1
00:00:01,960 --> 00:00:03,000
Okay.

2
00:00:03,400 --> 00:00:07,380
It looks like we are up and going.

3
00:00:07,660 --> 00:00:08,780
Hello, everybody.

4
00:00:08,780 --> 00:00:15,060
I know the title card said that I was going to be giving the closing speech, and that is still true.

5
00:00:15,160 --> 00:00:20,480
But we have one more talk before that, and that is by Ruben Yap from Zcoin.

6
00:00:20,520 --> 00:00:26,700
If you don't know Zcoin, it's a coin that's not Monero, so I don't know why he's at the Monero Village.

7
00:00:26,700 --> 00:00:30,740
He walked in one day, we took him off the street, and we raised him as our own.

8
00:00:30,740 --> 00:00:35,660
So he's going to give a talk about Zcoin and competition to Monero.

9
00:00:35,660 --> 00:00:39,000
So I hope everyone sticks around, because it's going to be some good stuff.

10
00:00:39,000 --> 00:00:40,760
Passing it over to you, Ruben.

11
00:00:40,840 --> 00:00:41,780
Take it away.

12
00:00:41,780 --> 00:00:42,480
Thank you.

13
00:00:42,940 --> 00:00:43,400
All right.

14
00:00:43,400 --> 00:00:44,240
Hello, everyone.

15
00:00:44,240 --> 00:00:45,420
My name is Ruben.

16
00:00:45,420 --> 00:00:49,000
I am the project steward of Zcoin.

17
00:00:49,180 --> 00:00:53,480
And basically what that means is, you know, I'm the caretaker of the project.

18
00:00:53,480 --> 00:00:56,620
So first of all, it's super early for me.

19
00:00:56,620 --> 00:00:57,840
It's 6 a.m.

20
00:00:57,840 --> 00:00:58,600
for me.

21
00:00:58,600 --> 00:01:02,740
And yeah, so if I'm a bit slow, please forgive me.

22
00:01:02,980 --> 00:01:12,560
And today we are going to talk about ditching op-in privacy to compete with Monero.

23
00:01:12,560 --> 00:01:15,740
And to be fair, I was put up to this topic.

24
00:01:15,740 --> 00:01:19,260
I had actually a less controversial topic to talk about.

25
00:01:19,260 --> 00:01:20,400
But here we go.

26
00:01:20,400 --> 00:01:21,340
All right.

27
00:01:22,340 --> 00:01:27,200
So, you know, what is exactly the privacy landscape right now?

28
00:01:27,200 --> 00:01:41,540
And, you know, it's pretty clear that Monero is the king, not just in market cap, but I guess in like overall privacy and the protection that it provides.

29
00:01:42,980 --> 00:01:46,060
And it's a lonely throne, right?

30
00:01:46,060 --> 00:01:52,880
And we're going to take a look at why that is the case and why what we at Zcoin are trying to do.

31
00:01:52,880 --> 00:02:01,020
So, you know, this is a little table that I built.

32
00:02:01,400 --> 00:02:04,040
Some may or may not agree with me.

33
00:02:04,040 --> 00:02:13,240
But as you can see, you know, Monero almost scores really highly in many of the stuff that kind of matters as a privacy coin.

34
00:02:13,240 --> 00:02:20,460
You know, first of all, you have like the theoretical privacy level, which is, you know, maybe how good is your privacy technology?

35
00:02:20,460 --> 00:02:30,960
And although it's kind of long in the tooth, in my personal opinion, RingCT does offer a decent amount of privacy just out of the box.

36
00:02:31,000 --> 00:02:48,020
But of course, because, you know, everything is on by default, you know, with staff addressing and in a very high compliance, there is a very high practical privacy level because you're mixing with, you know, lots and lots of different inputs and outputs.

37
00:02:48,020 --> 00:02:59,260
It has the team, you know, you have the awesome people at Monero Research Labs who are, you know, conducting independent research full time.

38
00:02:59,260 --> 00:03:06,120
It does have recently just added, you know, network layer privacy through Dandelion and it has very high liquidity.

39
00:03:06,120 --> 00:03:11,420
And this is actually also important, I guess, liquidity and also transaction volume, right?

40
00:03:11,420 --> 00:03:17,080
Because in privacy, you know, anonymity likes a crowd.

41
00:03:17,420 --> 00:03:27,840
And obviously, the more people using your platform and the more people trading it, you can transfer value through it and there are more transactions to kind of hide within.

42
00:03:27,840 --> 00:03:32,900
So that's also actually an important metric as well, beyond just the technicals.

43
00:03:32,900 --> 00:03:38,300
So, you know, this is like, you know, everyone talks about Monero and then, well, what about Zcash?

44
00:03:38,300 --> 00:03:42,340
Why do you say that Monero is kind of alone on the throne, right?

45
00:03:42,480 --> 00:03:45,360
And Zcash has really interesting technology.

46
00:03:45,360 --> 00:03:48,460
You know, they have the highest theoretical privacy level.

47
00:03:48,460 --> 00:03:51,880
It's like 2 to the power of 32 or something like that.

48
00:03:51,880 --> 00:03:56,360
You know, they have independent research and really good researchers.

49
00:03:56,360 --> 00:04:07,960
I don't think they have network layer privacy and they have, you know, pretty decent liquidity in terms of exchanges and also an okay number of transactions that's happening on chain.

50
00:04:07,960 --> 00:04:14,880
But the practical privacy level is actually really low because very, very few people use their shared transactions.

51
00:04:14,880 --> 00:04:17,120
And we'll talk a little bit about that.

52
00:04:17,860 --> 00:04:23,280
Zcoin, you know, we use a kind of a different kind of a zero knowledge proofs to Zcash.

53
00:04:23,360 --> 00:04:32,720
I do feel that we offer theoretically a high privacy level, especially as we transition to our new privacy protocol, which we will talk a bit later.

54
00:04:32,720 --> 00:04:38,520
But again, because we use op-in privacy and we'll see how bad this is actually that has panned out.

55
00:04:38,520 --> 00:04:40,960
The practical privacy level is really low.

56
00:04:40,960 --> 00:04:42,840
We do have our own independent research.

57
00:04:42,840 --> 00:04:45,420
We have network layer privacy through Dandelion.

58
00:04:45,420 --> 00:04:49,040
And okay, our liquidity is fair, our transactions are decent.

59
00:04:49,040 --> 00:05:10,600
Of course, there are all these other competitors, especially in like Bain, Green, you know, because whether you agree with me, it's a bit difficult to say whether they have independent research because they don't quite have cryptographers, but they are implementing some unique takes on a certain type of protocols.

60
00:05:11,060 --> 00:05:17,640
But, you know, I would say that, you know, basically the main guys are Monero and Zcash.

61
00:05:17,640 --> 00:05:20,160
Of course, they are like the Z2Z folks.

62
00:05:20,160 --> 00:05:28,860
I think the most famous one would be something like Pirate Chain, which is using ZK-SNARK with like full mandatory privacy.

63
00:05:28,860 --> 00:05:39,960
And although they offer very high theoretical privacy level, their practical privacy level is only probably medium only, just because so few people are using them.

64
00:05:39,960 --> 00:05:47,080
There are so few places to actually use them, exchange them and everything that the crowd is very, very small.

65
00:05:47,080 --> 00:05:50,400
So the theoretical privacy is high, the liquidity is really low.

66
00:05:50,400 --> 00:05:55,860
And of course, with Zcash and all that ZK-SNARK, you have all that issue with trusted setup.

67
00:05:56,520 --> 00:06:17,020
And I think the best way to kind of illustrate, you know, the difference between theoretical privacy versus practical privacy is that, you know, the Zcash on paper has the best privacy technology, just if you just look at the anonymity set, because it's not mandatory.

68
00:06:17,020 --> 00:06:20,460
I don't know what's the exact percentage, but it's super low.

69
00:06:20,460 --> 00:06:33,480
And because of that, timing attacks and people having to be very careful about how they properly use shielded transactions or Z2Z transactions for proper privacy becomes really tough.

70
00:06:33,480 --> 00:06:48,360
And there was actually this fellow, I think just like one month ago, just one month ago, like a couple of weeks ago, he was like saying, ah, you know, Zcoin's Zcash privacy is the best.

71
00:06:48,360 --> 00:06:55,400
And they're saying, you know, he offered a reward of $100 and he said, this is my TX ID.

72
00:06:55,400 --> 00:06:57,340
He gave a TX ID.

73
00:06:57,360 --> 00:07:04,560
And so he did give some additional information and he said, please trace which T address that I came from.

74
00:07:04,560 --> 00:07:10,840
And this guy just from Brian just posted this random T address within a day.

75
00:07:10,980 --> 00:07:14,900
And you know, he asked, how did you do it?

76
00:07:14,900 --> 00:07:16,160
And it was very simple.

77
00:07:16,160 --> 00:07:18,640
All he did wasn't any sort of rocket science.

78
00:07:18,640 --> 00:07:23,460
It's just, there's not some advanced guy like Chainalysis or stuff like that.

79
00:07:23,460 --> 00:07:34,940
This was just some random Twitter dude, just went on the Explorer and was looking for a transaction that was shielding it and just guess.

80
00:07:34,940 --> 00:07:39,640
And that's the problem because so few people are using it.

81
00:07:39,640 --> 00:07:42,620
And again, secondly, using it correctly.

82
00:07:42,620 --> 00:07:54,580
It was very easy to kind of guess that this was the T address that actually made this shielded address payment.

83
00:07:54,580 --> 00:08:10,720
So yeah, this is kind of like a really good illustration of how, you know, he put low usage of the privacy technology and also the way that the setup that makes it hard for newbies to use privacy correctly.

84
00:08:11,520 --> 00:08:23,720
And I do think that, you know, like in my personal view, one of the things that Monero does right is that because it's privacy on by default, it's all, there's only one way to do a transaction.

85
00:08:23,780 --> 00:08:31,740
So like newbies have a lot of that complexity, you know, kind of abstracted out rather than having to go through several steps.

86
00:08:31,740 --> 00:08:34,480
And, you know, this is also a problem with Bitcoin.

87
00:08:34,480 --> 00:08:35,380
How do I use it?

88
00:08:35,380 --> 00:08:44,640
I go through Wasabi, I go through this, I go through that, you know, privacy should be simple so that, you know, everyone can be protected.

89
00:08:45,640 --> 00:08:53,520
So the way, for those of you who don't know what Zcoin is, the way our privacy works is kind of different than let's say Monero.

90
00:08:53,520 --> 00:09:02,480
And I guess the basic idea is that you can destroy coins, and then you can redeem them for brand new ones with no previous transaction history.

91
00:09:02,480 --> 00:09:08,980
So it's kind of like, you know, you have these coins with all this transaction history, and then you destroy them.

92
00:09:08,980 --> 00:09:16,620
And at any time in the future, you kind of present a zero knowledge proof that you didn't burn the coins.

93
00:09:16,780 --> 00:09:21,940
And that allows you to redeem brand new coins with no previous transaction history.

94
00:09:21,940 --> 00:09:28,300
And the beauty of the zero knowledge proof is that you don't have to show the exact kind of coins you burned.

95
00:09:28,300 --> 00:09:34,100
This is what preserves the privacy, rather like the source of the funds.

96
00:09:34,300 --> 00:09:38,860
And now with our Lelantis version 2, you don't even need to redeem them for brand new coins.

97
00:09:38,860 --> 00:09:42,900
You can actually pass the right to redeem to someone else.

98
00:09:42,900 --> 00:09:55,840
Like let's say I don't want to redeem and show that brand new coins, I can give this, like if I burn 10 coins, I can say I pass the right of redemption of 5 coins to someone else, and they can redeem it at their pleasure.

99
00:09:55,840 --> 00:09:59,140
Or they can just pass that right to redeem to someone else again.

100
00:09:59,660 --> 00:10:07,040
And this is, I guess, almost like equivalent to a Z to Z transaction because it hides both amounts and source as well.

101
00:10:07,040 --> 00:10:17,920
And the wonderful thing about our zero knowledge proof technology is that there's no trusted setup and it's using standard cryptographic assumptions.

102
00:10:18,320 --> 00:10:34,540
This kind of setup is, I think, also using quite similar cryptography that is being looked at by Monero Research Labs in Arcturus and Tritech, but it's just that the way that we use it with this burn and redeem mechanism is slightly different.

103
00:10:34,540 --> 00:10:37,020
And there's certain advantages to that.

104
00:10:37,920 --> 00:10:48,600
So, you know, our argument is that this is a better privacy method because, you know, we're not kind of like just... we're not just kind of hiding the crowd.

105
00:10:48,600 --> 00:10:54,760
And the way I always kind of explain it is kind of like farts in a lift or, you know, sands on the beach, right?

106
00:10:54,760 --> 00:11:00,500
Where if I'm the only person in the lift and I fart, everyone knows that it's me.

107
00:11:00,640 --> 00:11:03,020
With Monero, you guys are a bit more sadistic.

108
00:11:03,020 --> 00:11:06,420
You drag 10 other people into the lift with you and you fart.

109
00:11:06,420 --> 00:11:12,960
So that it's not clear who's farted, you know, which among the 11 people farted.

110
00:11:13,040 --> 00:11:22,180
Or with the really sadistic people like MimbaWimba, it's kind of like dragging everyone who wants to fart and we all fart at the same time.

111
00:11:22,180 --> 00:11:24,040
So it's not clear who's farted.

112
00:11:24,040 --> 00:11:27,040
And that's, I guess, similar with CoinJoint as well.

113
00:11:27,040 --> 00:11:33,940
The way we see our technology is that I go into the lift, I let out a fart and I make it disappear.

114
00:11:34,660 --> 00:11:41,660
And then I can choose at any time in the future to make that fart appear.

115
00:11:41,800 --> 00:11:53,220
And we feel that this is a better privacy approach because now your plausible deniability is anyone who actually ever entered that lift rather than the people that you are in the lift together.

116
00:11:53,220 --> 00:11:59,280
And, you know, this kind of privacy mechanism, I feel, holds a lot of promise as well.

117
00:12:00,900 --> 00:12:05,460
So let's talk about, you know, we've been around since 2016.

118
00:12:05,920 --> 00:12:10,820
And we used something called Zerocoin before, which is why we call it Zcoin.

119
00:12:11,200 --> 00:12:17,340
But we actually transitioned to a... Zerocoin did have a trusted setup, but Sigma does not have a trusted setup.

120
00:12:17,340 --> 00:12:21,900
And we transitioned to that at the end of 30th of July 2019.

121
00:12:21,900 --> 00:12:27,320
So it's almost been about a year plus.

122
00:12:27,440 --> 00:12:31,280
And it has been completely opt-in privacy.

123
00:12:32,080 --> 00:12:34,220
So how has this gone?

124
00:12:34,220 --> 00:12:44,200
You know, this was actually kind of an experiment because previously even with Zerocoin, the way to do the privacy was kind of cumbersome.

125
00:12:44,200 --> 00:12:45,840
So not many people were using it.

126
00:12:45,840 --> 00:12:48,440
With Sigma, we really simplified the process.

127
00:12:48,440 --> 00:12:57,260
You just press the number amount that you want to anonymize rather than selecting individual denominations and just go, bam, it's anonymized.

128
00:12:57,260 --> 00:13:04,400
So we actually wanted to see, you know, whether this would encourage better use of the privacy protocol.

129
00:13:04,400 --> 00:13:14,340
But only 500,000 Zcoin has gone through Sigma since the launch of Sigma in 30th of July 2019.

130
00:13:14,340 --> 00:13:23,060
And that's, I don't know, I think 4.6% of the entire circulating Zcoin that has gone through the system.

131
00:13:23,060 --> 00:13:37,640
Now, if you take a look at the figures on the left, so what Mint is like, how many total has Mint and how many total has been redeemed, spent, which is what it is.

132
00:13:37,640 --> 00:13:56,160
And I guess I would say that if you just look at the denominations within themselves, the anonymity set for like the set of 100 is anywhere between 217 to 4,269 per transaction that when you do that spend.

133
00:13:56,160 --> 00:14:03,380
So it's not bad, but you know, actually the potential of this technology is also a lot higher.

134
00:14:03,480 --> 00:14:14,000
And so that means this is with such a low usage of Sigma transactions, you can get this kind of, I guess, anonymity sets.

135
00:14:14,000 --> 00:14:28,800
Obviously, it's still not ideal, you know, but I guess it kind of illustrates the difference between what we call like burn and redeem mechanisms and decoy systems where you're always constantly having to find people to mix with you.

136
00:14:28,800 --> 00:14:34,620
Because like in the Lyft example, you're constantly finding people to drag people into the Lyft with you.

137
00:14:34,620 --> 00:14:48,320
But because we use the usage of fixed denominations, we have to burn and redeem in the fixed denominations, this actual anonymity set may not be as large as people think of it because there are certain patterns.

138
00:14:48,320 --> 00:15:04,380
So if people burn a 0.5, a 10, a 25, you know, and then next thing they redeem a 0.5, a 10, a 25, your anonymity set is not just, it's not like 121 and a 25, it's actually the combination of those things.

139
00:15:04,380 --> 00:15:13,640
So that actual anonymity set can be a lot lower than, you know, so-called just based on the statistics.

140
00:15:15,140 --> 00:15:17,820
So what are we doing to fix this, right?

141
00:15:17,820 --> 00:15:20,820
And this is where Lelantis kind of comes in.

142
00:15:20,820 --> 00:15:35,940
Lelantis is our new privacy protocol set to go live for the first version, probably at the end of the, I guess the beginning of October-ish.

143
00:15:35,940 --> 00:15:44,020
We're going to probably release the binaries around then and then have it live in one month or so or right after that.

144
00:15:44,020 --> 00:15:51,180
Now the beauty of Lelantis is that it can support pretty large anonymity sets.

145
00:15:51,180 --> 00:16:01,260
Of course, probably not in the range of Zcash, which is like 2 to the power of 382, but we're looking at sets of like 64,000, which isn't bad.

146
00:16:01,260 --> 00:16:09,100
And we probably can even bring it like one order of magnitude higher with some small improvements as well.

147
00:16:09,100 --> 00:16:10,500
It has no trusted setup.

148
00:16:10,500 --> 00:16:16,560
It uses a ZKP code, one out of many proofs, which I think is also the basis for Strippage.

149
00:16:16,700 --> 00:16:20,460
And we will be using this finally.

150
00:16:20,460 --> 00:16:23,820
We're going to be using it privacy on by default.

151
00:16:23,860 --> 00:16:33,300
That means all official wallets will be using, like, anonymizing funds by default so that users don't really have to care too much.

152
00:16:33,300 --> 00:16:44,620
But there is still the option to opt out, and we'll probably talk a bit about why we chose that mode to transition into the privacy.

153
00:16:44,620 --> 00:16:58,480
The Cryptolibrary was just completed this audit with Trail of Bits, which was actually funded through crowdfunding using the Zerocoin crowdfunding system, which was definitely a fork of the Monero CCS.

154
00:16:58,480 --> 00:17:02,720
And the cryptographic paper is being audited by Dmitry Kovratovich.

155
00:17:02,720 --> 00:17:13,360
And as you can see, you know, it is, of course, you know, some may argue that the Monero's anonymity set size isn't actually 11 because of the way things combine together.

156
00:17:13,360 --> 00:17:15,740
But let's just take it at face value.

157
00:17:15,740 --> 00:17:21,900
This is kind of, you know, I think this is a good overview of what the technology does.

158
00:17:21,900 --> 00:17:22,780
All right.

159
00:17:23,960 --> 00:17:27,720
Now, OK, we have five more minutes.

160
00:17:27,720 --> 00:17:33,840
So just to kind of understand, like, how are we actually deploying Lelantis privacy, right?

161
00:17:33,840 --> 00:17:42,860
The phase one, as I said, that is happening in October this year gives the ability to burn and redeem without no fixed denominations.

162
00:17:42,860 --> 00:17:43,040
Right.

163
00:17:43,040 --> 00:17:44,960
You can burn any arbitrary amount.

164
00:17:44,960 --> 00:17:50,100
You can redeem any arbitrary amount, even like a partial amount of what you burnt.

165
00:17:50,240 --> 00:17:50,480
Right.

166
00:17:50,480 --> 00:17:53,940
All official wallets will anonymize funds by default.

167
00:17:54,200 --> 00:17:55,480
There's no new address structure.

168
00:17:55,480 --> 00:17:57,420
We still use the same address structure.

169
00:17:57,500 --> 00:18:10,940
But of course, there's still the opt-out to use transparent because right now, I mean, realistically, you know, we are a smaller coin and, you know, exchanges, they're not going to reinvent everything for us.

170
00:18:10,940 --> 00:18:20,800
All the existing integrations that we want, all the certain parts of infrastructure does rely on transparent addresses, transparent funds.

171
00:18:20,800 --> 00:18:27,480
So we cannot straight away opt-out, especially with a new addressing system for Lelantis.

172
00:18:27,540 --> 00:18:36,000
And we also want to make sure that we have our mobile SDK so that, you know, mobile wallets can also do all these Lelantis transactions as well.

173
00:18:36,000 --> 00:18:45,880
We actually do have a privacy on by default mobile wallet maybe coming in the next few weeks for Sigma privacy, not Lelantis.

174
00:18:45,880 --> 00:18:53,420
And because there's still no second address structure, there's the requirement to redeem all the time.

175
00:18:53,420 --> 00:18:56,300
Some timing attacks are still possible in phase one.

176
00:18:56,300 --> 00:18:59,840
Phase two is when it gets really interesting.

177
00:18:59,920 --> 00:19:08,640
And that is coming, I would say, maybe sometime in 2021, maybe the second quarter or first quarter, maybe, right?

178
00:19:08,680 --> 00:19:19,200
And it introduces direct anonymous payments where, as I was saying, I don't have to redeem the coins, I can pass that right to redeem to someone else, even partially.

179
00:19:19,260 --> 00:19:21,060
Amounts and sources are all hidden.

180
00:19:21,060 --> 00:19:28,720
And I do think that the privacy offered is really, really high, especially when you see how we implement anonymity sets.

181
00:19:28,720 --> 00:19:34,280
And we introduced a new Lelantis addressing system.

182
00:19:34,460 --> 00:19:38,360
I guess like if you have Zcash, it's almost like a shielded address system.

183
00:19:38,360 --> 00:19:43,840
And what we're going to do is make that the default for all our official wallets.

184
00:19:43,840 --> 00:19:53,660
Now, once we have this addressing system, I think then it's a good time to actually start talking about mandatory privacy.

185
00:19:53,660 --> 00:19:55,380
That means there's no op-out.

186
00:19:56,340 --> 00:20:04,000
There are still some things that we kind of need to figure out because we are being integrated into DeFi.

187
00:20:04,000 --> 00:20:08,460
I know Monero guys hate the word DeFi because it's been bandied around a lot.

188
00:20:08,460 --> 00:20:20,700
But, you know, we see value in being integrated into stuff like Uniswap to be able to trustlessly do the decentralized exchanges or the use collateral.

189
00:20:20,700 --> 00:20:23,840
We want to make Zcoin, I guess, more useful, right?

190
00:20:23,840 --> 00:20:39,500
And certain other things like proving times, like for an individual users that's making like a transaction, you know, personal transactions, a few transactions a time, the proving times of like, yeah, one second, two seconds isn't so bad.

191
00:20:39,960 --> 00:20:51,540
But if you let's say you're an exchange and you have to send hundreds of transactions, we sometimes we don't know how exchanges would react to that.

192
00:20:51,540 --> 00:20:57,140
So there are certain improvements in the pipeline that can actually reduce proving time by an order of magnitude.

193
00:20:57,140 --> 00:21:02,400
We actually have a paper out for that called Hierarchica, one of many proofs.

194
00:21:02,400 --> 00:21:05,000
But it has to be adapted for Lelantis.

195
00:21:05,000 --> 00:21:17,080
And we're also looking for instancing solutions where, you know, I can use a ZKP to kind of get the entire state of Zcoin.

196
00:21:17,080 --> 00:21:22,180
And also the Lelantis like anonymity sets.

197
00:21:22,280 --> 00:21:30,080
So, you know, to improve usability, to encourage the use of Lelantis or else it'd be just too cumbersome and no one would want to use it.

198
00:21:30,080 --> 00:21:31,480
So this is our current plan.

199
00:21:31,480 --> 00:21:36,840
And hopefully, you know, we can finally move to privacy on by default.

200
00:21:36,840 --> 00:21:48,120
But, you know, there are still some open stuff, but we do want to move to privacy on by default with OpOp definitely for sure at the end of this year.

201
00:21:48,120 --> 00:21:49,540
I mean, October-ish.

202
00:21:49,540 --> 00:21:53,920
And then we slowly start pushing to mandatory privacy.

203
00:21:54,020 --> 00:21:56,600
And we feel that's really going to be important.

204
00:21:56,600 --> 00:22:09,400
Now the last thing I want to talk is about anonymity sets because I will, you know, people are saying like, well, you know, what do you mean by you only have an anonymity set of 64,000, right?

205
00:22:09,400 --> 00:22:23,820
So kind of think about past 64,000, because of the limitations of the technology of Lelantis right now, stuff starts to take increasingly longer and longer.

206
00:22:24,760 --> 00:22:31,280
So that means both proving time and verification time start getting quite a bit more.

207
00:22:31,280 --> 00:22:41,820
So we kind of decided to say to cap that set of 64,000 so it does not grow so that the performance would still be acceptable.

208
00:22:41,820 --> 00:22:55,080
Now, let's assume that with privacy on by default, with transparency, we have a very, very low estimate of 30% of transactions that are anonymized with current transaction volume.

209
00:22:55,180 --> 00:23:02,380
And that will mean to hit that set of 64k would take about, you know, slightly less about like two thirds of a year.

210
00:23:02,520 --> 00:23:05,420
And that's assuming about 800 transactions per day.

211
00:23:05,420 --> 00:23:10,680
Obviously, if the usage of Zcoin picks up, we're going to see this field a lot faster.

212
00:23:12,120 --> 00:23:19,680
And I guess one of the interesting things is that what happens when the set of 64,000 is filled?

213
00:23:19,680 --> 00:23:21,380
Am I going to start from zero again?

214
00:23:21,380 --> 00:23:28,620
That's obviously a really bad thing because that means for that period of time, did I start a new set?

215
00:23:28,620 --> 00:23:32,500
The people using that new set gets very, very little anonymity, right?

216
00:23:32,500 --> 00:23:48,560
So we do something what we call a sliding window approach, which is quite clever, where we actually kind of start new anonymity sets with kind of preceded with at least 16,000 commitments that have came from the previous set.

217
00:23:48,560 --> 00:24:01,540
And because of the nature of zero-knowledge proofs, where even though you prove that you burnt the coins, no one really knows how much of it actually has been redeemed or rather which one has been redeemed.

218
00:24:01,540 --> 00:24:06,380
So you can always take those commitments and place it in a new one.

219
00:24:06,380 --> 00:24:11,980
Okay, from this 16,000 that I'm preceding, how many of them has been used?

220
00:24:11,980 --> 00:24:13,740
There's no idea for that.

221
00:24:13,740 --> 00:24:27,280
So what that means is that once the first set has been seeded, or even the first 16K, the minimum anonymity set for Lelantis never falls below 16,000.

222
00:24:27,280 --> 00:24:30,020
So it's from 16,000 to 64,000.

223
00:24:30,020 --> 00:24:42,180
So we think that's really good and kind of illustrates one of the benefits of doing this burn and redeem method, rather than compared to Monero, which are just building really, really large rings.

224
00:24:42,180 --> 00:24:47,800
I think with Triptych, it's like rings of like 100 or so, if I'm not mistaken.

225
00:24:48,470 --> 00:25:11,540
So yeah, this kind of like ends my brief introduction of kind of illustrating why we think that our moving into privacy owned by default, combined with the Lelantis technology would really give, you know, rather than like kind of like just saying that we're a privacy coin,

226
00:25:11,540 --> 00:25:11,740
right?

227
00:25:11,740 --> 00:25:15,720
Like Zcash, you know, they have all this amazing technology that no one is using.

228
00:25:15,720 --> 00:25:16,700
And you're like, why?

229
00:25:16,700 --> 00:25:21,220
You know, how can you call yourself a privacy coin if no one's using your privacy, right?

230
00:25:21,640 --> 00:25:25,020
And it's not as if Monero's technology is the best.

231
00:25:25,100 --> 00:25:29,640
It isn't, you know, even I don't know if everyone would agree with that.

232
00:25:29,640 --> 00:25:37,200
It's just more about the overall package and because everyone is using the transactions that makes it as an overall package the best.

233
00:25:37,200 --> 00:25:49,920
But if let's say Zcoin moves towards privacy owned by default, and we get significant traction with our privacy protocols, we make it very difficult for users to mess up and to review their privacy.

234
00:25:49,920 --> 00:26:01,940
I do think that, you know, I do feel that Lelantis and together, both practical and theoretical kind of come together and really can pose a challenge to Monero.

235
00:26:01,940 --> 00:26:12,380
And I hope to see that because I do think that this space really needs better privacy protocols because, you know, Mimba Wimba doesn't cut it.

236
00:26:12,380 --> 00:26:21,740
So yeah, I'm not sure how to go about... I'll end this sharing of the screen.

237
00:26:21,740 --> 00:26:24,820
And does anyone have any questions?