Buck

@rollbit

344 Following

4321 Followers

Buck pfp

nyc beautiful this time of year 😮

0 reply

0 recast

6 reactions

Buck pfp

again would love to dig in further on tg if you are interested cc: @garrett

1 reply

0 recast

1 reaction

Buck pfp

re: how much more / less secure are they than a traditional multisig? a hardware wallet? This is explained above but leveraging TEE’s to handle all sensitive actions takes the risk of Private Keys being sniffed and compromised (sometimes for a long period without folks knowing). I will note people also choose to set up Turnkey as a multisig as well as use Turnkey as a signer in multisig setups with other providers :) re: what about once you export the private key (switching service providers or they go out of business)? Definitely no issue with exporting the private key — we use encryption to allow for secure transfer of the key out of the enclave. That being said, once the key is exported it obviously no longer has the guarantee that it has never been exposed outside of the enclave.

1 reply

0 recast

1 reaction

Buck pfp

Remote attestation can be used to verify that the code we think is running is what’s ACTUALLY running at any point in time. Finally, a big advantage is that you hold authenticators (not private key material) that are gated by our policy engine — this allows you to tightly scope access (e.g., allowed contract calls, multi-party approvals, etc.), and even roll the authenticators if they’re ever exposed. All in this gets you a very holistic security model, high performance (2000+ TPS, 50-100ms signging latency), and a ton of flexibility in your implementation that you wouldn’t have elsewhere. Turnkey is really the only option on the market that makes sense for high value use cases.

1 reply

0 recast

1 reaction

Buck pfp

Think there is a very large convo and happy to DM on telegram (@buckontelegram). Would recommend checking out http://whitepaper.turnkey.com for the full debrief of our approach! Biggest call-out here is that Turnkey leverages TEE’s to protect ANY sensitive actions that could touch funds (e.g., tx parsing, policy evaluation, auth) & is not soley focused on protecting the private key. This ensures a much more holistic model & helps avoid ByBit-style MITM attacks. We also leverage our custom OS, QuorumOS (QOS), for deployments into these enclaves, which eliminates single points of failure by ensuring that a quorum of Turnkey Operators is required for any deployment. We’ve built these applications to be verifiable down to the builds.

1 reply

0 recast

2 reactions

Buck pfp

8 replies

1 recast

21 reactions

Buck pfp

0 reply

0 recast

3 reactions

Buck pfp

ya could sell vapes too

0 reply

0 recast

1 reaction

Buck pfp

2 replies

0 recast

8 reactions

Buck pfp

if you’re on twitter pivot to farcaster

2 replies

1 recast

13 reactions

Buck pfp

i am sending help

0 reply

0 recast

0 reaction

Buck pfp

Hello is anyone in here? Is anyone in this app? I am posting a voice memo from a whiskey bar right now. I’m just checking if anyone is inside of this app here.

2 replies

0 recast

2 reactions

Buck pfp

sometimes i even make up little stories to tell myself about why and how my bags will go up

2 replies

0 recast

0 reaction

Buck pfp

the future and of finance

1 reply

0 recast

1 reaction

Buck pfp

or those who let the joke go over their head ;)

1 reply

0 recast

1 reaction

Buck pfp

are people still mewing these days?

0 reply

0 recast

0 reaction

Buck pfp

kaito is scary because people may start tweeting disingenuously about crypto

3 replies

1 recast

6 reactions

Buck pfp

they make me come back to farcaster now

0 reply

0 recast

7 reactions

Buck pfp

0 reply

0 recast

1 reaction

Buck pfp

on a plane has anyone ever traveled? lmk please 🙏

1 reply

0 recast

3 reactions