Connect with us
DAPA Banner

Crypto World

Vitalik Buterin Donates to Shielded Labs for Zcash Crosslink Security Upgrade

Published

on

21Shares Introduces JitoSOL ETP to Offer Staking Rewards via Solana

TLDR:

  • Buterin’s donation funds Crosslink development from prototype to incentivized testnet and production phase. 
  • Crosslink adds finality layer to Zcash’s PoW chain, preventing reversals and strengthening settlement guarantees. 
  • The upgrade enables shorter exchange confirmations and improves cross-chain integration reliability for Zcash. 
  • Shielded Labs operates independently from Zcash Dev Fund, relying on donations from network supporters.

 

Ethereum co-founder Vitalik Buterin has donated to Shielded Labs to advance Crosslink development for Zcash. The contribution will fund progression from prototype to incentivized testnet and production readiness.

Crosslink adds a finality layer to Zcash’s proof-of-work consensus, protecting against chain reorganizations and rollback attacks. This marks Buterin’s second donation to the organization.

Crosslink Enhances Zcash Security Architecture

Shielded Labs announced the donation will support Crosslink’s continued development. The upgrade strengthens Zcash’s existing proof-of-work consensus through a parallel finality layer.

Block production and economic activity remain on the proof-of-work chain. Meanwhile, the finality gadget anchors blocks and provides stronger settlement guarantees.

Advertisement

The architecture prevents confirmed transactions from being reversed. This reduction in double-spend risk increases confidence in transaction settlement across the network.

Exchanges can implement shorter confirmation requirements as a result. Cross-chain integrations gain improved reliability through the enhanced security model.

Applications requiring predictable settlement benefit from the increased consistency. The improvements facilitate easier integration into the broader crypto ecosystem.

Zcash maintains its existing security properties throughout the upgrade process. The design preserves the network’s core characteristics while adding protective measures.

Advertisement

Commenting on the donation, Buterin stated that Zcash is one of the most honorable crypto projects. He praised the network’s steadfast focus on privacy as a defining characteristic.

According to Buterin, Shielded Labs’ Crosslink work will allow Zcash to be more secure. The upgrade will enable operation on a lower security budget, supporting long-term sustainability.

Production Phase Will Focus on Technical Readiness

The donation will fund the productization of the existing Crosslink prototype. Shielded Labs plans to launch a persistent, incentivized testnet where participants can earn ZEC.

The transition into productionization involves multiple technical components. Design specifications require completion before mainnet consideration.

Advertisement

Security analysis will form a critical component of the development process. Audits will verify the robustness of the finality layer implementation.

Coordination with wallets and infrastructure providers ensures smooth integration. Proactive engagement with the Zcash community maintains transparency throughout development.

Progress toward mainnet activation depends on several factors. Technical readiness must meet established standards before deployment.

Security review processes need completion to validate the upgrade’s safety. Broad community support remains essential for major protocol changes.

Advertisement

Shielded Labs operates as a Swiss-based Zcash support organization. The team focuses on protocol development projects that strengthen network security.

Funding comes from donations by Zcash holders and supporters. The organization maintains independence from the Dev Fund and block rewards.

Buterin’s first contribution in 2023 supported formation of a dedicated Crosslink team. He has contributed to discussions around protocol design and security for years.

Shielded Labs acknowledged his continued engagement with the Zcash ecosystem. The organization expressed appreciation for his support in advancing network resilience.

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Friday’s eth.limo Hijack Caused by Social Engineering on EasyDNS

Published

on

Friday’s eth.limo Hijack Caused by Social Engineering on EasyDNS

Ethereum Name Service gateway eth.limo has revealed that the domain hijacking on Friday was caused by a social engineering attack directed against EasyDNS, its domain name service provider. 

According to a postmortem published by eth.limo on Saturday, an attacker impersonated one of its team members to initiate an account recovery process with easyDNS, granting access to the eth.limo account and allowing them to alter domain settings.

“The NS records were changed and directed to Cloudflare… Once we understood that a DNS hijack had taken place, we immediately notified the community as well as Vitalik Buterin and others. We then began contacting EasyDNS in an attempt to respond to the incident,” the company said.

Eth.limo serves as a Web2 bridge, providing access to around 2 million decentralized websites using the .eth domain name. Hijacking the service could allow an attacker to redirect users to malicious websites. Ethereum co-founder Vitalik Buterin warned users Friday to avoid his blog until the incident was resolved.

Advertisement

Mark Jeftovic, CEO of easyDNS, has publicly accepted responsibility for the incident in its own postmortem report. 

“We screwed up and we own it,” said Jeftovic on Saturday. 

“This would mark the first successful social engineering attack against an easyDNS client in our 28-year history. There have been countless attempts.”  

Both companies have pointed to the Domain Name System Security Extension (DNSSEC) in thwarting the hacker’s attempts to do further damage. 

The attacker couldn’t produce valid cryptographic signatures, so Domain Name System resolvers rejected the attacker’s forged DNS responses, causing users to see error messages instead of being redirected to malicious sites. 

Advertisement

“DNSSEC was enabled for their domain when the attackers attempted to flip their nameservers, presumably to effect some manner of phishing or malware injection attack, DNSSEC-aware resolvers, which most are these days, began dropping queries,” Jeftovic said. 

Source: eth.limo

In its postmortem, eth.limo noted that because the attacker lacked the signing keys, they were unable to bypass the safeguards, which likely “reduced the blast radius of the hijack. We are not aware of any user impact at this time. We will provide updates if that changes.”

easyDNS makes changes since the attack

Jeftovic described the social engineering attack as “highly sophisticated,” and said easyDNS is still conducting a post-mortem on how the breach occurred, and has already begun rolling out changes to prevent a recurrence.

Source: easyDNS

“In eth.limo’s case, we will be migrating them to Domainsure, which has a security posture more suited toward enterprise and high-value fintech domains, TLDR there is no mechanism for an account recovery on Domainsure, it’s not a thing,” he added.

“On behalf of everyone here, I apologize to the eth.limo team and the wider Ethereum community. ENS has always had a special place in our heart as the first registrar to enable ENS linking to web2 domains and we’ve been involved in the space since 2017.”

Related: RaveDAO denies manipulation as Binance, Bitget probe RAVE trading activity

Advertisement

The eth.limo incident is the latest in a series of domain hijackings targeting crypto projects. Days earlier, decentralized exchange aggregator CoW Swap lost control of its website after an unknown party hijacked its domain. 

Steakhouse Financial, a DeFi advisory and research firm, similarly disclosed at the end of March that it had lost control of its domain to an attacker.

Magazine: Will the CLARITY Act be good — or bad — for DeFi?