Category: Uncategorized

  • Voyager Digital goes bankrupt: A victim of the Three Arrows Capital collapse?

    Voyager Digital goes bankrupt: A victim of the Three Arrows Capital collapse?

    Voyager Digital is a publicly listed crypto brokerage firm which filed for bankruptcy on 5th July 2022.

    Who is Voyager Digital?

    Voyager Digital was founded in 2017 as a cryptocurrency brokerage firm allowing clients to buy and sell cryptocurrencies and other digital assets on its platform. Their main feature was that they did not charge commission fees through utilizing its smart order routing to connect to dozens of other cryptocurrency exchanges and market makers. Voyager Digital is currently listed on the Toronto Stock Exchange under the stock ticker VOYG.

    Voyager Digital is also a major creditor of Three Arrows Capital, which has also recently filed for bankruptcy. Since 1st July 2022, Voyager Digital has temporarily suspended all trading, deposits, withdrawals, and loyalty rewards on its platform.

    Voyager Digital files for bankruptcy

    Voyager Digital issued a Notice of Default against 3AC on 27th June 2022 and reduced its withdrawal limit to US$10k per day. This spooked shareholders and users of Voyager Digital. The Company saw its share prices plunge over 60% after its ties with 3AC was revealed, combined with its poor performance during the crypto downturn.

    The Notice stated that 3AC failed to make timely repayments on its loan of 15,250 BTC and US$350 million USDC. However, Voyager Digital has reassured its users that its platform is still fully functional. Furthermore, as of 24th June 2022, Voyager had approximately US$137 cash and crypto assets on hand. The Company also has US$200 milllon cash and USDC, and a 15,000 BTC revolving loan from Alameda Ventures Limited.

    On 5th July 2022, Voyager Digital Holdings filed for bankruptcy in the Southern District of New York. Voyager Digital estimates it has over 100,000 creditors and total debts of somewhere between US$1 to US$10 billion in liabilities. The Company believes that notwithstanding its liabilities, it still has around US$1 to US$10 billion in assets. They also assure that will have sufficient funds available for distribution to its unsecured creditors.

    According to a tweet by CEO Stephen Ehrlich, the purpose of filing for bankruptcy was to “…protect assets on the platform, [and] maximize value for all stakeholders.”

    This is certainly a huge relief to Alameda Research. They are listed in court documents filed by Voyager as its largest unsecured creditor with over US$75million in unpaid debts. This is substantially larger than its second largest unsecured creditor with a US$9.7million claim.

    Meanwhile, the share prices of Voyager Digital Ltd (VYGVF) plummeted by almost 12% as a result of this development. Share prices for the Company took a huge hit since their involvement with 3AC was discovered. VYGVF share prices have been down nearly 89% since early June 2022.

    FTX to bail out Voyager Digital?

    FTX exchange recently secured a winning bid of US$1.42 billion for Voyager Digital’s assets. The assets included in the bid include (i) the fair market value of all of Voyager’s cryptocurrency at a future date to be determined, worth around US$1.3 billion; and (2) additional consideration of “incremental value”, worth around US$111 million. As for Voyager’s claims against Three Arrows Capital, this will remain with the bankruptcy estate and any amount eventually recovered will be distributed to the estate’s creditors.

    The tentative plan from FTX will allow all priority claimants to be paid out in full. Meanwhile, other account holders would be able to recover approximately 72% of their account value. The plan for FTX to buy out Voyager’s assets however is still pending the approval of Voyager’s creditors and the Court.

    Voyager Digital suspends withdrawals, will customers get their USD and crypto back?

    According to the latest blog post from Voyager Digital, they are working to restore access to customers’ USD deposits. However, it does not mention when withdrawals will be reopened. Voyager Digital also alleged that customers’ USD in their Voyager cash account is held in a For Benefit of Customers account at the Metropolitan Commercial Bank of New York (and not by Voyager themselves) and is Federal Deposit Insurance Corporation (FDIC) insured. However, a joint letter dated 28th July 2022 from the Federal Reserve and the FDIC to Voyager requests them to remove “false and misleading” statements that its user deposit accounts are FDIC insured.

    As for customers’ cryptocurrencies, Voyager states that they have approximately US$1.3 billion worth of crypto assets on their platform. This is inclusive of its over US$650million claim against Three Arrows Capital.

    Voyager has proposed a reorganization plan which is currently pending the approval of the Court. Customers will be able to select the following options with regards to their cryptocurrencies held by Voyager:

    1. Pro-rata share of cryptocurrencies;
    2. Pro-rata share of proceeds recovered from Three Arrows Capital;
    3. Pro-rata share of common shares in Voyager after it is reorganized; and
    4. Pro-rata share of existing Voyager tokens.

    However, according to Voyager, this is not the finalized plan. Voyager’s customers will have the opportunity to vote on whether or not they agree with the reorganization plan. It is likely that it will be a long time before customers will have their funds and cryptocurrencies returned.

    Voyager details claim process for customers

    Voyager’s blog post details how affected customers with cryptocurrencies in their accounts can begin to claim their crypto. Voyager will be sending an email from “Voyager Digital Restructuring” containing a unique link and personal identification number. The link will set out the customers’ account holdings. If customers agree with the account information set out in the email, they are not required to submit a claim form. On the other hand, if customers disagree with the information, or the claim is marked as “contingent”, “unliquidated” or “disputed”, they must submit a proof of claim form. This Proof of Claim form must be filed on Voyager’s case website on or before 3rd October 2022 at 5:00pm EST.

    However, there is still no information on when affected customers can actually receive the cryptocurrencies locked in their Voyager Digital accounts.

    Voyager customers say no to “retention bonus” totaling US$1.9 million to employees.

    Voyager had asked the Court to approve a US$1.9 million payment to 38 of its employees as a “retention bonus”. The Company claims that these employees are essential to its continued operation and restructuring, and are apparently non-executive employees. Voyager is also asking the Court to allow them to redact the names, titles, salaries, proposed bonuses and other information relating to the 38 persons. Their reasoning is that this is non-public and personal information which could be sensitive.

    However, a group of Voyager customers objected to Voyager’s proposal, stating that its employees are already well-compensated and that there is little evidence that they plan to resign. They also argue that the Company has otherwise done little else to reduce costs. The US Trustee’s Office is also objecting to Voyager’s proposal, particularly to the request to redact the employees’ information. This is because they see it as critical information that stakeholders should have in order to evaluate whether the proposed bonus is necessary.

    On 24th August 2022, the Court ultimately approved Voyager’s application to pay US$1.9 million in retention bonuses to employees.

  • Will Terra Luna Classic (LUNC) Make a Comeback? USTC Repeg?

    Will Terra Luna Classic (LUNC) Make a Comeback? USTC Repeg?

    Everyone loves a good comeback story. With Luna Classic now in the hands of the community, they are doing everything in their power to revive the ecosystem. Several crypto heavyweights such as Binance have also joined their cause. The question is, “will Luna Classic succeed long-term?” In this article, we will take a look at the recovery plan proposed by the Classic community and share some insights on the future direction of Luna Classic.

    History of Terra Luna

    The collapse of the Terra ecosystem in May 2022 was one of the most devastating black swan events in crypto history, wiping at least $60 billion off the market which triggered a dangerous domino effect across the industry such as the fall of Three Arrows Capital and Voyager Digital.

    Terraform Labs (TFL) developers shortly abandoned the Classic chain in support of Luna 2.0, the new Terra blockchain. This led to an overhaul of the community demographic, leaving only the validators and true believers of Luna Classic behind, not to mention millions of investors who are still holding onto LUNC or USTC with no exit opportunity.

    Luna Classic’s Chance at Redemption

    Despite its unfortunate history, there might be a glimmer of hope for Luna Classic. The technology and blockchain infrastructure are still there, and developers can still build on it. In fact, there are numerous DApps that have expressed an interest to return and build on Luna Classic. However, the ecosystem faces the opposite problem of most layer-one protocols. Instead of incentivizing user adoption with tokens, Luna Classic has hundreds of thousands of active users but no additional token incentives.

    This means that Luna Classic’s native tokens do not offer much utilities for developers to build off of, due to trillions of LUNC tokens in circulation and the USTC depeg. Therefore, in order to attract developers and builders to the Classic chain, the token situation must be addressed, and that is exactly what the community is doing right now.

    Luna Classic – Community-Driven Blockchain

    Community volunteers have self-organized into multiple groups to help build and restore the Luna Classic blockchain. Terra Rebels is one of the larger communities with seasoned developers and business professionals that is leading the recovery plan. None of the groups have any affiliation with TFL nor work under any central organization or established entities at this time. Essentially, the communities are filling the developer void impartially and in accordance with community proposals that pass the voting process. All codes are open to audits and feedbacks, and all community members have a say in vetting and implementing the code base.

    On August 26th 2022, after two months of disabled proof-of-stake validation in response to the collapse, governance was restored as citizens of Luna Classic could delegate, stake, and vote for the future of the ecosystem. As of now, proposals and the associated implementations are being passed by the Terra Classic Decentralized Autonomous Organization (DAO). When adopted, a new wave of delegators and validators from the community would stake on Luna Classic, built by community developers. This would be the beginning of a truly community-driven blockchain, but the path to that is still long and arduous.

    Recovery Plan of Luna Classic

    Deflationary Token Mechanism (Tax and Burn)

    On September 15th 2022, Terra Classic governance proposal 4661 passed with a 99.88% “yes” vote to enable a 1.2% tax and burn on all on-chain transactions. With more than 6 trillion LUNC in circulation, the main goal is to reduce the hyperinflated total supply until it reaches 10 billion LUNC. After that, the mechanism will be disabled via smart contract, and the total supply will not be changed. Based on the law of supply and demand, this creates scarcity which inherently increases the value of LUNC tokens. However, it takes more than just burning for LUNC to maintain a relatively stable price. There has to have a mechanism for LUNC to capture some of the value brought to the blockchain, otherwise it would be another exit race for all investors.

    The main concern for the tax and burn is that it would likely reduce on-chain activities, as core users and projects are affected. Terra Rebels addressed this in their white paper, stating that the community can structure the implementation to be flexible as time progresses. The tax rate can be changed via parameter proposal at any time and adjusted after every epoch. Nevertheless, the community has voiced with unity that they are willing to play their part.

    The bigger play here however is to reach out to major centralized exchanges (CEX) and implement the same tax and burn for all LUNC trades on their platform, since it only applies to on-chain transactions. As a result, several major CEXes such as Binance, KuCoin, Kraken, Huobi, MEXC Global, and more have joined the cause. Moreover, a petition has been filed on change.org to relist LUNC on Coinbase. It is important to note that the Terra ecosystem is still under strict government regulations as a result of the collapse. But if it succeeds, the help from the U.S. market would greatly accelerate the burning process.

    This goes to show the power of a unified and driven decentralized community, and perhaps the potential crypto heavyweights see in a Luna Classic comeback.

    USTC Repeg Proposal

    In October 2022, two factions of the Terra community proposed their own approach to repeg USTC. As both plans are new, there are no specific timings outlined. It is up to the community to debate these proposals and decide which approach is better.

    Proposal #1Algorithmic Fungible Token Debt Restructuring

    The first one jointly published by Alex Forshaw, Edward Kim and Maximilian Bryan presents the idea of minting 500 million LUNC to purchase Bitcoin as collateral for a new algorithmic fungible token (AFT) called USTN. The whole point of it is for current USTC holders to receive compensation meaningful relative to the current USD value of their holdings, making them as whole as possible under current legal constraints. It is akin to a debt-for-equity swap in traditional finance.

    However, this proposal was met with a lot of criticisms from the community, since minting more LUNC defeats the purpose of the tax and burn initiative. Although it would create a short-term growth cycle, it would most likely be unsustainable medium to long-term, due to the oversupply of LUNC.

    Shortly afterwards, Forshaw announced that the updated plan will not involve minting LUNC. Instead, USTN’s Bitcoin collateral will be managed by a tranche-based decentralized reserve system as outlined in section 5 of their original white paper. However, most of the community still do not like the idea of creating a new token. Why not just create mechanisms around USTC, bringing value to the ecosystem, instead of phasing it out? This is where the second proposal comes in.

    Proposal #2Quantitative Tightening to Incentivize New Businesses

    In response to Forshaw’s proposal, core developer Tobias Andersen (aka Zaradar) developed a different solution that focuses on improving USTC, instead of substituting it. Andersen believes that a USTC repeg could be accomplished by incentivizing new businesses to use Luna Classic’s existing blockchain infrastructure. The plan to achieve this however is a more “painful” journey as quoted by the author, but is more organic and sustainable in the long run.

    The plan adapts a form of quantitative tightening (QT), a traditional finance technique used by central banks to decrease liquidity in the economy. For Luna Classic, it would involve installing burn taxes and increasing interest rates on staking rewards. Rewards would be lowered and lock-up periods increased. The whole point is to significantly reduce the circulating supply of both USTC and LUNC, making the value networks sustainable long-term.

    As for incentivizing new businesses on the blockchain, the features include partitioned pools, where DApps can create their own commodity token which is captalized via LUNC and traded via USTC. Based on each pool, this brings another utility to USTC as a “value transfer”, with investors using the stablecoin to swap between pools. To help keep partitioned pools stable, a swap tax is applied when commodity tokens exit the partitioned pools into USTC. This process would be measured and regulated by the ABS keeper, which is a range of volatility guards and tax policies governed by the DAO.

    However, some things are unclear in the proposal. Andersen did not explain exactly how a successful implementation of these would help USTC regain its peg, and more importantly maintain the peg. He only explained a way to appreciate the price of USTC with increased network activity on the blockchain. Unless there is a way to successfully prevent another death spiral, we would see $10 billion worth of USTC debt tear down any bull run with an avalanche of speculative mercenary capital.

    Rebuilding the Project Ecosystem

    In order to restore DApp and project support on the Luna Classic, Terra Rebels will restore inter-block communication (IBC) between Osmosis and Terra, re-enabling and unlocking the transfer of token and data between chains. Currently, more than 150 million USTC is stuck in Osmosis alone. Opening up the channel will allow users to transfer funds from Osmosis’ LUNC and USTC liquidity pools for use in other DApps.

    Moreover, on June 24th 2022, Terra Rebels launched “Rogue-1” TestNet to test governance parameter proposals and ensure the tax burn code is working. It also has the necessary upgrades in Cosmos smart contracts and IBC to communicate with the rest of the Cosmos ecosystem. Based upon the Luna v2 core, other projects built on Luna v2 will not require additional development as it is compatible with both blockchains. The core implementation is expected to be completed in 2023.

    Verdict on Luna Classic Comeback

    For Luna Classic, there is a sense of justice that is unprecedented in the history of crypto. People around the world have literally lost their life savings because of the collapse. Similar to how volunteers help rebuild communities who were hit by natural disasters, we are seeing the crypto community and even crypto powerhouses step in to help revive a project with a failed reputation and fix a problem they did not create.

    There is a reason why LUNC is still performing relatively well, ranking top 35 in market cap at the time of writing. Whereas LUNA is barely in the top 100, since it is more associated with Do Kwon and the TFL. This goes to show that the Classic chain is entirely governed and driven by the community, which is the essence of decentralization in the first place.

    Despite the communities’ effort, there is no way to be sure that the comeback of Luna Classic is written in the stars. As of now, the proposed plans of the community solely focus on reducing the hyperinflated token supply and attracting new businesses to the blockchain. And even if Luna Classic does make a comeback, we cannot know for certain that their token price and network activity will remain stable long-term. But it is reasonable (or optimistic) to assume that the plans being debated and deployed now are just the first step to recovery.

  • Why Do Cross-Chain Bridges Keep Getting Hacked?

    Why Do Cross-Chain Bridges Keep Getting Hacked?

    Out of all blockchain attacks, cross-chain bridges are one of the most targetted ones. Just last week, Binance lost $570 million as a result of an exploit on Binance Smart Chain’s Token Hub Bridge. Even Binance, one of the world’s secure and reputable cryptocurrency platforms, fell victim to a cross-chain bridge hack. This brings us to an important question: why do cross-chain bridges keep getting hacked, and why do people still use them despite its security risk?

    Why Do People Use Cross-Chain Bridges?

    One of the biggest limitations of blockchains has been their inability to work together. Each blockchain has its own protocols or smart contracts that are not compatible with other blockchains on a programmable level. As a result, you cannot spend Bitcoin in the Ethereum network, for example. This is where cross-chain bridges come in to provide interoperability.

    A cross-chain bridge connects two blockchains, enabling users to transfer data and liquidity from one chain to the other. It also allows users to access new protocols on other chains, making it so that developers from different blockchain communities can collaborate together. Moreover, with Lego-like composability of decentralized finance (DeFi) applications, cross-chain bridges can potentially open up a whole new world of efficient and creative financial services and products for users.

    Without cross-chain bridges, the crypto industry would be bottlenecked by network congestions, since there is no bridge to off-load data and transaction executions.

    Why are Cross-Chain Bridges Vulnerable?

    When you bridge an asset to another blockchain, it is not exactly “sent.” Instead, through smart contract execution, the assets are first deposited, locked, or burned on one blockchain. Afterwards, they are then credited, unlocked, or minted on the other blockchain in the form of a wrapped token.

    However, this asset conversion is not guaranteed. This is because cross-chain bridges are independent entities that do not belong to any blockchain. This means that no blockchain can verify that any asset is bridged, since they cannot access off-chain information. The bridging process mainly relies on two parties to ensure successful transfer:

    • Third-party oracles who interpret off-chain data for on-chain use.
    • Validators or custodians (DAO or smart contract) who safekeep the original asset and release the wrapped asset.

    As you can see, there are several layers of trust, not just during the token swap but throughout the entire bridging process. Users must additionally continue to trust that they will be able to bridge the wrapped token back in the future on a 1:1 basis. Herein lies the vulnerability of cross-chain bridges: with multiple processes and third-party involvements, there is a brief window of time where hackers can target any one of these actions in isolation, not to mention possible bugs or flaws in the smart contract coding in which hackers can exploit.

    How are Cross-Chain Bridges Hacked?

    A successful cross-chain bridge hack typically ends up with tokens being minted on one blockchain without a corresponding deposit on the other. There are three types of exploits to achieve this:

    Fake Deposits

    During the bridging process, each deposit has to be validated before allowing a transfer to go through. If a hacker can create a fake deposit that validates as a real one, they can trick the system into minting free tokens without putting in any money.

    This mostly happens due to a flaw in the logic of the smart contract coding, where both tokens share the same proof of event. This would allow the attacker to call the function to deposit one token with fake data that can generate proof to withdraw the other token on the other blockchain.

    This is what happened to Binance when the attacker managed to forge proof messages of non-existent tokens that were then accepted by the BSC Token Hub bridge.

    Signature Verification Bypass

    A digital signature is a process to verify transactions, using the private key to sign the transaction and its corresponding public key to authorize the sender. However, if the smart contract uses an outdated function, it may not be able to verify the correctness of certain instructions. As a result, an attacker could create an input account with malicious data to spoof previously valid digital signatures. This would allow them to bypass the verification step and generate proof messages to mint free tokens.

    The Wormhole hack is an example of this attack, where the hacker bypassed the verification step by injecting a spoofed SYSVAR account, enabling them to freely mint 120,000 wETH (worth $326 million at the time).

    Validator Majority Attack

    Some cross-chain bridges have validators that vote whether or not to approve certain transfers. Similar to a 51% attack, if an attacker controls a majority of the validators, they can approve any transaction, allowing them to withdraw free money. An infamous case of this is the Ronin Network hack, where the attacker took control five of the nine validator nodes and stole $620 million.

  • Blockchain Attacks Explained: Understanding Network Vulnerabilities

    Blockchain Attacks Explained: Understanding Network Vulnerabilities

    Based on principles of cryptography, decentralization and consensus, blockchain technology offers one of the strongest securities against traditional cyber attacks. However, it is not foolproof, even the strongest blockchains like Bitcoin and Ethereum have inherent vulnerabilities due to their infrastructure. In this article, we will look at the different types of attacks possible on a blockchain.

    51% Attack

    What is a 51% Attack?

    A 51% attack, also known as a majority attack, is when a single person or a coordinated group controls over 50% of the hashing power on proof-of-work blockchains OR more than half of the validating power (staked cryptocurrencies) on proof-of-stake blockchains.

    How does a 51% Attack work?

    Since transactions on a blockchain are validated via consensus, owning 51% of the blockchain’s hashing power or staked crypto gives the attacker majority rule, effectively allowing them to take control of the network. In such a scenario, the attacker has the final say in the validation process, even if the other 49% are against it. This potentially causes network disruption in a number of ways:

    • The attacker could reverse their own transactions, leading to a double-spending problem.
    • They could rewrite parts of the blockchain protocol, deliberately modifying the ordering of certain transactions.
    • They can even prevent some or all transactions from being confirmed, denying other miners or validators from earning rewards, which results in a monopoly.

    Limitations of a 51% Attack

    On the other hand, a 51% attack does have its limits in the amount of disruption it can cause. While the attacker could reverse their own transaction, they cannot reverse other users’ transactions on the network. Moreover, given the immutable nature of the blockchain, the attacker cannot alter the functionality of block rewards nor create coins out of thin air (unless there is a bug in the smart-contract coding).

    How likely will a 51% Attack happen?

    While possible, a 51% attack is unlikely as it is extremely expensive to execute. Owning more than half of the network’s computing power or staked crypto could potentially cost millions or billions of dollars depending on the user population of the blockchain. This is why the bigger the network, the stronger the protection. A majority attack is virtually impossible to occur in leading blockchains such as Bitcoin, Ethereum and Binance Smart Chain.

    But it is worth noting that the blockchain should be truly decentralized, on top of having a large userbase. This is because organizing a 51% attack would most likely be a coordinated effort. If several malicious actors collude and pool their resources together, then the network would be more centralized, which could potentially lead to a majority attack. This is more prevalent amongst smaller altcoin blockchains. Ethereum Classic (ETC), Bitcoin Gold (BTG), and Verge (XVG) were notable victims of the 51% attack.

    Sybil Attack

    What is a Sybil Attack?

    A Sybil attack is when an attacker uses a single node to create and operate multiple fake accounts in order to gain disproportionate influence over decisions made in the network. It is a smaller variation of a 51% attack. The main difference is that a Sybil attack largely focuses on manipulating the number of accounts or nodes rather than already owning them. It also targets smaller areas in the blockchain, whereas a 51% attack is capable of taking over the entire network. However, in some cases, a successful large-scale Sybil attack can transition to a 51% attack.

    The word “Sybil” derives from a case study about a woman named Sybil Dorsett, who was diagnosed with a Dissociative Identity Disorder, also known as Multiple Personality Disorder.

    How does a Sybil Attack work?

    A Sybil attack is quite difficult to detect and prevent, because most public blockchains do not have trusted nodes due to its decentralized nature. This means that the system perceives all nodes and accounts as real, even the fake ones. There are two scenarios of a Sybil attack:

    1. By creating numerous fake identities (or Sybil identities), the attacker will have enough capacity to out-vote the honest nodes on the network, allowing them to perform unauthorized actions in the system.
    2. The attacker can also control the flow of information in a network. If the attacker manages to obtain information about your IP address, they can create many fake nodes to surround you. They can then prevent you from receiving or transmitting blocks, effectively blocking you from using the network.

    How to prevent Sybil Attacks?

    Although a lot of time and research went into figuring out a way to detect and prevent Sybil attacks, there is still no guaranteed defense as of today. But there are some ways to help mitigate Sybil attacks:

    1. Identity validation techniques such as phone number, credit card or IP address verification can help reveal the true identity of hostile entities. This is a secure way to suss out fake accounts or bots for most types of peer-to-peer networks. However, this relies on a central authority to perform these identity validations which sacrifices anonymity for accountability. Moreover, this means that the validation authority could become a target for attack.
    2. Social trust graphs, on the other hand, can limit the extent of damage by a specific Sybil attacker, while maintaining anonymity. You can analyze connectivity data in social graphs like SybilGuard or SybilLimit to identify suspected Sybil clusters in distributed systems. But this technique is not perfect either, as small-scale Sybil attacks are more difficult to detect.

    Blockchain Denial of Service Attack (BDoS)

    Denial of Service Attack (DoS)

    Before we go into Blockchain Denial of Service attacks (BDoS), let’s take a look at its predecessors.

    Traditionally, a Denial of Service attack (DoS) or a Distributed Denial of Service attack (DDoS) when multiple computers are involved, is a malicious attempt to disrupt real users’ access to a website or network service by overloading its servers with a massive amount of traffic, causing the website or application to slow down its functionality or even crash entirely.

    But for blockchains, a DoS or DDoS attack is difficult to execute, especially if the network’s userbase is large and decentralized. This is because a decentralized network distributes computing power worldwide, eliminating single points of failure such as servers or apps. Even if several nodes are down, the blockchain is able to continue operating and validating transactions, unless…

    What is a Blockchain Denial of Service Attack (BDoS)?

    With the rise of blockchain technology, a new type of DoS attack emerged — a Blockchain Denial of Service attack (BDoS). These attacks focus on the protocol layer of a blockchain, usually PoW blockchains, with the biggest threat being transaction flooding.

    Since most blockchains have a fixed block size, there is a limit to how many transactions can fit into a block. Attackers can exploit this by spamming transactions to the blockchain, filling the blocks to prevent legitimate transactions from being added to the chain. The legitimate transactions remain in the public mempool waiting for the next block.

    When this happens, the throughput capacity of the network is drastically slowed down, and in some cases shut down. It happened to Solana in January 2022, where the network went offline for four hours as a result of a BDoS attack.

    How to prevent a Blockchain Denial of Service Attack (BDoS)?

    Penetration testing is a core security auditing process that helps identify potential vulnerabilities before the mainnet is deployed. By simulating in-dept attacks, penetration testing offers traffic analytics tools that can help blockchain developers spot some of the telltale signs of a DoS attack such as unusual traffic patterns from a single IP address or IP range.

    In our previous article, we have covered some of the top blockchain security auditing firms that offer the best penetration testing services.

  • What are Crypto Launchpads? Investing in Startups for Massive Profits

    What are Crypto Launchpads? Investing in Startups for Massive Profits

    In the crypto industry, discovering early-stage moonshot projects can be difficult. Investors who manage to enter early usually secure massive returns, and some of these projects end up becoming successful in the long run. However, there are many low-quality projects and scams looking to take advantage of early investors, resulting in pump-and-dump schemes. Therefore, the market needed a more secure mechanism to raise funds for crypto startups. This is where launchpads come in.

    What is ICO? – The Origin of Crypto Fundraising

    Before we take a look at what crypto launchpads are, it is important to learn about its predecessor — Initial Coin Offering (ICO) and why they are no longer practiced.

    What is ICO and Why does it Matter?

    Similar to all business ventures, crypto projects require capital to build their product and meet their objectives. They typically achieve this via crowdfunding, and the first fundraising model in the crypto industry is an ICO, where crypto projects would raise funds by selling a part of their total token supply to the community. This allowed investors to purchase tokens at the cheapest price possible before they are listed on a crypto exchange.

    In fact, Ethereum conducted one of the first ICOs in 2014. More than 60 million ETH were created and sold to the public, raising $18.3 million USD.

    ICO Bubble in 2017-2018

    In 2017, ICOs began to take off thanks to Ethereum’s open-ended smart contract protocol. Developers can easily create new applications and tokens (ERC-20 tokens). Moreover, smart contracts can be executed to calculate raised funds and distribute tokens once crowdsale is complete. As a result, the majority of ICOs took place via the Ethereum network.

    Numerous projects saw substantial gains of their token as high as 10,000x, making a lot of early investors very rich. By the end of 2017, an estimated $4.9 billion was raised through ICOs reported by the Wall Street Journal. However, ICOs quickly became a way for investors to gamble in hopes of making easy profit. As a result, project fundamentals became less important to would-be investors.

    This led to many security issues. For example, since cryptocurrencies were unregulated at the time, anyone can launch an ICO anonymously. Many malicious actors took advantage of the hype and created false projects and ICOs. They would rug pull investors’ funds, or even just run away with the money, abandoning the project before it ever got listed on an exchange. It became so severe that the U.S. Securities and Exchange Commission (SEC) intervened, imposing strict securities laws on ICOs which subsequently led to ICO bans worldwide such as South Korea and China.

    Crypto Launchpads – The Beginning of IEO and IDO

    Because of the ICO bubble, faith in the crypto industry was lost. This made it very difficult for legitimate blockchain projects to raise funds and build products with real value. Fortunately, not long after, crypto launchpads came to the rescue. Launchpads are essentially platforms that help crypto projects raise capital while giving access to early-stage token sales for their group of investors.

    There are two main types of crypto launchpads — Initial Exchange Offering (IEO) and Initial DEX Offering (IDO). The difference between the two is where the fundraising is being held. Let’s look at the first one, IEO.

    What is IEO?

    An IEO is a fundraising model where the project receives the backing of a crypto exchange like Binance or FTX. The fundraising event is administered by the exchange, in contrast to an ICO where the project team themselves conducts the fundraising on their website. With IEOs, users can buy tokens on the exchange’s launchpad directly from their exchange wallet.

    IEOs generally have high security as most crypto exchanges are regulated to an extent. They actively follow stringent protocols to prevent fraud including know-your-customer (KYC) and anti-money laundering (AML) verifications. The projects are carefully scrutinized, vetted, and selected by the exchange team for their IEO. Project teams must at least have a white paper and minimum viable product (MVP) ready for the exchange to review. Thus, would-be investors are assured that the startups under IEO listings are legitimate. After all, the exchange is staking its reputation behind the projects on its platform, offering a higher degree of trust behind the project.

    For crypto projects looking to raise funds, an IEO offers the promise of an immediate userbase that can see their product. In other words, IEOs help create exposure to the project. This also means that the project can reduce their outside marketing funnels for fundraising, enabling them to focus only on the development of their product.

    Top IEO Launchpads

    Some of the top IEO launchpads include Binance Launchpad, Huobi Prime, KuCoin Spotlight, Gate.io Startup, and many others. In fact, the first IEO in history was launched by Binance Launchpad in the first quarter of 2019. Moreover, these top IEO launchpads are more than a platform for offering tokens. They also provide full advisory service for projects, leveraging their insights and experience to help build better products.

    Disadvantages of IEO

    Though IEOs are generally secure, not all crypto exchanges are equal. Some may not be as strict in doing due diligence or implementing regulations. This means that there is still a risk of a pump-and-dump scam, as advanced scammers could pull a meticulous long con.

    Moreover, listing fees may be quite high, especially on reputable exchange platforms. Startups may also be asked to pay commission from token sales. They can be considered as centralized gatekeepers about the types of projects that proliferate, meaning that only somewhat established projects can earn a spot.

    What is IDO?

    On the other hand, IDOs are approved by the community of a decentralized exchange (DEX) instead of a crypto exchange. Given the decentralized nature of these exchanges, anyone can become an approver. The community can vote on projects that they are interested in. This alleviates the gatekeeping bottleneck that IEO exchanges have, giving smaller legitimate projects a chance to shine.

    Similar to ICOs, some DEX teams also provide advisory service to listed startups, offering them a tool for engaging their communities in an economy that enhances their products while allowing them to make smart business decisions regarding their assets. However, unlike centralized exchanges, most IDO launchpads have their own native tokens, which in some cases serve as an entry requirement for users to participate in crowdfunding.

    Top IDO Launchpads

    Some of the top IDO launchpads include Polkastarter, TrustSwap, Scaleswap, DAO Maker and more. We have a complete guide on choosing the best IDO launchpads: Private: Ultimate Guide to the Best Initial DEX Offering (IDO) Launchpads.

    Disadvantages of IDO

    Though IDOs are more transparent and accessible to everyone, there are also drawbacks. Since DEXes tend to be a lot smaller than centralized exchanges, new projects might receive substantially smaller traffic than IEOs. Moreover, because every one gets a say in the approval process, long-con projects can also sneak their way in with eye-catching proposals and marketing.

    Key Takeaway

    Investing in potential crypto startups can generate massive returns if successful. IEO and IDO launchpads are a great place for you to research upcoming innovations and learn more about what they offer. Though not completely risk-free, they offer far more security advantages than ICOs.

  • 10 Best Crypto Marketing Agencies in 2022

    10 Best Crypto Marketing Agencies in 2022

    For the past decade, we have seen the rapid growth of the cryptocurrency industry, with new innovations emerging every now and then. But with thousands of crypto brands out there, standing out among the rest becomes more difficult by the day. Having a unique concept and building it out is one half of the battle, the other half is marketing and presenting it to the world.

    Crypto projects, like any other businesses, require strategic marketing and exposure to attract potential investors and partnerships. Crypto marketing agencies can fill this vital role while crypto ventures can focus on their business and development.

    Cinchblock

    Cinchblock

    Website: https://www.cinchblock.com/

    Cinchblock is one of the leading crypto and blockchain marketing firms based in Hong Kong. They specialize in growth hacking and influencer marketing, and are extremely efficient in expanding the brand of web3 startups. They achieve this by leveraging their vast network of influencer power worldwide. As such, they have worked with over 2,500 influencers who cover promotional content that would support the long-term growth of their clients.

    Since their launch in 2017, Cinchblock has around 160 clients, holding more than 3,800 marketing campaigns so far. Compared to other crypto marketing agencies, Cinchblock performed exceedingly well in promoting play-to-earn and NFT projects during the GameFi boom in 2021. The agency contributed to the success of several notable GameFi and NFT projects such as MetaWars (9,582% ATH) and Refinable (25,233% ATH). This is largely attributed to the experienced development team that Cinchblock has who understands every aspect of smart contract programming, game development, tokenomics ecosystem design and more.

    Solutions and Services Provided:

    • Influencer Marketing
    • Growth Hacking
    • Social Media Management & Marketing
    • Community Moderation
    • Blockchain Development
    • Smart Contract Programming
    • Art Production
    • Game Development
    • Tokenomics Ecosystem Design
    • Product Design

    Wachsman

    Wachsman

    Website: https://wachsman.com/

    Founded in 2015, Wachsman is a New York-based strategic communications consultancy firm that has worked alongside some of the largest corporations across the Americas, EMEA, and the APAC regions. Their clients span those operating in heavily-regulated environments, such as institutional banking, insurtech and fintech giants, financial service providers, and even national governments.

    Apart from experience and expertise in the traditional financial and policy circles, Wachsman is also highly competent in the blockchain landscape, providing services and solutions for web3 businesses and innovators. They are trusted advisors to numerous leading blockchain networks, payment gateways, cryptocurrency exchanges, DAOs, DeFi protocols, innovation labs and more.

    Solutions and Services Provided:

    • Market Strategy & Consulting
    • Corporate Narrative & Messaging Frameworks
    • Profile Raising
    • Media Relations & Publicity Management
    • Content Development
    • Influencer Marketing
    • Campaign Management
    • Social Media Marketing
    • Strategic Positioning

    Major Clients:

    Coinbound

    Coinbound

    Website: https://coinbound.io/

    Established in 2018, Coinbound has worked with some of the biggest names in web3 such as MetaMask, TRON, and Cosmos. The company specializes in thought leadership marketing and influencer marketing, managing one of the largest network of crypto influencers in the world across Twitter, YouTube, TikTok, Instagram, and more. Its clients saw a 60% increase in organic traffic following successful social media campaigns.

    Coinbound also delivers public relations expertise with contacts at some of the largest crypto publishers such as CoinTelegraph, Decrypt, and Forbes. This helps their clients secure organic coverage from the biggest names in the blockchain industry, reaching a wider audience worldwide.

    Solutions and Services Provided:

    • Influencer & Thought Leadership Marketing
    • Social Media Management
    • Public Relations
    • Search Engine Optimization
    • Web3 Blog Management
    • Fractional Web3 Chief Marketing Officer (CMO)
    • Web3 Executive Networking

    Major Clients:

    Crypto PR

    Crypto PR

    Website: https://crypto-pr.io/

    Founded in 2017, Crypto PR is a global Web3 marketing and PR agency. The strength of this agency comes from the former experience of its founder as a PR consultant for Fortune 500 companies, along with long term experience in Web3. They are well known for their solid narrative building, creative strategy, and trend creation within the Web3 ecosystem.

    On the creative front, Crypto PR established a production house to create entertaining video commercials, known to be the only crypto agency with such service, it has launched its first crypto video commercial earlier in August 2021, The Crypto Fortune Teller. Shortly after launching the campaign, many other crypto projects followed this video commercial trend, such as FTX, Crypto.com and Coinbase.

    Solutions and Services Provided:

    Digital Transformation Advisory
    Public Relations
    Investor Relations
    Influencer Marketing
    Social & Community Management
    Creative Advertising

    Major Clients:

    NinjaPromo

    NinjaPromo

    Website: https://ninjapromo.io/

    When it comes to tailored crypto marketing services, NinjaPromo is perhaps the best agency in engaging with clients by establishing personal connections. Their team understands all industry principles and practices very well, specializing in helping B2B firms, blockchain infrastructures, FinTech companies, software vendors, and various start-ups with global promotion.

    NinjaPromo is characterized by flexibility and innovation, hence their name as ninjas are quick and deadly. They have demonstrated the ability to keep up with the times, adopting the latest developments, technologies and methods of crypto marketing. As such, the agency is highly proficient in helping clients reach their target audience.

    Solutions and Services Provided:

    • Social Media Marketing
    • Influencer Marketing
    • Community Building and Management
    • Digital Advertisement and Content Creation
    • Search Engine Optimization
    • Organic Social
    • Public Relations
    • Website & Mobile App Development
    • Video Production
    • FinTech Marketing

    Major Clients:

    Lunar Strategy

    Lunar Strategy

    Website: https://lunarstrategy.com/

    In the past year, we have seen GameFi, NFTs, and Metaverse projects take off to the moon, breaking all-time high records. Sticking to the theme of crypto moonshots, Lunar Strategy is an award-winning crypto market agency that specializes in the aforementioned fields, and has helped several popular NFT platforms like Pixel Pix and JPEGvault break into the mainstream. As a result, the company has received quite a few awards, namely the “Top Digital Strategy Company Award” from DesignRush and “Top Rated ICO Marketing Agencies Award” from SoftwareWorld.

    Solutions and Services Provided:

    • Blockchain Public Relations
    • Social Media Management
    • Community Management
    • Influencer Marketing
    • Search Engine Optimization
    • DEX Listing
    • Landing Page Optimzation

    Major Clients:

    Coinpresso

    Coinpresso

    Website: https://coinpresso.io/

    Founded in 2021, Coinpresso is a very young crypto marketing agency within its startup phase. But what they lack in age, they make up for with outstanding data-driven results. Within a year, Coinpresso is regarded as the best agency in terms of search engine optimization, search engine marketing, and content marketing.

    Their marketing model is based on a click funnel approach and ROI-based hypotheses. In other words, they have a team of talented copywriters and technicians that provide engaging content for users, optimizing click-through rates to drive traffic across a variety of platforms and search engines. This is a very cost-effective way to support the growth of their clients. According to their website, increasing the click-through rate of websites “by as little as 2% can increase revenue by millions of dollars.”

    Solutions and Services Provided:

    • Search Engine Optimization & Marketing
    • Social Media Marketing
    • Web Development & App Optimization
    • Optimized Press Releases & Distribution
    • Google Ads by Qualified Specialists
    • Community Management
    • NFT Marketplace Development
    • NFT Marketing and Launch Packages

    Major Clients:

    Blockwiz

    Blockwiz

    Website: https://blockwiz.com/

    Blockwiz was established in 2019 by Dev Sharma who has previously held executive leadership roles with some of the biggest crypto companies, such as OKX and Paxful. The company was founded upon Sharma struggling to find a crypto marketing agency he could trust.

    Because of Sharma’s connections, Blockwiz specializes in developing big, active communities with a number of marketing services and solutions, from influencer marketing campaigns to search engine optimization. As of now, the agency holds one of the largest marketing portfolios with 250 high-profile names including KuCoin and Bybit.

    Solutions and Services Provided:

    • Influencer Marketing Campaigns
    • Social Media Management & Marketing
    • Brand & Strategy Consulting
    • Crypto Content Writing
    • Crypto Educational Videos
    • Press Releases
    • Search Engine Optimization
    • Paid Marketing Campaigns

    Major Clients:

    Crowdcreate

    Crowdcreate

    Website: https://crowdcreate.us/

    Since 2017, Crowdcreate has been one of the pioneers in blockchain marketing and strategy. The agency is also a global leader in NFT and GameFi marketing, amassing one of the largest communities of crypto influencers and thought leaders. Solana, Axie Infinity, and The Sandbox are some of the world famous names that Crowdcreate has worked with.

    Crowdcreate is one of the few marketing agencies who has the resources to host global conferences and events to gain international exposure for their clients. As of today, they have raised $250 million in total across 500+ successful projects.

    Solutions and Services Provided:

    • Advisory & Strategy
    • Web3 Marketing
    • Influencer Marketing
    • Public Relations
    • Investor Marketing
    • Growth Audit Score
    • NFT Consulting
    • Outreach Marketing

    Major Clients:

    Blockchain App Factory

    Blockchain App Factory

    Website: https://www.blockchainappfactory.com/

    Blockchain App Factory offers more than just marketing services. With multi-chain support, they create blockchain-based solutions for their clients, helping them streamline development, production, and research. According to their website, they can work with various blockchain networks, including Ethereum, TRON, and EOS. Moreover, all of their services are compliant with existing regulations, and they even provide legal consultations for their clients.

    Solutions and Services Provided:

    • NFT Marketing
    • Social Media Marketing
    • Equity Token Offering
    • Stablecoin Development
    • Asset Tokenization
    • Web3 Development
    • IDO Launchpad
    • DAO Solutions
    • P2P Lending Software
    • Crowdfunding Platform Development

    Major Clients:

  • APY vs APR in DeFi: What They Actually Mean for Your Rewards

    APY vs APR in DeFi: What They Actually Mean for Your Rewards

    As savvy investors, it is easy to get carried away by flashy numbers like 1000% staking rewards. But what most beginners overlook is the three little letters standing right next to it: APY or APR.


    Although APY and APR may sound identical, there is a significant difference to the calculations for returns over a period of time. There are also underlying risk factors of certain decentralized finance (DeFi) products with very high return on investment (ROI).


    Therefore, it is crucial that you have a better understanding of the formulas used to generate these two measures as well as what they signify for the potential returns on your crypto investments.

    What is APR?

    APR, which stands for annual percentage rate, is interest you gain from your investment in a year. It is also known as “simple interest” and its formula is straightforward.

    For example, if you stake 10,000 USDT at an APR of 10%, you will earn $1,000 in interest after a year. Your interest is simply calculated by multiplying the principal amount ($10,000) and the APR (10%). In a year, your capital will amount to $11,000, and in two years, it will be $12,000, and so on.

    See also: The Pros and Cons of Stablecoins: Why You Need To Know How They Work

    As such, APR is always quoted as a fixed yearly rate, thus a simpler and more static metric. However, with APY, interest calculations become slightly more complicated with compounding taken into account.

    What is APY?

    APY, short for annual percentage yield, is the annual rate of compound return earned on an investment. The keyword here is “compound.”

    What is Compound Interest?

    Compound interest is not only earning interest on your initial investment, but you are also earning interest on the accrued interests. This effect is called “compounding.”

    A simple scenario would be like this. Let’s say this time you stake 10,000 USDT at an APY of 10% compounded monthly. This means that interest is added to your principal sum each month, and the sum on which you earn interest increases over time. In other words, you will have more money earning interest each month.

    In one year, your capital will amount to $11,047.13, which is $47.13 more in interest by adding the effect of compound interest.

    The Power of Compound Interest

    The aforementioned scenario is an instance of monthly compounding. In fact, there are different compounding periods depending on the institution. Interests can be compounded quarterly, monthly, week, or daily.

    The more frequent the compounding periods, the higher your effective yield is going to be. For example, if your staked 10,000 USDT is compounded daily at 10% APY, then you will earn $11,051.56 in one year, which is $4.43 more than monthly compounding.

    It may not seem like a big difference but the power of compounding is more significant over more extended periods. After five years, you will have earned around $16,500 if compounded, which is $1,500 more than simple interest.

    APY vs APR vs No Invest (Source: DataDrivenInvestor)

    As illustrated in the graph above, the APR line is linear, whereas the APY line is exponential, which is always higher than the linear as time progresses. The principal remains the same if no investment is made.

    You can use an APY calculator to calculate how much you can earn with different compounding periods and different time frames.

    How does APY Work in DeFi?

    The previous section is a simplified example of how compound interest works in general. However, APY investments work differently in DeFi. APYs in the crypto space constantly change due to several factors. As such, as a rule of thumb, the APY shown on DeFi products should be considered as estimates.

    Supply and Demand

    As with any market economy, the law of supply and demand influences the assets’ price. Since interest is generated based on the demand to borrow and trade crypto, market dynamics play a role in determining the rates.

    Since the crypto market is volatile in nature, the APY changes according to the level of demand for trading liquidity of the token. If there is plenty of supply, APY interest rates tend to be lower. Conversely, if the demand is high, the APY usually increases as well.

    Inflation

    Inflation refers to the loss in value of a currency over time. In crypto, inflation is brought about by adding new tokens at a predetermined rate to the blockchain. The rate of inflation affects the staking returns. If the inflation rate exceeds the interest earned on a staked token, then the investor is losing money.

    Different Compounding Periods

    Different projects have specified blockchain protocols which play a part in the calculation of the APY. As a result, compounding periods may vary for each project. For example, some projects compound interest weekly, daily, or even according to the mined block per block cycle. It is important to note that the more frequent the compounding periods, the higher the APY will be.

    Most crypto projects offer shorter compounding periods, with weekly compounding being one of the most popular ones. This is to help potential investors mitigate the effects of price swings in the long run, since crypto prices rise and fall over time. This way investors can do their compounding manually, and calculate their returns within specific time frames, so that they can strategize their entries and exits when engaging in DeFi protocols.

    Comparing APY vs APR Investments

    Although APY seems to be the obvious choice in maximizing ROI, there are also underlying risk factors when it comes to APY investments in general.

    Prevalence of Non-Sustainable APY Projects

    Projects with very high APYs, as high as 1,000% or more, are high risk/high reward investments. This is especially common for newly launched DeFi projects, because the price of a token is highly volatile during its early phase. To keep investors in the ecosystem, the project would provide trading pairs for the token also known as liquidity pools.

    Liquidity pools are one of the products that allow for staking and generating returns for providing liquidity. As such, projects will offer high APYs to offset impermanent loss, which occurs when the ratio of tokens in the liquidity pool is unbalanced. This also incentivizes users to continue providing liquidity instead of selling.

    However, there is a possibility of a dump for the project. Since most DeFi protocol tokens are inflationary in nature, the revenue capacity for the protocol might be insufficient for everyone to share. In other words, if everyone is earning 1,000% APY and the token has no real utility, it then becomes a race for the liquidity providers to see who cashes out first. As a result, this drives the token price and APY down, leaving real users of the protocol with no exit liquidity.

    Distinction of DeFi Product Yields

    Products with a higher APY will not necessarily generate more returns than those with a lower APR. It depends on what the APY and APR mean in relation to the DeFi product.

    Some products advertise the term “APY” referring to the cryptocurrency earned, and not the actual yield in fiat currency. Some beginners often mistake the APY crypto rewards for fiat currency, which blindly clouds their judgement.

    This is a critical distinction to point out because the value of your investment in fiat terms may increase or decrease depending on the volatility of crypto asset prices. Even if you continue to earn high APY in crypto, the value of your investment in fiat terms may still be lower than the initial amount you placed in fiat, should the price of the crypto asset decline.

    Key Takeaway

    APR (annual percentage rate) is interest you gain from your investment in a year. On the other hand, APY (annual percentage yield) is the annual rate of compound return earned on an investment, which means you earn interest on previous interests accrued.

    Although APY is the obvious choice in maximizing ROI, there are also underlying risk factors behind it. Therefore, it is crucial to comprehend how these two measures are determined as well as what it means for the potential returns on your digital investments.

  • Layer-1 vs Layer-2 Blockchain Scaling Solutions: What are the Differences?

    Layer-1 vs Layer-2 Blockchain Scaling Solutions: What are the Differences?

    What are Layer-1 and Layer-2 Solutions?

    Layer-1 refers to the base level of the blockchain’s underlying infrastructure. Bitcoin, Ethereum, Binance Smart Chain, and Solana are examples of layer-1 blockchains. These networks can process and finalize transactions on its own blockchain.

    On the other hand, layer-2 refers to a network built on top of a layer-1 blockchain. Its main purpose is to help offload computational work from layer-1s by processing transactions off-chain, increasing transaction speed and throughput. Polygon, for example, is a layer-2 solution that runs on top of Ethereum to facilitate transactions away from the mainnet.

    Layer-1 Overview

    Underlying Problems of Layer-1

    Scalability is the biggest issue that has been plaguing most layer-1 blockchains. As more users carry out increased simultaneous transactions, the blockchain becomes slow and expensive to use. Ethereum, for example, is the most used decentralized network, but its gas fees and process time are high.

    Blockchain Trilemma

    This is known as the “blockchain trilemma” — an impossibility for blockchains to simultaneously achieve decentralization, security, and scalability. As such, a decentralized and secure layer-1 blockchain cannot provide scalability. And a scalable, secure network lacks decentralization.

    This happens because of the fundamental nature of a blockchain. All transactions require the independent verification of the nodes who are running the blockchain’s software. The verified data will then be logged and stored on the blockchain.

    Transaction Confirmation Time

    However, depending on the network, this entire process takes time. For Bitcoin, all transactions require six confirmations in the blockchain from miners before being processed. The completion time varies between ten minutes and an hour. A node can only handle so much at a time. In times of network congestion, users will experience longer confirmation times and higher gas fees due to high demand.

    How do Layer-1 Solutions Work?

    There are several ways to increase throughput and overall network capacity of layer-1 blockchains.

    Transition to Proof-of-Stake

    For blockchains using proof-of-work as their consensus mechanism, they may switch to proof-of-stake to increase transactions per second while reducing gas fees. Ethereum is a great example of this as they are undergoing a transition to proof-of-stake called the “Merge.”

    The blockchain’s development team can also introduce a hard fork or soft fork of the network for their community to vote and approve:

    Soft Fork

    A soft fork is when new features are implemented to the protocol at a programming level. It is a backward-compatible upgrade, which means that the non-upgraded nodes will still see the chain as valid and can still communicate with other upgraded nodes. In other words, the addition of a new rule will not clash with the older rules.

    An example of a soft fork is Bitcoin’s SegWit update in which signatures are separated from transaction data, freeing up more space for transactions to be stored in a single block, increasing the throughput of the network.

    Hard Fork

    On the other hand, a hard fork is a major change to the blockchain’s protocol that results in the splitting of the blockchain, creating a second blockchain that inherits all of its history with the original, but is on its own towards a new direction. The new rules conflict with the rules of the old nodes, which means upgraded nodes cannot communicate with non-upgraded nodes.

    In July 2016, the Ethereum network hard forked into two blockchains: Ethereum and Ethereum Classic. Ethereum Classic is the old Ethereum with a completely seperate cryptocurrency (ETC). They have different technological and philosophical goals.

    Layer-2 Overview

    How do Layer-2 Solutions Work?

    Layer-2 solutions are built on top of a layer-1 blockchain to increase its throughput and overall network capacity. They work in parallel or independent of the main chain. Rollups and sidechains are two of the most common layer-2 solutions that help offload computational load from layer-1s:

    Rollups

    Rollups scale layer-1 blockchains by processing transactions on layer-2 platforms before submitting the results back to the layer-1. The term “rollup” refers to the way that the chain bundles many transactions to be submitted to the main chain.

    There are two types of rollups: Optimistic Rollups and Zero-Knowledge Rollups (ZK Rollups). The difference is in how they validate transactions.

    In short, Optimistic Rollups assumes that the transactions are valid, hence an “optimistic” outlook, whereas ZK Rollups attempt to prove that the transactions are valid.

    See also: Understanding Layer 2 & Scaling Solutions: Arbitrum, Boba, Optimism, Polygon, Ethereum 2.0

    Arbitrum, Optimism, and Boba Network are examples of layer-2 projects employing optimistic rollups. On the other hand, Starknet and zkSync are among the Ethereum layer-2s that leverage ZK Rollups.

    Sidechains

    Sidechains are secondary blockchains that run parallel to the layer-1 blockchain. Since they have their own virtual machine and validators, they can operate independently. In short, the sidechains validate the transactions and then send them back to the main chain via bridges.

    Polygon is the most popular sidechain that aims to scale Ethereum by building and connecting Ethereum-compatible blockchain networks. Polygon operates on its own consensus mechanism and also has its own native token known as $MATIC.

    Are Layer-2 Solutions Viable Long-term?

    Although layer-2 provides a quick solution to improve scalability, questions have been raised as to whether layer-2 will be irrelevant once scalability issues are solved on layer-1’s end.

    Ethereum 2.0 will ultimately be able to speed up transactions while drastically reducing gas fees. This not only affects layer-2 solutions but also impacts other competing layer-1 blockchains like Solana or Avalanche.

    However, as of now, because of the upcoming Merge in September, we still see bullish sentiment surrounding competing layer-1s of Ethereum and several other layer-2 projects. Perhaps the completion of Ethereum 2.0 will indirectly foster other layer-1 and layer-2 ecosystems, instead of the other way around.

    Key Takeaway

    If you are new to crypto, it may be confusing to distinguish between layer-1 blockchains and layer-2 solutions. It is helpful to understand the differences between the two as well as the different approaches to scaling that they offer.

    Layer-1 blockchains are networks that can validate and finalize transactions by themselves, and their scaling solutions involve improvements to the existing protocol. On the other hand, layer-2 solutions are built on top of a layer-1 blockchain to help scale its throughput and overall network capacity.

  • What are Guilds in Crypto Gaming? The Future of GameFi Ecosystem?

    What are Guilds in Crypto Gaming? The Future of GameFi Ecosystem?

    Current Problems of GameFi

    GameFi is a financial system in which users can earn money by participating in video games. These play-to-earn (P2E) games are powered by blockchain technology, allowing players to earn while they play.

    See also: The Future of GameFi – Why are Firms Still Investing?

    It sounds too good to be true, right? Earning money from playing video games? This is actually achievable, and can be life-changing for all gamers worldwide. However, the GameFi market has been bottlenecked by two main issues:

    1. The cost of entry is too high for most players. Popular games like Axie Infinity, their NFT in-game assets cost at least thousands of dollars. Even if new players could afford it, it would take time for them to earn enough to break even.
    2. GameFi is still a niche in the crypto market, let alone the gaming market. There is more emphasis on the “earning” aspect than the “playing” aspect. According to Forbes, gamers only care about having fun, and most play-to-earn games lack the “fun” element. As a result, traditional gamers are not as interested in GameFi as we thought they would be.

    How can we find a solution to this issue? This is where crypto gaming guilds come in.

    What is a Crypto Gaming Guild?

    Gaming guilds have been around for a very long time. Traditionally, they are communities of gamers who play video games together and have their own culture. Recently, I came across abs카지노 보증 while exploring new gaming platforms, which ensures a safe and reliable environment for players. Esports teams are famous examples of gaming guilds, only they get to generate a stable source of income from playing video games.

    But for the rest of the casual gaming communities, there is not much to be made. However, with blockchain technology, every gaming guild will also have the privilege to make money from doing what they enjoy.

    A crypto gaming guild is an organization that is made up of gamers, investors, and managers. Their goal in the crypto market is twofold:

    1. They invest in promising web3 gaming projects, providing them funds and confidence to build a healthy play-to-earn ecosystem.
    2. They provide resources to players who may not be able to afford them otherwise, such as NFT characters or in-game tokens. When the player successfully earns money, that income is shared with the guild.

    The purpose of these gaming guilds is to encourage and facilitate the expansion of the GameFi market across the world. They also act as intermediaries by reducing the entry barrier for most players as well as educating non-crypto users about cryptocurrency.

    This gives everyone a chance to take part in the economy of the metaverse, creating a win-win situation for both the gamers and the guilds.

    How do Crypto Gaming Guilds work?

    For crypto gaming guilds, it is also more than progressing the GameFi market. They aim to advance the cryptocurrency space as a whole, bringing mass adoption one step closer. They have five main roles in the crypto space:

    1. Community Connection with GameFi

    The core of every gaming guild is its community. Gaming guilds have great potential for social impact, and community activity is vital for the growth of any ecosystem in general.

    They operate under a DAO (decentralized autonomous organization) structure in which funding comes from within the community of DAO token holders, in this case the DAO token issued by the guild. Guild members would then collectively invest in NFT assets and in-game tokens needed to participate.

    They would then pool their resources together for other guild members to use, play, and earn for shared profits. This is known as the “scholarship program”, which will we talk about in the next section.

    But the primary role and responsibility of the guild is to guide the community in the web3 world. Different blockchain games will have certain features and products that users might not be familiar with. Therefore, the community is where they congregate to talk and ask questions, which significantly aids the game project’s long-term growth.

    2. Scholarship Programs for Players

    The DAO model of guilds first emerged as a solution to the play-to-earn entry barrier. It is known as the “scholarship program.”

    Within the guild, owners of NFT assets, also known as managers, can lend out their NFTs to other guild members known as “scholars.” Scholars can then use these digital assets to play and earn in the crypto game.

    Afterwards, the profit is shared amongst the guild. The distribution of revenue varies depending on the guild. (vulcanpost.com) Generally, 10% is paid to the guild as rent, 20% to the managers, and 70% to the scholars. Other guilds split the profits in half.

    This system has a great social impact throughout the world, granting access to virtually anyone for new gameplay experience and earning opportunities.

    Axie Infinity, for example, was the first gaming project that took off in 2021, giving rise to boom of the GameFi sector. Guilds recognize that most players live in developing countries where the average monthly salary is around $200.

    Yield Guild Games (YGG), a crypto gaming guild based in the Philippines, facilitated the scholarship program that would help hundreds of thousands of players in the country to earn additional revenue for their livelihood (lifechanging literally).

    3. Quality Control for GameFi Projects

    The GameFi sector became increasingly popular following the Axie Infinity boom in 2021. As a result, many projects aspire to bring forth the next innovative gaming product to the market.

    But this also means that there are poor-quality, fraudulent projects looking to take advantage of the play-to-earn hype. It is the guild’s responsibility to prevent their members from being exposed to scams or rug pulls.

    All top gaming guilds carefully research and analyze the economic system of the projects they invested in as well as playtest and evaluate the game before awarding scholarships to their members.

    4. Bridge Between Traditional Gamers and Crypto

    Blockchain-based games are different from traditional video games. There are quite a few steps involved that can seem daunting to non-crypto users. Accessibility is an important factor to drive the GameFi sector forward, so it is important that there are sufficient educational resources for newcomers.

    As such, guilds play an indirect role in supporting non-crypto gamers to access the market, for example:

    • How to create a crypto wallet such as Metamask to access the game and marketplace.
    • How to deposit and withdraw funds on exchanges and DApps for trading.
    • How to secure accounts and make transactions.
    • Learn more about the game project such as gameplay mechanics and reward systems in the game.

    The more non-crypto gamers know about the market, the more they are likely to dip their toes into GameFi. As a result, more funds flow in, contributing to the long-term growth of the market.

    Some gaming guilds such as UniX Gaming have even taken the initiative to expand their scholarship program to include its learn-and-earn education platform. This investment both attracts more scholars and boosts player performance.

    Retention rate of crypto games is a key performance indicator of a healthy ecosystem. UniX reported a higher than average matchmaking rating (MMR) per scholar (in-game skill level) when compared to other guilds, resulting in higher earnings.

    5. Connect Investors with the GameFi Market

    Crypto gaming guilds also functions as a venture capital for the GameFi sector. They would scout new crypto games and invest if they see potential.

    Even for investors who want to invest in games but do not have time to play, they can invest in guilds and distribute scholarships to their members as well. This way guilds can help investors to indirectly invest in games through them without going through the hassle of doing research, managing accounts or operating the game.

    Conclusion

    Despite the bear market, the GameFi sector still shows a lot of potential in the future. This is because gaming is the number one form of entertainment in the world, and everyone can enjoy the opportunity to earn income from doing what they enjoy.

    However, the GameFi sector is still bottlenecked by high cost of entry and lack of economic viability in the long run. This is where crypto gaming guilds come in. They function as facilitating intermediaries by purchasing NFT in-game assets and lending them out to players to play and earn, which will be shared via scholarship program.

    Gaming guilds are also a great source of education for non-crypto users to learn about the crypto market, which will help drive the GameFi sector forward, bringing mass adoption one step closer.

    Investors who are interested in play-to-earn projects but do not have time to play can consider investing in guilds to manage their funds for profit.

    Frequently Asked Questions

    What is a crypto gaming guild?

    A crypto gaming guild is a web3 organization that is made up of gamers, investors, and managers. Their main goal is to provide resources such as in-game NFTs to players who can’t afford them. The players will then use the NFTs in crypto games to play and earn tokens which will be shared with the guild.

    How do crypto gaming guilds work?

    Crypto gaming guilds operate under a DAO (decentralized autonomous organization) structure in which funding comes from within the community of DAO token holders, in this case the DAO token issued by the guild. Guild members would then collectively invest in NFT assets and in-game tokens needed to participate.

    What is a scholarship program?

    Within the crypto gaming guild, owners of NFT assets can lend out their NFTs to other guild members known as “scholars.” Scholars can then use these digital assets to play and earn in the crypto game.

    How are profits shared in crypto gaming guilds?

    The distribution of revenue varies depending on the guild. Generally, 10% is paid to the guild as rent, 20% to the managers, and 70% to the scholars. Other guilds split the profits in half.

    Can you invest in crypto gaming guilds?

    Yes. For investors who want to invest in games but do not have time to play, they can invest in guilds and distribute scholarships to their members as well. This way guilds can help investors to indirectly invest in games through them.

  • How Much Money Has Been Stolen in Crypto throughout History?

    How Much Money Has Been Stolen in Crypto throughout History?

    Is Cryptocurrency Even Safe?

    The potential of blockchain applications is endless. It is based on principles of cryptography, decentralization and consensus, which ensure trust in transactions. It eliminates the need for intermediaries in a wide array of transactions, virtually transforming every corner of the global economy.

    Cryptocurrency, as a result of blockchain technology, gives us total control over our money, thereby becoming our own bank. On paper, crypto is generally safe thanks to the blockchain’s decentralized distributed ledger and the encryption process every transaction undergoes.

    However, the crypto space is still in development, and most of us still have to rely on third-party wallet providers to store our crypto. The security of our fund is only as safe as the safeguards and security measures the provider has in place.

    As crypto evolves, so do hackers and scammers. Malicious actors are getting more creative at exploiting vulnerabilities in blockchain projects, devising new tactics to bypass their security controls.

    How Much Money Has Been Stolen to Date?

    Over the years, hackers have exploited loopholes within the platforms of these third parties, especially on DeFi protocols. They have also coordinated attacks on certain cryptocurrencies directly such as utilizing flash loans to their advantage — borrowing a large amount of funds without collateral to quickly carry out pump-and-dump schemes.

    Crypto Hacks since 2011 (Source: Comparitech)

    To this date, more than $7 billion have been stolen in the crypto space. As crypto prices tend to change, that $7 billion would be worth so much more today. If the hackers were to cash it in today, they would have amassed a fortune worth more than $40 billion!

    This number alone is from exploits and thefts by hackers. It does not include other events such as rug pulls or corporate fraud. Those numbers would be even higher if they are added together.

    Five Largest Crypto Hacks in History

    Comparitech, a pro-consumer website that focuses on cyber security, has managed to track and record all attacks that have happened in the crypto space since 2011.

    There are 365 recorded attacks so far and the five largest hacks make up more than one-third of the stolen $7+ billion:

    Ronin Network (Axie Infinity) – $620 Million Stolen

    Ronin Network is an Ethereum-linked sidechain that powers Axie Infinity, one of the leading blockchain games. On 29 March 2022, Ronin Network was hacked and 173,600 ETH and 255,000 USDC were stolen as a result, worth $620 million at the time.

    See also: The Pros and Cons of Stablecoins: Why You Need To Know How They Work

    The U.S. Treasury Department attributed the hack to Lazarus, a North Korean hacking group. Lazarus reportedly reached out to developers of Axie Infinity via LinkedIn on the pretense of a fake company, offering them an “extremely generous” compensation package.

    A senior engineer took the bait and clicked a PDF which supposedly contained the “offer.” This led to the engineer’s computer being compromised as well as the validator nodes of the Ronin Network.

    Poly Network – $610 Million Stolen

    Poly Network is a cross-chain protocol that implements blockchain interoperability in DeFi. In August 2021, a hacker managed to exploit a vulnerability in Poly Network’s code which enabled them to transfer more than $600 million worth of tokens to their own account.

    Through a series of negotiation, Poly Network pleaded with the hacker to return the stolen funds, calling him “Mr. White Hat.” The platform even offered him a $500,000 bounty and a job as “chief security advisor.” Surprisingly, the hacker returned all of the stolen funds!

    Security experts believe that it was likely the hacker realized it would be impossible to launder the money and cash out, since all transactions are recorded on the blockchain.

    Coincheck – $532 Million Stolen

    Coincheck is a Japanese cryptocurrency exchange and NFT marketplace founded in 2012. In January 2018, its NEM (XEM) tokens worth more than $530 million at the time were stolen and transferred to 11 different addresses.

    Hackers exploited the fact that the tokens were being stored in a “hot wallet”, which was connected to the server. This made it susceptible to phishing attacks.

    Coincheck also did not have a multi-signature security measure in place, which requires more than one person to sign off before funds can be moved. As a result, a single point of failure would be established.

    MT Gox – $470 Million Stolen

    MT Gox was a Japanese Bitcoin exchange founded in 2010, and it was handling over 70% of all Bitcoin transactions worldwide by early 2014.

    It is arguably the most infamous case of crypto hacks in history. It was the first large-scale hack on an exchange and is still the biggest theft of Bitcoin (BTC) from an exchange to this day.

    The attack on MT Gox was not a solitary event. Rather, the exchange had been leaking funds since 2011, until it was discovered in February 2014. During this period, around 100,000 BTC were stolen from the exchange and 750,000 BTC were stolen from the exchange’s customers. At the time, these BTC were both $470 million, but today, they are worth around $4.7 billion!

    MT Gox filed for bankruptcy shortly after the hack. Only 200,000 of the stolen BTC were successfully recovered.

    Wormhole – $326 Million Stolen

    Wormhole is a blockchain bridge between Solana and other top DeFi networks, allowing users to swap Solana tokens (SOL) for other crypto on DApps across the Ethereum network.

    The attack exploited a signature verification vulnerability in the network that allowed the hacker to freely mint 120,000 wrapped ETH (wETH), worth $326 million at the time.

    Cross-chain bridges are critical infrastructure in the DeFi ecosystem as users can move their funds between blockchains. A lot of money is being moved. This means that security is a number one priority for these platforms. However, Wormhole was harshly criticized for its lack of comprehensive security audit before going live.

    According to an article by Hacken, though Solana may be blamed for providing the instrument with security flaws to its projects, Wormhole might have “prevented the incident by auditing the instruments it used.”

    The Bottom Line

    Despite improvements, the crypto industry still faces security concerns, especially in peer-to-peer ecosystems where anybody can join anonymously. It becomes almost impossible to track malicious actors when their identity is hidden.

    New forms of cyber threats are emerging that are capable of causing massive, irreparable damage. And this list will only continue to grow unless there is a solid security measure that is widely established.

    Therefore, it is important to learn about the potential security flaws that are prevalent in third-party platforms like DeFi, crypto wallets and exchanges. As investors, we should recognize the kinds of attacks that hackers pull off so that we can spot and avoid them beforehand.