Image: December cover by @Exitus
Dear readers, sorry for taking so long to complete this December issue. In recent months, finding time to work on the Journal has been a big challenge. We are discussing an overhaul of DJ to optimize our efforts. I hope this issue still has unique and useful information for you. Happy reading! – @bee
Highlights of December:
Two proposals have been approved, for continuing the Bug Bounty program and Video Content creation in 2024.
Two new mining pools have launched, but data suggests mining is becoming more centralized again.
Wallet apps and Bison Relay are getting polished for their next releases, Cake integration is ongoing.
Contents:
The work reported below has the “merged to master” status unless noted otherwise. It means that the work is completed, reviewed, and integrated into the source code that advanced users can build and run, but is not yet available in release binaries for regular users.
dcrd is a full node implementation that powers Decred’s peer-to-peer network around the world.
Developer and internal changes:
cfilter
version 1 messages as deprecated in the wire
package. This is just general cleanup, since V1 cfilter
messages are already invalid. V2 cfilter
messages have been the standard since DCP-5 activated in Jan 2020.In progress:
wire
protocoldcrwallet is a wallet server used by command-line and graphical wallet apps.
User-facing changes:
Internal and developer changes:
getHeaders
to run unnecessarily often, especially for devs simulating large reorgs with side chains.In progress:
vspd is server software used by Voting Service Providers. A VSP votes on behalf of its users 24/7 and cannot steal funds.
dcrpool is server software for running a Decred mining pool.
GetTxOut
method can’t find an output for a given transaction.dcrlnd is Decred’s Lightning Network node software. LN enables instant low-cost transactions.
cspp is a server for coordinating coin mixes using the CoinShuffle++ protocol. It is non-custodial, i.e. never holds any funds. CSPP is part of StakeShuffle, Decred’s privacy system.
flint
(released October 2023). Newer versions of flint
may provide performance and other improvements to the CSPP server.DCRDEX is a non-custodial, privacy-respecting exchange for trustless trading, powered by atomic swaps.
Changes backported to the next v0.6.x release:
Market maker bots:
General client changes:
Other:
In progress highlights:
Cryptopower is a multi-coin desktop GUI wallet for DCR, BTC, and LTC. It runs in a privacy-preserving light SPV mode without needing full blockchains, supports Decred staking, mixing, voting, and other unique features.
Newly implemented UI elements:
Trading:
DEX trading:
Privacy:
default
account will be allowed.Mobile UI implementation, the following pages have been updated/fixed for mobile screens:
Fixes:
Internal and developer changes:
In other news:
Image: Cryptopower will support trading via the privacy-friendly Trocador.app
Image: Cryptopower is adding a lightweight UI for trading on DCRDEX
Image: Cryptopower getting ready for mobile screens
In progress:
main
branch.dcrweb is the source code for the decred.org website.
Image: Four wallet choices reflect a lot of development going on but users need guidance to find what’s best for them
Bison Relay is a new social media platform with strong protections against censorship, surveillance, and advertising, powered by the Decred Lightning Network.
Work listed below has been merged to master
towards the next release.
Changes in both GUI and text apps:
Changes in the GUI app:
Text-based app (brclient):
/invite
meta-command.Internal and developer changes:
Community stats as of Jan 14* (compared to Dec 3):
* Due to the late snapshot taken on Jan 14 (Jan 9 for YouTube) the deltas represent ~1.5 months instead of the usual 1-month period.
** Decred’s YouTube channel has more than 300 videos now!
In December the new treasury received 7,467 DCR worth $119K at December’s average rate of $15.89. 8,427 DCR was spent to pay contractors, worth $134K at same rate.
A treasury spend tx was approved with 99.5% Yes votes and 58% turnout, and mined on Dec 19. It had 29 outputs making payments to contractors, ranging from 7.5 DCR to 2,182 DCR. Most of this DCR was likely paid for October and November work. Estimating the average billing exchange rate for the two months at $13.54, the billed amount in this TSpend represents around $114K USD equivalent.
As of Jan 1, combined balance of legacy and new treasury is 870.9K DCR (15.7 million USD at $17.98).
Image: Treasury inflows and outflows in DCR
Image: Treasury monthly balance in USD; note that it heavily depends on the exchange rate
Two proposals were submitted and approved in December:
Bug Bounty Program 2024 by @jholdstock requested a budget of $105,000, split between $100,000 for bounty payments and $5,000 for administrative costs. In practice, only a small fraction of the requested budget has been used in previous iterations. The proposal reported that the expenses for the last 18 months were $415 paid for bounties and $1,750 for the operations. Overall the program has spent around $11K since its launch in 2019. The proposal has been approved with 98% Yes and a very high 74% turnout.
Decred Video Content 2024 by @phoenixgreen requested a budget of $71,000 for the creation and dissemination of video content for 2024. This proposal has been approved with 85% Yes and 64% turnout.
One proposal author reported a problem with purchasing proposal credits but it was resolved within a few days. A November issue with the registration fee not getting detected persisted in December, and it is unknown if it affects just one unlucky new account or possibly others.
See Politeia Digest issue 65 for more details on the month’s proposals.
PD’s publishing workflow has been reworked to improve reach and engagement: the main release channel is now Cypherpunk Times (main link is posted on Twitter and other places), Medium release is now posted in Decred’s main publication (instead of the lesser known Politeia Digest publication), and companion Twitter threads are now being produced so that the highlights can be consumed without leaving Twitter.
This section tracks key health metrics of the Decred infrastructure.
December’s hashrate opened at ~5.5 TH/s and closed ~10.2 TH/s, bottoming at 3.8 TH/s and peaking at 11.6 TH/s throughout the month.
Image: Decred hashrate is seeking a new equilibrium after the initial influx of GPU miners
Distribution of 1,000 blocks actually mined by Jan 7: miningandco.com 26%, pooltronic.tech 21%, gopool.cash 2.7%, losmuchachos.digital 1.3%, and 49% of blocks were not identified by miningpoolstats.stream.
Image: The decline of unique mining addresses suggests it is getting more centralized again
Ticket price varied between 234-243 DCR.
Image: Ticket price has been very stable in December
The locked amount was 9.74-9.82 million DCR, meaning that 62.0-62.6% of the circulating supply participated in proof of stake.
Image: DCR locked in tickets is staying near its ATH
The 14 listed VSPs collectively managed ~5,750 (-100) live tickets, which was 14.0% of the ticket pool (-0.3%) as of Jan 1.
The biggest gainers of December were vote.dcr-swiss.ch (+290 tickets or +105%) and vsp.stakeminer.com (+67 tickets or +11%).
Image: Distribution of tickets managed by VSPs
Image: Solo voters continue to dominate, only 14% of tickets use VSPs
Image: VSPs are better at not missing tickets than solo voters
Decred Mapper observed between 141 and 151 dcrd nodes throughout the month. Versions of 145 nodes seen on Jan 1: v1.8.0 - 65%, v1.8.1 - 27%, v1.9.0 dev builds - 3%, v1.7.x - 2%, other - 3.4%.
Image: Nodes are slowly upgrading to v1.8.1. The red area before Jan 2023 indicates incomplete data we had at that time.
The share of mixed coins varied between 62.2-62.3%. Daily mix volume varied between 346-541K DCR.
Image: 62% of circulating supply opts in to protect privacy and fungibility
Decred’s Lightning Network explorer saw 220 nodes (+0), 415 channels (-5) with a total capacity of 202 DCR (-4), as of Jan 8. Mind that these stats are different for each LN node.
Image: The Decred Lightning Network capacity remains around 200 DCR
losmuchachos.digital has been launched, it is a Germany based DCR mining pool supporting the PPLNS payment model with a pool fee of 3%.
dcr.gopool.cash has been spotted. MiningPoolStats reports that the Brazil based pool uses the PPLNS model with a fee of 1%. DCR is one of the 15 coins supported by the pool.
There are (at least) 5 public mining pools now, all running dcrpool software.
All trading activity on Bittrex Global has been terminated according to the shutdown plan published on November 20th. If our interpretation of chain activity is correct, the amount held at Bittrex when the trading stopped (December 4th) was ~17.5K DCR, and it looks like withdrawals have been working smoothly.
MEXC has been added to decred.org Exchanges list after DCR withdrawals were confirmed to work. The exchange works over VPNs and allows some trading without KYC. MEXC added spot DCR/USDT market back in June 2019 and 5x leveraged DCR/USDT pair in December 2020, but there was little community feedback to confirm it is working.
MEXC attracted some controversy after several users reported seizure of funds, account freezing, and withdrawals getting blocked. MEXC denied all claims in their response. Two common patterns in the reports were very profitable leveraged trading and large withdrawals, both getting flagged as “abnormal” activity by MEXC. We cannot verify if the reports are true, but it’s a good reminder to always do your own research and be very careful when dealing with custodial services.
DCR withdrawals on Poloniex and HTX continued to be suspended for a total of about 1.5 months and have not been fixed in December, based on the information published on their support sites and one user report in the #trading channel. All withdrawals, including DCR, were suspended in November in response to the two hacks on these exchanges.
Indian financial authorities announced the decision to block URLs of 9 offshore exchanges for not complying with local AML regulations. If the block will be implemented, accessing DCR markets on Binance, KuCoin, and other exchanges from India will become more difficult.
Users of hardware wallet Ledger fell victim to a supply chain attack on December 14th. A compromised npmjs.com account of a former Ledger employee was used by an attacker to upload a malicious version of the Ledger Connect Kit library used by many DApps, which tricked EVM DApp users into signing transactions that drain their wallets. The vulnerability was patched quickly, but it took around ~5 hours for the fix to propagate. The exploit was limited to third party DApps which use the library, it did not affect the integrity of Ledger hardware or Ledger Live. Ledger tweeted that around $600K worth of assets has been affected and promised to make victims whole if they claim refunds (this process requires ID verification). To the best of our knowledge, no DCR wallets were affected by the exploit.
Guarda has been removed from the list of known-to-work wallets at decred.org after several users complained that DCR was not working for 3 months. Timing suggests Guarda’s DCR wallet stopped working around September 2023 because they failed to upgrade to Decred v1.8.0 (released June 13th, 2023) and missed the hardfork (completed September 1st, 2023). A person from Guarda confirmed that DCR is still considered a supported asset, but they’re working on “some issues post-Decred’s network upgrade”. Until that is fixed, Guarda users can export the private key and import it in another wallet like dcrwallet or Exodus.
Join our #ecosystem chat to get more news about Decred services.
Warning: the authors of the Decred Journal have no idea about the trustworthiness of any of the services above. Please do your own research before trusting your personal information or assets to any entity.
Vanguard ran two different DCR giveaways in an attempt to spread outreach: A Meme Contest and a New Year’s giveaway.
Other notable activities:
The 2023 proposal concluded on December 31st. A new proposal for 2024 was developed that includes contributor tiers, funds for ads on X, increased discretionary funds for things like giveaways and other experimentation, while keeping things from the first proposal like DAO funded tools.
The content creation process at Cypherpunk Times is undergoing changes to become more open to the community. The public #writers chat is now being actively used to plan and review upcoming articles, or discuss the overall direction and operation of the site. The process of selecting and creating content is being standardized and documented to guide existing and future authors.
Engagement stats for December:
Decred:
General crypto articles on Cypherpunk Times:
Live streams:
Custodial wallets will require KYC/AML in the U.S. Full node wallets are not feasible for normal users for $BTC or $ETH. Others are questionable too. Decred DEX has struck a balance, using SPV technology to reduce 100s of GBs to < 4GB for BTC, with good privacy and sync times.
For $ETH, there’s a no-privacy culture based on infrastructure providers (infura etc.). We’ve improved upon this slightly by enabling multiple infrastructure providers simultaneously. Full information about wallet activity would require collaboration between providers.
Our $DCR, $LTC, and $BCH wallets are also SPV, so good privacy and sync times there too. #Polygon has a multi-provider wallet like $ETH. All other wallets are full node, which is fine, since they are not Bitcoin, though $ZEC full node is still challenging.
Financial self-sovereignty MUST be an option for everybody. Decred DEX is battling to keep it possible. We’ve still got work to do, but is any other project sticking to blockchain principles like Decred DEX?
Did I mention that our wallet has new privacy options? We’ve added #Decred mixing, fully integrated with trading so that swap redemptions are re-mixed, adding to the (already huge) anonymity set. #Zcash is going shielded-by-default too, unified addresses and all. [@blockchainbuck on Twitter]
In December DCR was trading between USDT 14.12-26.50 and BTC 0.0032-0.00063 on Binance. Using the weighed daily close data from Coin Metrics the price ranges were USD 14.40-22.66 and BTC 0.00033-0.00052. The average daily rate as calculated for contractor payments was $15.89.
Image: Recent DCR/BTC, data from Coin Metrics
Image: Recent DCR/USD, data from Coin Metrics
Image: DCRDEX monthly volume in USD
Image: Market valuations (USD) based on @bochinchero’s Staked Realized Value model
Image: 3rd attempt to leave the perfect accumulation zone, by @saender
Ledger’s Connect Kit library, used heavily by DeFi applications like SushiSwap, Balancer and Zapper to allow users to interact with their wallets, was hacked when a staff member’s credentials were compromised and malicious code was introduced to the GitHub repository. This allowed the hacker to steal $484K from users who accessed their wallets during the critical 2-hour period before the red flag was raised and many of the DeFi protocols using the library paused operations amid a general panic about the safety of any Ethereum transaction made on the day of the attack.
As of Jan 1 2024 new regulations come into effect which treat digital assets as cash in the sense that receiving more than $10,000 “in one transaction (or a series of related transactions)” will mandate reporting the transaction event and the identity of the sender to the IRS on a Form 8300. This was a provision of the Infrastructure Investment and Jobs Act (“Infrastructure Act”) that was passed in 2021, and it is widely seen as presenting a problematic increase in the level of admin work involved in receiving cryptocurrency as a business.
Tether has started freezing the assets held by wallet addresses sanctioned by OFAC, and has also blacklisted the contract address for Tornado Cash. Tether has also been happily “onboarding” the US Secret Service and FBI to their platform, while bragging about the 435 million USDT it has so far frozen at law enforcement’s behest.
Binance has been running half-day courses in France that introduce people to blockchain concepts and software like Metamask, and get them to sign up to Binance to receive their “NFT diploma”, and in some of the poorer regions which they have targeted attendees are being forced to sign up for this “education” as part of a state-sponsored retraining effort. This is one of the outcomes of French PM Macron’s relatively welcoming attitude towards the company which saw Binance pledge to invest 100 million euros in the country’s burgeoning crypto scene in 2021, as detailed in this article.
That’s all for December. Thank you for reading!
This is issue 66 of Decred Journal. Index of all issues, mirrors, and translations is available here.
Most information from third parties is relayed directly from the source after a minimal sanity check. The authors of the Decred Journal cannot verify all claims. Please beware of scams and do your own research.
Credits (alphabetical order):