multi-party-ecdsa VS awesome-mpc

Use MPC instead? Sadly there are not enough mature open source projects around: https://github.com/ZenGo-X/multi-party-ecdsa and you can always take a look at https://github.com/rdragos/awesome-mpc

Sadly companies like Unbound were acquired by Coinbase and the OSS codebase is not longer maintained: https://github.com/unboundsecurity/blockchain-crypto-mpc

Ha nice call!

Unfortunately we have not completed a satisfactory security audit. We engaged with one company, but I don't think they were worth their salt. The problem is that the "good" companies are much more expensive, so it's a consideration of the value of the security audit. (If you know of a reputable company that would like to audit for free though...)

The code is not yet open source, but we are primarily expanding on this open-source library. https://github.com/ZenGo-X/multi-party-ecdsa

As true decentralized security enthusiasts, we quickly got in touch with ZenGo and fixed the discovered security breach in a pull request. It was soon approved and merged into their TSS library. The researcher who found the attack was granted a bug bounty, the biggest in ZenGo’s history.

Regarding b̶l̶o̶c̶k̶c̶h̶a̶i̶n̶ Web3: look at the fundamentals that could go beyond tokens et al:

- Identity/U2F/2FA: it is time to use private keys instead of credit cards, instead of redundant KYC/AML processes.

- Custody: it is time to have more methods to handle the custody of your identity and data that goes beyond crypto. For example, mechanisms that takes into account divorce, deaths, kidnapping, and other use cases.

- TSS/multi-party-computation: we need more of this, currently there is no up to date open source fully audited state-of-the-art libraries for this in several programming languages. See [1]

- Data privacy: computing private information without reveling it. More coopetition. Personally talking with big pharma companies and interested on this, the limitation is politics, not technology.

- b̶y̶z̶a̶n̶t̶i̶n̶e̶ ̶f̶a̶u̶l̶t̶ ̶t̶o̶l̶e̶r̶a̶n̶c̶e̶ blockchain technologies for connecting different organizations. A hub for concrete purposes.

- declarative smart contracts to quickly orchestrate processes between organizations.

- Fully backed stable coins to push fintech beyond the power of the banks. Mostly regulated. Banks are slowly opening buggy APIs, we need a good fintech hub.

[1] https://github.com/rdragos/awesome-mpc

Very interesting list to build a discussion.

As a Web3 incumbent (more than 200 projects done since 2014 in several blockchains and layers) I would start adding the following:

- Provide one or more robust multi-party computation (MPC) libraries. Awesome-MPC [1] provides a big list but most are not maintained or security audited, were acquired and closed by companies (cough, cough Coinbase [2]). There are existing projects such as https://web3auth.io/ but the core elements are not open source. Shameless plug: we have created an MPC wallet that is accessed through https://walletconnect.com/ the interesting point about MPCs goes beyond Web3 and involves data custody in general.

- Encourage coopetition using data privacy offerings for computing over encrypted data. Companies such as [3] provides technologies around this using different strategies such as homomorphic encryption or security enclaves.

[1] https://github.com/rdragos/awesome-mpc

[2] https://www.coinbase.com/blog/coinbase-to-acquire-leading-cr...

[3] Examples: https://dualitytech.com/ https://secretarium.com/ https://www.dpella.io/ https://inpher.io/

Use MPC instead? Sadly there are not enough mature open source projects around: https://github.com/ZenGo-X/multi-party-ecdsa and you can always take a look at https://github.com/rdragos/awesome-mpc

Sadly companies like Unbound were acquired by Coinbase and the OSS codebase is not longer maintained: https://github.com/unboundsecurity/blockchain-crypto-mpc

I quickly scanned this repo and it seems to include only projects, that collaborated with Boston University. The list is far from complete. Check out https://github.com/rdragos/awesome-mpc for a maintained list of resources on circuit-based MPC.