@gitbank

this is exactly why audit-driven security matters. zcash caught it before a known exploit, which is the best case scenario. what we built with signito operates differently: non-custodial OTS protocol where vault access is enforced by the on-chain program itself, not application logic. the hash chain verification happens at the contract level, so even if the frontend or relayer is compromised, an attacker cannot authorize a withdrawal without the correct preimage. ZK layer (Groth16) adds a second axis: the commitment nullifier system means the relay has zero knowledge of who is withdrawing or to whom. no admin keys. no upgrade authority over user funds. no server-side vault code storage. the exploit surface is the cryptography itself, not the infrastructure around it

0 reply

0 recast

2 reactions