DeFi
Developers don’t know enough about zero-knowledge security – and it’s a ticking time bomb – DL News
Brian Pak is CEO and co-founder of ChainLight, a blockchain security company specializing in smart contract audits and on-chain monitoring.
Zero-knowledge words, once relegated to academic articles and crypto forums, have become commonplace.
ZK technology allows one party, like a blockchain protocol, to prove to another party that something is true, such as a person’s age, while keeping that information completely confidential.
ZK crypto succeeds in scaling the Ethereum smart contract network. More than a dozen ZK-based networks, commonly known as ZK rollups, run on Ethereum, with a 4 billion dollars value of deposits.
But despite all the hype, there’s one big problem. Lack of knowledge about ZK is a ticking time bomb.
Most crypto developers still know very little about this complex topic.
And as more developers begin experimenting with ZK technology, it creates major security risks, and even prevents the technology from reaching its true potential.
At the same time, ZK technology promises to revolutionize the crypto industry, so getting developers and the broader user community up to speed is imperative.
Join the community to receive our latest stories and updates
ZK developers are “out of date”
In 2022, co-founder of Ethereum Vitalik Buterin pointed out security risks of ZK stacks, such as bugs in the circuit’s constraint code.
These codes are essential in ZK rollups because they define and enforce rules for cryptographic proofs ensuring the validity of transactions.
Bugs in these codes can lead to serious security vulnerabilities, such as incorrect proofs or unauthorized access to funds.
Since Buterin’s warning, developers have identified several other vulnerabilities in projects using ZK technology.
In November, ChainLight discovered a bug in ZK Sync Era’s ZK circuits, which could have allowed a hacker to steal $1.9 billion.
Also in 2018, a Zcash cryptographer discovered a vulnerability in zero-knowledge proofs underlying the protocol. If not fixed, the bug could have allowed an attacker to create fake Zcash tokens without being detected.
Such vulnerabilities are a sad indictment of a new form of technology that is clearly not understood by enough people.
Many developers who write the code and the security professionals who must sign off on its security are simply overwhelmed.
And it’s no surprise: everyone will tell you that a PhD level in mathematics is necessary to understand the security aspects of ZK technology.
This means that the number of people qualified to audit ZK code is limited, as are the resources needed to train them.
And the lack of experts to properly audit ZK code is not the only problem.
ZK rollups, such as zkSync Era and StarkNet, are developed in-house and therefore peer review processes are not as thorough as the standards seen in academia.
I will remain skeptical of the security of ZK technology until the peer review process is more standardized.
ZK not reaching his potential
Lack of understanding of ZK technology also prevents it from realizing its full potential.
This is due to a lack of trust in the technology which leads manufacturers to choose more familiar frameworks.
For example, one of the main touted benefits of ZK stacks is instant finality.
This means that as soon as proof of a block is verified on the Ethereum mainnet, the results are final. This notably allows for instant asset withdrawals and also improves security.
Optimistic rollups, the main rival to ZK rollups, require a seven-day waiting period to withdraw assets.
There is a growing consensus that ZK rollups are the best solution for scaling Ethereum beyond optimistic rollups.
Some go so far as to describe them as “Holy Grail» of scaling solutions.
Co-founder of Immutable Robbie Ferguson described ZK rollups as “by far the easiest way to scale high-throughput transactions.”
But, in reality, most developers are still not using the technology to its true potential because they are simply not comfortable with using some of its unique features due to its complexity.
For example, none of the existing ZK accumulations really have the instantaneous purpose announced.
The coding is so technical that developers might be afraid of making a mistake, leading them to choose not to implement the instant finality.
Instead, protocols have what’s called a lead time, in which there is a window of about a day to detect an exploit and roll back changes before they are finalized.
With this, the security of ZK rollups comes with a major compromise and giving up one of its most important advantages.
Only a better understanding of ZK technology will allow manufacturers to maximize its potential without compromising safety.
Security by design
Across Web3 – not just the ZK sphere – projects aren’t taking audits seriously enough.
Many projects view audits simply as stamps of approval to give themselves a reputable appearance, rather than the rigorous security exercises they should be.
There are several cases where known bugs have crept into new DeFi protocols, costing investors millions.
For example, several protocols that derived code from the Compound v2 lending protocol, such as Hundred Finance and Onyx Protocol, did so blindly and did not consider known attack vectors in the code.
Instead, developers should strive to create protocols that are secure by design, meaning they are built in a way that protects against attacks first and foremost.
Building by design starts with staying abreast of threats to the ecosystem.
If a project does not have the resources to perform a thorough audit, it should still track hacks that occur on other projects so that they are not victims themselves.
While failing to create secure protocols by design would be a problem for any project, it is particularly detrimental in the case of ZK technology.
For example, let’s take a look at existing ZKEVMs – ZK rollups that perfectly replicate Ethereum’s operating system.
Many ZKEVMs rely on manually defined circuits, which require human involvement and use young and untested libraries.
The likelihood of developers making errors in this environment is high, making ZK rollups more vulnerable to the risk of attacks.
As investors pile into ZK rollups, incentivized by possible token airdrops, they become lucrative targets for the next major crypto heist.
Solutions
Implementing security early in the development cycle and on an ongoing basis, for example through bug bounties, can help solve this problem.
There is no doubt that ZK technology is a game changer for Ethereum, and constant development is fundamental to scaling the blockchain.
However, the solutions offered by ZK rollups live up to their potential to cause security issues.
Startups must first be honest about whether they are using ZK technology because it is necessary or because they are jumping on the bandwagon.
If they are certain to be first, then they need to be aware of the risks and building with security by design is absolutely fundamental.
DeFi
Cryptocurrency and defi firms lost $266 million to hackers in July
In July 2024, the cryptocurrency industry suffered a series of devastating attacks, resulting in losses amounting to approximately $266 million.
Blockchain Research Firm Peck Shield revealed in an X post On August 1, attacks on decentralized protocols in July reached $266 million, a 51% increase from $176 million reported in June.
The most significant breach last month involved WazirX, one of India’s largest cryptocurrency exchanges, which lost $230 million in what appears to be a highly sophisticated attack by North Korean hackers. The attack was a major blow to the stock market, leading to a break in withdrawals. Subsequently, WazirX launched a program in order to recover the funds.
Another notable incident involved Compound Finance, a decentralized lending protocol, which suffered a governance attack by a group known as the “Golden Boys,” who passed a proposal who allocated 499,000 COMP tokens – valued at $24 million – to a vault under their control.
The cross-chain liquidity aggregation protocol LI.FI also fell victim On July 16, a hack resulted in losses of $9.73 million. Additionally, Bittensor, a decentralized machine learning network, was one of the first protocols to suffer an exploit last month, loming $8 million on July 3 due to an attack targeting its staking mechanism.
Meanwhile, Rho Markets, a lending protocol, suffered a $7.6 million breach. However, in an interesting twist, the exploiters research to return the stolen funds, claiming the incident was not a hack.
July 31, reports The Terra blockchain protocol was also hacked, resulting in a loss of $6.8 million across multiple cryptocurrencies. As crypto.news reported, the attack exploited a reentrancy vulnerability that had been identified a few months ago.
Dough Finance, a liquidity protocol, lost $1.8 million in Ethereum (ETH) and USD Coin (USDC) to a flash loan attack on July 12. Similarly, Minterest, a lending and borrowing protocol, saw a loss of $1.4 million due to exchange rate manipulation in one of its markets.
Decentralized staking platform MonoSwap also reported a loss of $1.3 million following an attack that allowed the perpetrators to withdraw the liquidity staked on the protocol. Finally, Delta Prime, another decentralized finance platform, suffered a $1 million breach, although $900,000 of the stolen funds was later recovered.
DeFi
Centralized crypto exchanges are slowly losing ground to their DeFi counterparts
Centralized crypto exchanges are slowly losing ground to their DeFi counterparts, according to an in-depth data analysis conducted by Decrypt.
DeFiLlama’s decentralized exchange (DEX) volume data and CoinGecko’s total cryptocurrency trading volume data show that the percentage of cryptocurrency trading volume occurring on DEXs relative to total trading volume has increased from 4.6% in February to over 7% this month. This is an increase in the share of trading volume driven by DEXs of over 52%.
Source: Adrian Zmudzinski
Kunal Goel, a senior research analyst at Messari, told Decrypt that several factors are fueling the growth in DEX market share. He cited “the growth of meme coins and long-tail assets” as one of the reasons, explaining that they tend to list first on DEXs and only appear on centralized exchanges much later.if they last that long.
“The onchain user experience has improved with low fees and high throughput on Solana and Ethereum L2,” he added, highlighting advancements making decentralized finance (DeFi) solutions increasingly easier to use.
DeFiLlama data further shows that over the past 24 hours, DEX volume accounted for 22% of total trading volume. The crypto price aggregator notes that this percentage is meant to represent the dominance of decentralized exchanges over aggregated decentralized exchanges and centralized exchanges.
So far in 2024, DEX volume has seen a slow and steady increase.
CEX and DEX trading volume increased from $133.5 billion in January to $179.5 billion this month, an increase of about 34%. The year-to-date high was recorded in March, when CEX and DEX volumes saw a sharp increase, reaching $4.8 trillion and $266.89 billion, respectively.
Goel noted that at the time, “Bitcoin hit new all-time highs in March and trading activity is generally positively correlated with price and sentiment.” Looking ahead, he expects centralized exchanges to move on-chain and disrupt their own business models before others can. He added that “Base and BNB Chain are the most prominent examples of this.”
TradingView also shows a DeFi market cap dominance chart, in percentage terms. Currently at 3.86%, it fell from 4.47% on January 1 and hit a 2024 high of 4.81% on February 25. Goel noted that this was unexpected since “DEX volumes are a key driver of DEX value, so it’s a bit contradictory.”
Challenge is an umbrella term for a group of financial tools built on a blockchain, including DEXs, exchanges that operate primarily on-chain. The primary goal of DeFi is to allow anyone with internet access to lend, borrow, and bank without relying on intermediaries.
Similarly, the main goal of DEXs is to allow anyone with internet access to trade or even provide liquidity in exchange for a stake. DeFi and DEXs are one of the main areas of focus in decentralized application (dapp) development, which have seen considerable adoption this year.
Edited by Stacy Elliott.
DeFi
Pump.Fun Overtakes Ethereum in Daily Revenue: A New Leader in DeFi
In a remarkable turn of events, Pump.Fun, a memecoin launchpad, has surpassed all other platforms in the decentralized finance (DeFi) sector, achieving the highest gross revenue in the last 24 hours. According to data from DeFiLlama, Pump.Fun amassed $867,429 during this period, surpassing Ethereum’s $844,276. This achievement underscores the growing influence of memecoin infrastructure within DeFi.
Pump.Fun Revenue Milestones
The impressive revenue numbers go beyond daily performance. Pump.Fun is generating $315 million in annualized revenue, averaging $906,160 per day over the past week. This revenue surge is largely due to the recent memecoin frenzy, with Solana-based memecoins being particularly popular among on-chain enthusiasts. The platform’s user-friendly interface allows non-technical users to quickly launch their own tokens, spending as little as $2 without needing to provide any initial liquidity.
How Pump.Fun works
Pump.Fun’s operating model is designed to facilitate the use and rapid launch of tokens. Users can create new tokens in minutes, which are then allowed to trade along a bonding curve until they reach a market cap of approximately $75,000. At this point, the bonding curve is burned on Raydium, establishing a secure liquidity pool. The platform generates revenue through a 1% fee on transactions made on the platform. However, once a token is bonded and burned on Raydium, Pump.Fun stops charging this fee.
Ethereum: Traditional Power
Despite its daily revenues, Ethereum remains a cornerstone of the DeFi ecosystem. It is the blockchain of Ether, the second-largest cryptocurrency with a market cap of $395 billion. Ethereum powers many applications and digital assets, backing over $60 billion worth of smart contracts. Revenue generation on Ethereum is done through transaction fees, called gas, which are paid in ETH for executing transactions and smart contracts.
Comparative analysis of revenue models
While Ethereum’s revenue model relies on gas fees for transactions and smart contract executions, Pump.Fun takes a different approach. By enabling easy and low-cost token launches, Pump.Fun caters to a broad audience, including non-technical users. This inclusiveness, combined with the excitement surrounding memecoins, has led to rapid revenue growth. The 1% transaction fee ensures continued revenue generation until the token transitions to Raydium, creating a sustainable business model.
Memecoin frenzy
The recent rise in popularity of memecoins has been a major contributor to Pump.Fun’s success. Memecoins, particularly those based on Solana, have captivated the DeFi community, generating substantial activity on platforms like Pump.Fun. This trend highlights a shift in DeFi dynamics, where niche platforms catering to specific interests can achieve significant revenue milestones.
Future prospects
Pump.Fun’s recent successes suggest a potential shift in the DeFi landscape. As the platform continues to attract users with its simple token launch process and low-cost entry point, it could solidify its position as a leader in the DeFi space. The memecoin phenomenon shows no signs of slowing down, indicating that platforms like Pump.Fun could continue to see robust growth.
In conclusion, Pump.Fun’s ability to surpass Ethereum in terms of daily revenue underscores the evolving nature of the DeFi space. By providing a user-friendly platform for launching memecoins, Pump.Fun has tapped into a lucrative niche, demonstrating the potential for niche platforms to thrive alongside traditional blockchain giants like Ethereum. This development signals a broader trend toward diversification and innovation within the DeFi ecosystem, with new entrants challenging established players through unique value propositions and targeted services.
DeFi
$10 Billion Venture Firm May Target 10x Opportunities in Ripple (XRP) and This DeFi Token
According to recent reports, one of the largest venture capital firms is looking for new opportunities in the cryptocurrency space as Bitcoin (BTC) attempts to break its all-time high and start a new bull run in the cryptocurrency market. They are balancing risk with low-risk, low-reward and high-risk, high-reward opportunities.
The first investment candidate is a top cryptocurrency, Ripple (XRP); it doesn’t have much growth potential because it’s already a large cap. Another scenario the firm is targeting is DTX ExchangeThe new hybrid exchange is expected to revolutionize the foreign exchange industry. According to analysts, its growth potential is immense and the risk is also very limited due to its low price.
Market is bullish as Trump wants to make US a Bitcoin (BTC) superpower
Over the past 30 days, Bitcoin (BTC) has increased by about 10%, and one of the catalysts for this price increase has been Donald Trump recently speaking out as a crypto pro. Presidential candidate Donald Trump has promised to make the United States the world leader in cryptocurrencies if elected in November. Speaking at the Bitcoin2024 conference in Nashville, Trump compared Bitcoin (BTC) to the steel industry of 100 years ago, highlighting its potential.
Trump’s plans include firing SEC Chairman Gary Gensler and immediately creating a “Presidential Advisory Council on Bitcoin (BTC) and Cryptocurrencies.” He stressed the importance of American leadership in the cryptocurrency space, saying, “I am laying out my plan to ensure that the United States is the cryptocurrency capital of the planet and the Bitcoin (BTC) superpower of the world.”
$600 Million Worth of Ripple (XRP) to Be Released in August
Ripple (XRP), the company behind the XRP Ledger blockchain and its native token Ripple (XRP), unlocks up to 1 billion tokens on the first day of every month. Since 2017, they have used several major escrow wallets, including Ripple (XRP) (24) and Ripple (XRP) (25), to evenly distribute these monthly unlocks.
However, Ripple (XRP) often relocks a large portion of newly issued XRP. For example, on June 1, Ripple (XRP) relocked 800 million XRP but still sold about 300 million XRP, worth $182 million at the time.
While Ripple (XRP) releases up to 1 billion XRP tokens each month, the actual amount released into circulation is typically much lower due to this re-escrow process, as noted in a 2017 XRP Ledger blog post.
DTX Exchange Follows Bitcoin (BTC) Path
The main target of large private equity firms is the DTX exchange (DTX), the reason being a clearly high utility like Bitcoin (BTC). This project has attracted global attention thanks to its exceptional pre-sale performance, offering early buyers a 100% return on investment and raising over $1 million. Projections suggest that this figure will reach $2 million by the end of August 2024.
DTX Exchange offers a revolutionary hybrid trading platform, combining the best features of centralized (CEX) and decentralized (DEX) exchanges. Traders can enjoy a seamless experience with access to over 120,000 asset classes, no KYC verification upon registration and ultra-fast transaction speeds of 0.04 seconds.
These benefits have attracted traders to this new cryptocurrency exchange. Currently, in Phase 2 of its pre-sale, DTX Exchange is listed at $0.04, which is double its starting price of $0.02. Market analysts predict that the upcoming listing of DTX Exchange on the Level 1 CEX in late 2024 could trigger a 100x bullish rally, making DTX Exchange the top cryptocurrency exchange to watch.
Learn more:
Disclaimer: The statements, views and opinions expressed in this article are solely those of the content provider and do not necessarily represent those of Crypto Reporter. Crypto Reporter is not responsible for the reliability, quality and accuracy of the materials contained in this article. This article is provided for educational purposes only. Crypto Reporter is not responsible or liable, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on any content, goods or services mentioned in this article. Do your research and invest at your own risk.
-
Videos9 months ago
Crypto News: Bitcoin, ETH Price, CPI Print, PYTH, WIF & MORE!!
-
Videos9 months ago
Crypto News: Bitcoin Price, ETF, ETH, WIF, HNT & MORE!!
-
DeFi9 months ago
Metasphere Labs announces follow-up event regarding
-
Videos9 months ago
Solana price potential?! Check out THIS update if you own SOL!!
-
Videos8 months ago
Who Really CONTROLS THE MARKETS!! Her plans REVEALED!!
-
DeFi6 months ago
Pump.Fun Overtakes Ethereum in Daily Revenue: A New Leader in DeFi
-
DeFi6 months ago
Degens Can Now Create Memecoins From Tweets
-
News6 months ago
New bill pushes Department of Veterans Affairs to examine how blockchain can improve its work
-
News6 months ago
Lawmakers, regulators to study impact of blockchain and cryptocurrency in Alabama • Alabama Reflector
-
Bitcoin6 months ago
1 Top Cryptocurrency That Could Surge Over 4,300%, According to This Wall Street Firm
-
Ethereum8 months ago
Comment deux frères auraient dérobé 25 millions de dollars lors d’un braquage d’Ethereum de 12 secondes • The Register
-
Videos8 months ago
Cryptocurrency News: BTC Rally, ETH, SOL, FTM, USDT Recover & MORE!