ZKV presents...Privacy on Polkadot - Empowering dApps w Seamless Privacy + High Assurance- Deli Gong

Transcript

[Music] hey everyone uh this is silly i'm the co-founder of automata network uh thanks for the invitation from zero knowledge validator and thanks for having me here so we are based in singapore and we have been active in pogba ecosystem since 2020 and we are using substrate to decentralize our protocol in order to provide privacy services as middlewares to projects from many different chains so before i start the talk my my presentation let's start with some real world issues so everyone uses crypto for all sorts of things including voting swapping landing but all these activities are exposed

as a as a price of using public blockchains or if you can find a better term it's called a transparency however the traceability make it even worse whenever you interact with other addresses through transactions the links will be quickly created and everyone will know the association including the entire history of activities behind those addresses so sometimes people post awarding addresses on twitter to ask for air job or testing tokens in that case you should not really use it for other purposes anymore but if you're not careful enough and accidentally use the exposed address your unchain activity now gets linked to your real-world identity and you might be tracked forever

also there are various ways to avoid this this is something most of us must live with live with it now and that thing is mev which is minor extractor value and according to the dashboard from flashbot so at the moment in total hundreds of millions have been extracted in the past but today i would only talk about the information leakage behind it so why does uh mev happen so there's a clear mismatch between your user expectation and the reality so when user trade on decks they believe that the system should not reveal its trading actions before the transaction gets executed but that's not the case in reality so on current public blockchain the information got leaked in two places

manpool and miner so the public miner public mempool allows anyone in the world to see your unconfirmed transaction and people are trying to fix this by including a private mempool but that's bring that brings another set of trust issues on the miners remember remember that miners have that super power to read the incoming transactions and launch more powerful attacks such as reordering transactions and remember this uh this was a classic lie when the u.s senator asked zuckerberger that how's that facebook is free i guess we know the answer because it's not free and we are actually the product of it and the same thing happens for blockchain many people will think uh think of api services as free launch

but nothing is truly free so every day users and developers send billions of api calls to all kinds of api services and they are either hosted by third parties or backed by ongoing nodes and what happens behind thing is those api service or api gateways will get first-hand information of all incoming queries and you'll never know if they will collect the queries and learn from it to get information such as what is the most popular trading period what is the best trading strategy and if you are there to think whether there is any mev opportunity so the truth is as we are using these free services they are also taking something from us so as a team of many years of

experience in industry and research we're really trying to solve these issues in a practical way so autumn to network is a decentralized service protocol that provides middleware like traceless private services for d-apps on ethereum and polkadot and many other chains to achieve privacy high assurance and frictionless computation so our team has had many years of experience in blockchain industry and have done many research in the area of intel sgx oram and peer-to-peer systems we also completed a web3 grant and also selected into web3 bootcamp last year and recently we got into berkeley blockchain accelerator so here's our approach the oram is an

algorithm used to conceal the access patterns that can be used as a side channel to break the privacy of the applications even the application is run inside the secure black box like in incal sgx and it's an algorithm that has been studied for decades and is proven to be secure and correct to prevent this kind of excess pattern leakage and with this we build geode the computation node in our system to provide most practical privacy solutions for general computations that means we can do uh for example temple proof data sourcing for oracles from running prevention for dexas anonymous voting for uh dao and do not track indexing for different

index and server services and also uh developers can also build customized middleware services to enhance their the security and privacy of their own applications and also there's uh here's the detail breakdown of a single geode uh intel cx help us to create an isolated execution region called uncliff which will prevent anyone from accessing the data inside that so that also means even the node operator will not be able to see the data inside enclave and it turns the enclave into a trusted agent where user can just simply trust with the help of a so-called remote attestation process user can extend the trust from its local device

into a remote device hosted by other people and the communication between user and enclave is protected by industry standard end-to-end security practices and when the enclave needs to access some encrypted data outside the orm module comes into the play it turns a bunch of read or write operations into something appears completely random which will no longer make sense to the malicious observer running outside and this would assume the user that assured this would assure the user that the computation and storage operations are done by the jio is safe and no privacy is leaked so to recap a bit uh this is our approach on building the privacy

services so all the services can be integrated with existing d apps in a non-intrusive manner that means the app can just use it without with just near zero modifications and we are also building various services to enhance the privacy for all sorts of applications and the most important part is the service will have great compatibility as it's not built only for a particular chain it's basically a chain agnostic service platform okay and before i go uh this is the last thing i would like to share so i guess nobody thought good government matters until we have donald trump and we also think this matters to the blockchain world so we just launched witness

and often governance solution with privacy features it allows voters to precipit to participate in the governance without revealing their identity this is how it works so users just choose a proposal and sends the side vote to uh to witness and witness will just count the vote and then publish only the information that should be should be published so it will not include the information such as voters identity or number of votes they casted and it currently supports ethereum and binance marching and we will be adding more platform support as we develop such as our substrate-based chains and also there is a ching hook feature that's available for preview on the

kovan test and bsc test app it basically allows the proposal author to register a function to be triggered on chain once the voting is done so to summarize we are heading towards a practical way to realize weaponry with high assurance traces privacy and frictionless computation and that's all i have to share uh thanks again for having me here if you want to know more about us just go follow us on twitter or medium and we are actually also active actively looking for web developers and substrate developers just drop us a message if you are interested