[ANN] Firo (FIRO) - Implementing ZKP privacy without trusted setup

[Prima Primat]

I know botnets where there form the start we had a different algo then but I thought the new algo was supposed to fix this, or at least make it a lot less feasablie to do. asics seemed like not a option to me thats why I said it seemed highly unlikely, thats why I was wondering how the high hashrate could be explained.

It wasn't botnets as far as I know, a bunch of people just found out how to get AWS credits for free and unleashed insane numbers of Amazon instances on Zcoin.

ah oke I think I missed this bc I dont follow tread enough. I thought we where allready on MTP algo but where on lyra2z now instead?

It's been Lyra2Z since February... MTP is running on testnet and open source miners are being developed, and at the moment it's scheduled to launch at block 47500 (which should be around August 13), barring any further delays due to weaknesses found or anything like that.

[1715061869]

1715061869

[1715061869]

1715061869

[1715061869]

1715061869

[Prima Primat]

How this coin compare to Hush?

Well it's not a Zcash fork but an independent development – it actually launched before Zcash.

Zcash (& all its forks) has the problem of lacking supply auditability, meaning if any malicious person ever finds a bug that allows for double spends or anything like that, they could create an infinite amount of currency without it being detectable. Zcoin doesn't have that problem because it shows transaction amounts, even in zerocoin spends (Zcoin's equivalent to shielded transactions, roughly speaking).

Also this year or next year the trusted setup, which is still at the core of every zerocoin/zerocash-based cryptocurrency, will be ditched in favor of the trustless Sigma protocol in Zcoin.

[mrb]

Bounty for MTP Audit ($10,000) and MTP Implementation ($2,500)



We are announcing bounties for MTP audit and MTP implementation.

[...]

I submitted a first—critically exploitable—bug last night. SHA256 of the description of the bug at https://twitter.com/zorinaq/status/888644581926944768 Thank you for organizing this!

[J_A_Bankster]

Bounty for MTP Audit ($10,000) and MTP Implementation ($2,500)



We are announcing bounties for MTP audit and MTP implementation.

[...]

I submitted a first—critically exploitable—bug last night. SHA256 of the description of the bug at https://twitter.com/zorinaq/status/888644581926944768 Thank you for organizing this!

Great Job!! Keep it coming let's perfect this thing and rocket Zcoin to the stars!!

[awill333]

in anyone cares for an update, I did get back the 50 xzc from the second mint zero coin transaction but the first transaction is still gone. Waiting for some sort of helpful advice, have not received any yet. The second 50 zerocoin minting went smoothly without a hitch but the GUI did not liberate the coins, it presented an error message. When I 'spendmintzerocoin' from the console it worked fine. Still puzzled why the GUI would present an error message for the same function that works when called from the console. no explanation here.

In my opinion it is imperative/critical for the mint zero coins to NOT DISAPPEAR. I see everyone talking about pressing on with miner dev bounties and new MTP but the basic foundation of zcoin has malfunctioned and there seems to be very little regard to this issue. I have plenty of zcoin and only wish to see them gain value. I seriously doubt there is a future if this problem is not addressed. And why it has been postponed without public response is troubling me.

[minerbro]

how does this coin compare to zclassic?

[J_A_Bankster]

how does this coin compare to zclassic?

Both start with a ''Z'' 

how about you go to youtube and type in: ''zcoin vs zcash''... you will find all your answers in Reuben's interviews

[zcoinofficial]

in anyone cares for an update, I did get back the 50 xzc from the second mint zero coin transaction but the first transaction is still gone. Waiting for some sort of helpful advice, have not received any yet. The second 50 zerocoin minting went smoothly without a hitch but the GUI did not liberate the coins, it presented an error message. When I 'spendmintzerocoin' from the console it worked fine. Still puzzled why the GUI would present an error message for the same function that works when called from the console. no explanation here.

In my opinion it is imperative/critical for the mint zero coins to NOT DISAPPEAR. I see everyone talking about pressing on with miner dev bounties and new MTP but the basic foundation of zcoin has malfunctioned and there seems to be very little regard to this issue. I have plenty of zcoin and only wish to see them gain value. I seriously doubt there is a future if this problem is not addressed. And why it has been postponed without public response is troubling me.

Took a break on Sunday but am asking the devs to look at it. Need much more details tho. Only reason I brought it to PM was cause we probably need some private details from you like your wallet.dat. Still trying to process everything you wrote to communicate it with the devs.

[zcoinofficial]

Bounty for MTP Audit ($10,000) and MTP Implementation ($2,500)



We are announcing bounties for MTP audit and MTP implementation.

[...]

I submitted a first—critically exploitable—bug last night. SHA256 of the description of the bug at https://twitter.com/zorinaq/status/888644581926944768 Thank you for organizing this!

Submission is accepted! Thanks for this! Keep them coming! The bounty is divided between each bug found so the more you find the bigger the share of the bounty you get!

The bug happened when increasing the number of blocks required without adjusting this parameter. Good spot!

[maxuscz]

Hi all. I like your project. Specially interested about MTP algo.
Please add support DDRX5 memory and all 1080ti owners be happy too

[mrb]

Bounty for MTP Audit ($10,000) and MTP Implementation ($2,500)



We are announcing bounties for MTP audit and MTP implementation.

[...]

I submitted a first—critically exploitable—bug last night. SHA256 of the description of the bug at https://twitter.com/zorinaq/status/888644581926944768 Thank you for organizing this!

Submission is accepted! Thanks for this! Keep them coming! The bounty is divided between each bug found so the more you find the bigger the share of the bounty you get!

The bug happened when increasing the number of blocks required without adjusting this parameter. Good spot!

Thanks. Oh and I submitted a 2nd attack, this time a flaw in the MTP algorithm itself. https://twitter.com/zorinaq/status/889990807519870979

[mjosephs]

Thanks. Oh and I submitted a 2nd attack, this time a flaw in the MTP algorithm itself. https://twitter.com/zorinaq/status/889990807519870979

I think it's incredibly disturbing that the zcoin devs are embargoing these discoveries when MTP has not been deployed yet.  There is no risk of an exploit since the exploitable code has not yet been deployed.  And it sounds like mrb's second discovery is more than the horridly-maintained codebase containing magic numbers like "4034".  But we have no way to know.

Shame on you, zcoin, for bribing researchers into silence.

[mrb]

I think it's incredibly disturbing that the zcoin devs are embargoing these discoveries when MTP has not been deployed yet.  There is no risk of an exploit since the exploitable code has not yet been deployed.  And it sounds like mrb's second discovery is more than the horridly-maintained codebase containing magic numbers like "4034".  But we have no way to know.

Shame on you, zcoin, for bribing researchers into silence.

I don't have a strong opinion about this. Whether vulnerabilities are published today or in a bit less than 2 months (when the contests end) doesn't really matter IMHO...

However it would make more sense to have the miner contest end after the audit and implementation contests. Right now the miner contest ends on August 9th and the audit and implementation contests end on August 30th.

[mjosephs]

However it would make more sense to have the miner contest end after the audit and implementation contests. Right now the miner contest ends on August 9th and the audit and implementation contests end on August 30th.

That's my point -- except that I don't think the contest matters compared to the launch.  Who made more money from Zcash: Tromp or Claymore?  One day of Zcoin mining is worth more than the entire contest prize.

The constant last-minute changes to the PoW are just ridiculous at this point if you ask me.  Every time another one crops up MTP drops a few more notches further down my priority list.  Before your latest post I was fed up enough that I'd decided to wait until after the transition block to start working since at least at that point making any more changes would be more difficult for the zcoin politburo.  Now I'm starting to doubt even that as a reasonable time-management strategy.

[hidetoshi]

Thanks. Oh and I submitted a 2nd attack, this time a flaw in the MTP algorithm itself. https://twitter.com/zorinaq/status/889990807519870979

I think it's incredibly disturbing that the zcoin devs are embargoing these discoveries when MTP has not been deployed yet.  There is no risk of an exploit since the exploitable code has not yet been deployed.  And it sounds like mrb's second discovery is more than the horridly-maintained codebase containing magic numbers like "4034".  But we have no way to know.

Shame on you, zcoin, for bribing researchers into silence.

+1

That way the research can be cited in academic papers. Bribing researchers and then instituting a gag order doesn't reflect well on this project or its contributors. There is no logical reason for exploits on public testnet code to be suppressed.

What I find equally disturbing - the authors of MTP failed to cite Fabien Coelho's earlier work:
"An (Almost) Constant-Effort Solution-Verification Proof-of-Work Protocol based on Merkle Trees"
http://www.hashcash.org/papers/merkle-proof.pdf
2007

My team and I have been researching MTP and Fabien happens to be one of my colleagues. He's working on a paper covering MTP and unlike the "research" happening here, it will be made public.

[teknohog]

The constant last-minute changes to the PoW are just ridiculous at this point if you ask me.  Every time another one crops up MTP drops a few more notches further down my priority list.

This. IMHO, Zcoin's primary feature over other coins is the Zerocoin protocol, with its auditable supply being a notable difference from Zcash. This is what makes Zcoin great right now, not promises of some future hash algo.

[zcoinofficial]

It's not a gag order in any way. The idea for that restriction is that we have time to evaluate the proposals and to assess their legitimacy and see what can be done to fix them.

The last thing we want is FUD created from incorrect submissions or not being able to assess the submissions before publishing especially when only a small subset of people can evaluate the submissions.

There's no running away from it anyway since we already committed to release the information.

However to alleviate any suspicions we are releasing the two submitted bugs thus far both from Marc Bevand (@mrb) which are excellent spots but we are still verifying one of them and making sure we classify it properly.

We will regularly update the submissions on this Wiki page and I have updated our original blog post with it.

In view of the above, we would definitely be extending the GPU miner competition deadline which we will announce after consulting with our miner dev djm34 on what is a reasonable extension.

We really respect the work done by everyone involved in MTP and the whole purpose of the bounty competition which is self funded, is to encourage this.

[zcoinofficial]

However it would make more sense to have the miner contest end after the audit and implementation contests. Right now the miner contest ends on August 9th and the audit and implementation contests end on August 30th.

We agree with this and will make an announcement on the extension soon. Thank you!

Probably will be a sizeable extension.

[zcoinofficial]

The constant last-minute changes to the PoW are just ridiculous at this point if you ask me.  Every time another one crops up MTP drops a few more notches further down my priority list.

This. IMHO, Zcoin's primary feature over other coins is the Zerocoin protocol, with its auditable supply being a notable difference from Zcash. This is what makes Zcoin great right now, not promises of some future hash algo.

Indeed and Zerocoin is still being actively developed which we will deploy after this together with core upgrade.

[OldPaul]

 
I really like this project ! go on devs