An open-source, public-good platform tracking the risks and guarantees of Ethereum projects, and tending the CROPS. Previously @l2beat 💗
Ethereum
Joined July 2021
- Tweets3.5K
- Following234
- Followers42.4K
- Likes3K
Pinned Tweet
L2BEAT is now ETHBEAT.
5+ years of keeping L2s accountable, now extended to privacy, interop, staking and beyond. One goal: transparency on the guarantees users get on Ethereum.
Thank you to the community that got us here. The next chapter starts today!
What would a Michelin Guide for onchain protocols look like?
At @EFDevcon, @donnoh_eth introduced The CROPS guide and showed how we review projects against the four principles: censorship resistance, open source, privacy and security.
The full talk walks through the research behind the guide and introduces its first selection of projects.
If you missed it, you can watch it here:
youtube.com/watch?v=AJH9TpKg…
Last week, zkLink Nova lost ~$0.8M. No proof was broken: the Ethereum escrow never checked one (by design). zkLink Nova has no trust-minimized bridge - the escrow trusted zkLink’s own relay contract instead, and that contract had a bug that let anyone use it.
teapawt.net/zkLink_Official/status…
zkLink Nova is an L3 that tried to aggregate liquidity from many different chains. But its state is only proven on Linea.
With escrows on multiple chains and a proof system on one, they took a shortcut: on Ethereum, OP and other chains the state was settled only through a message. An Arbitrator contract forwards “batch root X is final” to each escrow, and withdrawals are verified against that root. No proof travels with it.
So the funds were not protected by ZK proofs. What protected them was the Arbitrator - whoever gets it to forward a root can withdraw anything.
The Arbitrator trusted whitelisted relayers, one of them a public helper contract that anyone could call. That allowed the attacker to make the Arbitrator tell the Ethereum escrow a batch root they invented, then withdraw ETH, pufETH, USDC and USDT against it. The ZK proofs on Linea were not involved.
Base Denim is live!
Users now get 200ms blocks directly in the protocol, with the same guarantees as the old 2s blocks.
On the downside, the sequencer can now lag the L1 by 6 hours (instead of 30 minutes) before it must include L1 deposits, with the 12-hour hard limit unchanged.
Also in Denim, B20 issuers can force transfers through a designated transfer agent.
Thank you to everyone who joined us in Mumbai to celebrate our transition to ETHBEAT 💗
It meant a lot to share this moment with so many friends, and we’re excited to keep working with all of you on whatever the future brings!
ETHBEAT 💗 (prev L2BEAT) retweeted
L2BEAT is now ETHBEAT
Unveiled at @EFDevcon, @ethbeat_org widens its risk tracking from L2s to privacy, interop, ZK, tokens and blobs, with liquid staking next.
Same team, data and Stages framework, now one place to check what guarantees Ethereum projects inherit.
Aztec Tierra brings private apps to Ethereum
@aztecnetwork's Alpha V6 fixes the critical V5 flaw, cuts private proofs to 1s (2x faster) and Ethereum-to-Aztec messages to as low as 12s.
@zk_money leads new private payment, AI, perps and wallet apps on its 3,000+ validator L2.
ETHBEAT 💗 (prev L2BEAT) retweeted
NEWS: @ethbeat_org, formerly L2BEAT, launched The CROPS Guide, grading Ethereum apps on censorship resistance, open source, privacy, and security.
First listings: Uniswap V2, Uniswap V3, Safe, and Tornado Cash.
Tornado Cash is the only one rated good on all four qualities.
The CROPS Guide is already live on ETHBEAT! 🌱
It’s a curated list of protocols that live up to the four principles: censorship resistance, open source, privacy and security.
The first protocols to earn a spot are @Uniswap, @safe and @TornadoCash, as each of them has proved that you can build on Ethereum without putting anyone in the middle!
We decided to keep the first version short - it starts with the protocols that have been around for years, have stood the test of time, and don't rely on intermediaries.
That said, we’d really love to see the list grow!
If you think a protocol deserves a spot, you can request a review on our forum, as long as it’s live on mainnet and can be checked from public sources:
forum.l2beat.com/t/the-crops…
If you're building in the ecosystem, there are also a few ways to use the guide.
Protocols included in the list can add a CROPS badge to their website or app.
Wallets and other apps can also use the CROPS icon to help users identify reviewed protocols.
There’s an open JSON API, so you can pull the full list along with the ratings. Every review is attested onchain with @eas_eth, so anyone can verify the list against our attester address.
ethbeat.org/crops/integrate/
ETHBEAT 💗 (prev L2BEAT) retweeted
L2BEAT was a public good in a league of its own. Many outlets informed users, few changed the landscape they covered. Each L2 that set out to climb L2BEAT's stages represented a win for Ethereum, its users, and its culture.
ETHBEAT's CROPS coverage is poised to be an even greater forcing function, one that gives every project a clear sense for the highest standards. We support their work wholeheartedly as this is the kind of accountability the ecosystem needs; well-informed users ask more of protocols, and protocols deliver better guarantees.
Congratulations @ethbeat_org on starting this next chapter.
ETHBEAT 💗 (prev L2BEAT) retweeted
From L2Beat to ETHBeat
Luca from @ethbeat_org highlighting how the Michelin Guide for CROPS will bring even more transparency to Ethereum and all users.
Aztec v6 is not only about ancient civilizations or wild and free-running horses, but also the first version of @aztecnetwork with no known vulnerabilities!
In the meantime, while fixing the proof system, they streamlined their decentralised governance process, accelerated proofs, and had their first private apps launched (including @zk_money which we already track).
The latest ZK rollup is as immutable, permissionless, private and Stage 2 as the previous ones, a refreshing new normal. Because privacy is normal.
Introducing Aztec Tierra (Alpha V6).
The platform for unstoppable private apps is here.
Ethereum's only decentralized L2, with fully programmable privacy: permissionless, private smart contracts.
No backdoors. No gatekeepers.
aztec.network/blog/introduci…
Risks, stage, contracts, permissions: everything you need to know about Aztec v6 is on our page 👇
l2beat.com/layer2s/projects/…
And if you’re interested in going private on Aztec, see how @zk_money works and how private it is 🥷
l2beat.com/privacy/projects/…
