• Forum has been upgraded, all links, images, etc are as they were. Please see Official Announcements for more information

Pre-proposal: DASH PrivateSend De-Anonymization Contest

Would you vote for this proposal? MNOs only please!

  • Yes

    Votes: 26 83.9%
  • No

    Votes: 3 9.7%
  • Abstain

    Votes: 2 6.5%

  • Total voters
    31

1. Good on the researchers for finding a potential exploit. Finding the problem is the the first step to fixing the problem.

2. They set up their own testnet basically, and looked at very simple edge cases with the minimum amount of mixing. They state right in the paper that the exploit doesn't work on regular/normal PrivateSend transactions.

Conclusion: In the lab, on a stripped down/simplified network with very very limited mixing, they have found a potential exploit. Nice to know, doesn't actually apply in real life. See MooCow's (and other folks') comments here:

https://www.reddit.com/r/dashpay/comments/6zols1/blocksci_paper_highlights_blockchain_traceability/
 
I had a discussion about this paper with @moocowmoo on Monday. The core team is still reviewing the paper, but the attack vector affects edge cases and would not affect this contest as it is planned.
 
That's a relief.

What with Instant Send currently turned off, and Private Send apparently vulnerable and the whole crypto market falling... I was beginning to feel slightly less optimistic. Hopefully these are all just bumps in the road.
 
This is what "buy the ....... dips" actually looks like. When the unsophisticated and poorly informed crypto investors hear something scary, they go dump their stash.

The seasoned investors that base their investment strategy on several factors (none of which are emotion) think, "Hey! Crypto is on sale."

Is there a risk that some unanticipated black swan event could cause the whole cryptoverse to drop in value by 90%? Sure, that's still possible. Don't invest any money in any crypto that you can't afford to lose in its entirety.

It's also worthwhile to consider the perspective of most of the world that has crappy fiat, crappy predatory banking services, and the ever present threat of capital controls. "Hey look, Dash went down 10% yesterday. But I'm still up almost 50% for the month. And the Bolivar lost 65% in that same time period. Better buy some more."
 
This is what "buy the ....... dips" actually looks like. When the unsophisticated and poorly informed crypto investors hear something scary, they go dump their stash.

The seasoned investors that base their investment strategy on several factors (none of which are emotion) think, "Hey! Crypto is on sale."

Is there a risk that some unanticipated black swan event could cause the whole cryptoverse to drop in value by 90%? Sure, that's still possible. Don't invest any money in any crypto that you can't afford to lose in its entirety.

It's also worthwhile to consider the perspective of most of the world that has crappy fiat, crappy predatory banking services, and the ever present threat of capital controls. "Hey look, Dash went down 10% yesterday. But I'm still up almost 50% for the month. And the Bolivar lost 65% in that same time period. Better buy some more."

Wise words mate.

Don't worry I am a seasoned investor and I was being over dramatic for effect. heh heh..

I am a massive Hoddler.

:)
 
Last edited:
I love this idea and think this should be implemented sooner rather than later.

On the reward, pricing it in USD adds an interesting dynamic. Increasing the USD value over time doesn't mean they would be getting a better value. $25,000 in Dash today could be more Dash than $100,000 9 months from now, so some people would rush to try to break it as early, as possible but for others $100,000 is more than $25,000 so they might not try to break it until after the reward increases in fiat terms even if this means they get less Dash.

An alternative is for the reward to be 100 Dash or $25/50/75/$100,000, whichever is greater (I assume the Dash value will be the greater value but this gives people a floor just in case the price dramatically drops).
 
One way to do this that would be like multisig is just submit different proposals each month to each holder. So no one person holds its all. But its probably better to just have someone be the escrow then to move it to a multisig address.
 
I'm working on an escrow solution with the goal of submitting for this budget cycle.

I originally had the contest reward in Dash because it makes things a bit simpler to administer and the prize pot would potentially grow as Dash appreciates. However, there was concern that the marketing would be more compelling with a USD prize and that the price of Dash might crater if a big vulnerability was discovered which would diminish the value of a prize denominated in Dash. The odds of this prize being claimed are so remote I think I'd just prefer to keep things simple with a USD denominated prize. It's very easy for everyone to understand and promote which is the main objective here.
 
I'm working on an escrow solution with the goal of submitting for this budget cycle.

I originally had the contest reward in Dash because it makes things a bit simpler to administer and the prize pot would potentially grow as Dash appreciates. However, there was concern that the marketing would be more compelling with a USD prize and that the price of Dash might crater if a big vulnerability was discovered which would diminish the value of a prize denominated in Dash. The odds of this prize being claimed are so remote I think I'd just prefer to keep things simple with a USD denominated prize. It's very easy for everyone to understand and promote which is the main objective here.

It's a bit late in the cycle, but I feel confident the MN community will vote overwhelmingly yes on this. Bring it...
Don't forget, if by some rare miracle somebody does break a specific PrivateSend transaction for this prize, they have to report it first to the Dev team and describe the methods they used to claim the prize. Then it's win/win/can't lose.
 
OK - one more update before I submit this.

  • Escrow - @coingun has formed a Canadian company Green Candle, Inc. to handle escrows for Dash treasury payments. I've added this to the proposal. There is a 10 Dash escrow fee which I took out of my end on the project management side. The escrow fee covers things like procurement of clean storage devices and safe deposit box rental.
  • Extended the core technical consultation period from 7 days to 14 just in case people are busy/traveling.
  • Added language to authorize creation and my use of [email protected] email and creation of a contest landing page on dash.org. I will create the content for the landing page. @tungfa are you admin? Is this a problem?
Thanks for everyone's patience - there have been a lot of small details to sort on this proposal!
 
OK - one more update before I submit this.

  • Escrow - @coingun has formed a Canadian company Green Candle, Inc. to handle escrows for Dash treasury payments. I've added this to the proposal. There is a 10 Dash escrow fee which I took out of my end on the project management side. The escrow fee covers things like procurement of clean storage devices and safe deposit box rental.
  • Extended the core technical consultation period from 7 days to 14 just in case people are busy/traveling.
  • Added language to authorize creation and my use of [email protected] email and creation of a contest landing page on dash.org. I will create the content for the landing page. @tungfa are you admin? Is this a problem?
Thanks for everyone's patience - there have been a lot of small details to sort on this proposal!

hey there
let me look into this
 
Hi Everyone, this proposal is still a few votes short with 5 days left to vote in the cycle. Please show your support with a yes vote if you haven't done so already. Thanks!
 
I'm disappointed this proposal was rejected and I'm of the opinion that those who voted no need to work on their reading comprehension skills.
 
I agree, disappointed too. Some comments on @DashDude being a recent member had some coherence though. That could definitely have had an impact. I guess the best thing would be for DashDude to team up with another well known member to make a new proposal.

Although, it sill could not pass for other reasons. Reasons that I would fail to understand. And that should be of worry, it could means that MNs just don't believe PrivateSend is secure...
 
Same here. I think it just needs to get simplified. Just have the escrow hold everything, then do a management fee and a few advisers to approve the payout. Green candle can follow the rules of the reward payout as laid out in the proposal.
 
Back
Top