2019-05-09 State of the Veil network
In this article, we are going to discuss the state of the Veil network, including our decision to replace Zerocoin with a new privacy protocol.
On April 27th, a critical vulnerability in the libzerocoin library was discovered by the Zcoin project. This library is used by most Zerocoin-based projects, including Veil.
In order to protect our users, the Veil project immediately released a wallet update. Furthermore, an internal analysis did not reveal any indication that the vulnerability was exploited on the Veil network prior to our wallet update.
The downside of the wallet update, is that it removes the anonymity feature of Zerocoin, in that Zerocoin spends will temporarily be linked from their original mints on the blockchain. Past Zerocoin transactions will not be deanonymized.
From a functional perspective, the usage of the wallet in terms of sending, receiving, and staking remain the same. The privacy characteristics of RingCT and CT are unaffected. Zerocoin minting, spending, and staking, however, are no longer unlinkable.
(Why do we use the term “unlinkable” here, rather than “anonymous”? Because if you mint zerocoins from RingCT, spends and staking rewards to those zerocoins benefit from the pass-through privacy inherent in RingCT.)
This was the second such Zerocoin vulnerability discovered in a short period of time, and this second one was far more serious than the first. After an extensive internal review and discussion with the Zerocoin community, and in the context of our long-term mission, the Veil project has concluded that we can no longer rely on Zerocoin as the core of our protocol.
As such, we are currently assessing a number of alternative protocols that would satisfy our requirements for Veil:
- Full-time privacy
- Only private transactions (one coin type)
- Private mining via the X16RT algorithm
- Private staking
- IP privacy (Dandelion)
- Fast transaction validation
- Minimized transaction sizes
- No denominations
To reiterate our message since the beginning—Veil is not seeking to simply replicate existing technology. Rather, we are working towards a complete solution that addresses the collective trade-offs and shortcomings of all current privacy protocol implementations.
Implementing the privacy protocol that meets our needs, creating a new wallet, and migrate coins over to the new network will be complex and will take time. But we are confident in our stellar development team and their ability to deliver the next generation in privacy technology. We estimate that this will take at least six months, and we will keep the community updated along the way.
Where does that leave the project in the meantime?
- Veil users can still earn staking rewards, non-anonymously, in the interim.
- We will continue to push out wallet updates as necessary.
- The development bounty program will likely continue unaffected; however, the community bounty program may in certain areas be suspended.
What should potential acquirers of Veil consider in the meantime?
Owning Veil now allows you to earn staking rewards while the new network is under development, and would be of interest to those who trust and have confidence in the team behind Veil.
Migrating away from our core technology is a difficult decision, particularly as it means the loss of a good portion of the project’s seed investment, and a requirement for additional capital to fund the activity of developing a new protocol. We started Veil with the mission to create an anonymous cryptocurrency that can serve the privacy needs of its users for generations to come. Our mission has not changed.
Privacy will only increase in importance and necessity as we move forward, and so we are confident the temporary setback we experience today will be more than compensated in the long-term by the benefits of a more reliable anonymity protocol at the core of our network.
As we move forward, we will continue to keep you, the Veil community, up to date with frequent updates. And as always, if you have any questions, please do not hesitate to reach out to us in Discord or Telegram.
Onwards!