe that how we accomplish this project is just as important as what we achieve. Our design approach is based as much on our own deeply-held values as on technical reasoning. We are choosing to prioritize user privacy, data security, openness, and broad accessibility, even when it means tackling some of today's toughest engineering and operational challenges.

For example, building on Ethereum at this scale is more challenging than operating a custom, centralized blockchain, at least in the short-term. The same applies to the privacy approach using zero-knowledge proofs, which is on the edge of current research. But we think this is the right way to launch Worldcoin, and the effort will pay off in the long run for all of us.

If successful, Worldcoin will, within the first year, onboard hundreds of millions of new people who didn’t have access to this technology. This will hopefully result in many developers integrating Worldcoin into new and existing products. We believe the internet has entered a new era: web3, where finally economic value and ownership are natively integrated into the web. It is hard to imagine what new products this coming era will bring us. Certainly, it will involve wider adoption of novel technologies and models of collaboration, like DAOs, NFTs, and decentralized exchanges.

There’s still a lot of work to do to enable and support a rapidly sprawling ecosystem of developers, entrepreneurs, and community builders. We are in the early stages of designing Worldcoin’s long-term governance strategy, grant programs, and partnerships roadmap. We are committed to following credible neutrality[20] as a key guiding principle in setting up these mechanisms. 

There are still many challenges left, and we will continue our research on many of them, such as blockchain scalability, digital identity, and pseudonymous economies.

Join us and let’s build together!

To stay up to date with all things Worldcoin, please subscribe.

OpenSea NFT平台漏洞窃取用户钱包中的加密货币。\

OpenSea是全球最大的综合NFT交易平台，用户可以在平台上铸造、展示、交易、拍卖NFT和其他数字资产，交易量达到34亿。近日，Check Point研究人员发现OpenSea平台中的一个安全漏洞，攻击者利用该漏洞可以诱使用户点击恶意NFT，用户点击后就会从用户加密货币钱包中窃取所有加密货币。\

要在OpenSea上创建账户，需要连接到第三方的加密货币钱包，就像利用Google或Facebook账户登录其他网站一样。

默认钱包和最流行的MetaMask，Check Point研究人员在研究中选择了一个并下载对应的浏览器扩展来打开钱包。

然后就有很多的方法来进行通信：

然后钱包就会弹出，钱包可以通过json-rpc来与以太坊网络进行通信：

OpenSea允许任意用户创建和交易NFT艺术品，最终生成的艺术品扩展可以是：JPG、PNG、GIF、SVG、MP4、WEBM、MP3、WAV、OGG、GLB、GLTF，文件大小限制为40 MB。

研究人员在OpenSea平台上发现一个安全漏洞，攻击者利用该漏洞可以劫持用户账户，并窃取关联的加密货币钱包中的加密货币。

攻击方法也非常简单，只要创建一个含有恶意payload的NFT，等待受害者点击和查看即可。还会在SVG图像中加入一个iframe来加载HTML代码，该代码会注入打开与受害者以太坊钱包通信所需的window.ethereum。

研究人员上传含有恶意JS代码的SVG图像，然后用户在新tab页点击后，就会注意到该文件在storage.opensea.io 子域名执行。

在该攻击场景中，受害者用户在点击来自第三方的NFT图像文件后被要求登入钱包，这对OpenSea来说属于异常行为，因为这与OpenSea平台提供的服务是不相关的。

滥用钱包功能是通过以太坊RPC-API来完成的，API会开启与MetaMask的通信，并打开连接到钱包的弹窗。

然后攻击者需要受害者与合法的弹窗窗口进行交互，所以可以以受害者身份来执行动作。

OpenSea NFT触发连接到MetaMask的弹窗

Check Point研究人员将攻击流程总结如下：

◼黑客创建一个恶意NFT，并以礼物的形式发送给目标受害者；

◼受害者查看恶意NFT，这会触发来自OpenSea存储子域名的弹窗，请求连接受害者的加密货币钱包；

◼受害者点击连接到钱包并对NFT进行操作，使得攻击者可以访问受害者的钱包；

◼受害者可以触发其他来自OpenSea存储域名的弹窗来获取受害者钱包中的加密货币。

Check Point已于9月26日将这一安全问题报告给了OpenSea，OpenSea已经提出了解决方案，并称没有发现利用该漏洞的情况。但建议社区应用最佳安全实践，尤其注意垃圾邮件和钓鱼邮件。\

更多技术细节参见：https://research.checkpoint.com/2021/check-point-research-prevents-theft-of-crypto-wallets-on-opensea-the-worlds-largest-nft-marketplace/

参考及来源：https://www.bleepingcomputer.com/news/security/opensea-nft-platform-bugs-let-hackers-steal-crypto-wallets/

Crafting (I) has been released. These are regular goods, armor and weapons.

Each crafting attempt costs 250xp per attempt, representing 1 day of effort.

A crafter must have at least 1 skill point in Skills (Craft) to be able to attempt crafting.

The difficult class (DC) of crafting is based on the type of item.

A crafter can craft;

• Goods (DC 20)

• Armor (DC 20 + armor bonus)

• Weapons (DC 20, DC 25, And DC 30 for Simple, Martial, and Exotic)

The craft check is calculated as follows;

1d20 + craft skill ranks + INT modifier

The DC can be reduced by spending craft (I) materials which is farmable in The Cellar. The DC is decreased by 1 for each 10 craft (I) materials spent.

Should a DC check be successful, materials worth the cost of the item will be used up to create the items. This is the cost in gold.

Technical

Rarity Crafting: 0xf41270836dF4Db1D28F7fd0935270e3A603e78cC

craft(summoner, base_type, item_type, crafting_materials)

Highly recommended to simulate an attempt first;

simulate(summoner, base_type, item_type, crafting_materials)

To craft, you need to approve;

• rarity.approve(_crafting_contract, summoner)

• rarity_gold.approve(1758709, -1)

• rarity_crafting_materials.approve(1758709, -1) (optional if using crafting materials)

Socials

Wiki
Github
Discord

WTB Longsword please ❤

Rarity’s design architecture is inspired by defi legos. Instead of one monolithic design, it creates small modular designs. At its base, is the summoner, a simple composable unit that consists of a level, a class, and experience. Everything else in the Rarity world is built ontop of this base building block. Perhaps you don’t like the d&d attributes, and instead, would like to incorporate a BESM stat implementation, or a white wolf implementation, the choice is up to the individual builder.

As such, we are creating an ecosystem fund to help fund any games or other legos built ontop of rarity.

All bounty requests must be submitted via github Issues

Bounties as follows;

Expansions: up to $5,000.00 (examples include Rarity Names, Rarity Forest)
UI: up to $20,000.00 (dependent on functionality implemented)
Integrations: up to $20,000.00 (using Rarity NFTs in your game)
Full games: up to $100,000.00

Happy building!