http://shadow.cash/downloads/shadowcash-anon.pdf
Abstract - We introduce Shadowcash, an anonymous cryptographic transaction protocol: Anonymous transactions are implemented using traceable ring signatures, which utilise a noninteractive zero knowledge proof.
We just added their coin to our exchange after pushing them to make more of it open source. The code is interesting. It will be interesting to see if it works as expected.
Be careful when adding coins with new tech that haven’t been vetted. For example, if a coin has a defect that allows double-spends, and this one might, your exchange could be attacked as follows:
This leaves your exchange without the BTC, and nothing to show for it.
We are very careful about the coins we add, we requested to see the source code before adding it. The reason they released so much was because we kept requesting more.
After our review we believe the code will work.
We are aware of the risks involved, it would only affect people trading for SDC. We assume they understand the risk of the SDC anonymous system failing before trading.
I appreciate the feedback regardless, if anything it may make others aware of the risks.
But would my outlined attack above affect the exchange directly?
If for example SDC was vulnerable to a double spending bug, the attacker could only sell for BTC. So the attacker could clear the order book and remove that BTC amount that was on the SDC from the exchange.
If the attacker rolled back their deposit, only our SDC would be insolvent. If a user used our exchange and did not participate in the SDC exchange they should not be at risk.
But if I’m missing something please clarify, I appreciate the input.
You’re on the right track. It sounds like you would plan to seize users’ SDC if you are attacked. I guess that’s one option, but I was thinking that the exchange would pay for damages, and instead of taking the SDC from users who were not involved in the attack. Either way, it would be pretty bad for reputation. This sort of thing has happened to other exchanges with other coins.
Sounds like you’ve done your research on the source code for this coin. Good thinking.
Zeroknowledge proofs are big. Does anyone know the size of the SDC blockchain so far?
Our developers are in different time zones, so we have decided to try to have someone watching the logs and watching the news at all times over the next few days to react immediately in case there is an issue.
If there was an attack, it would likely be staged on Bittrex since their volume is much greater. If they did attack our users we would cover much as their loses as we could afford.
We did code review and we believe it is safe, but only time will tell.