🌳 Trees of Eufloria Newsletter 🌳

#0, owned by me, shows Dyson leaves, the iconic original Eufloria look with an atmospheric monochrome palette.

Use the attached social media banner version for free!

Mint yours - ERPG Beta Steam access soon and more..:
https://prohibition.art/project/Trees-of-Eufloria

1/6 🌳🚀 Today at 6pm BST / 7pm CET / 10am PST, I'm launching a unique #NFT generative art project, "Trees of Eufloria", on the #Arbitrum blockchain via @prohibitionart. Each piece is a unique Euflorian tree, inspired by the iconic, award winning game.

https://prohibition.art/project/Trees-of-Eufloria

2/6 🎨 The art is a blend of 70s British sci-fi, geometric art, and a retro video game aesthetic. Each tree grows in a different alien environment, creating a diverse and captivating collection. Plus, there's subtle animation to discover & profile, wallpaper and banner exports!

3/6 🎗️ I'm also proud to announce that 10% of all primary sales will be donated to the Ovarian Cancer Action charity. Your purchase will not only support the artist but also contribute to a cause which is very personal to me. #NFTsForGood

4/6 🎮 As a bonus, all Trees of Eufloria collectors are invited to join our game dev discord (https://discord.gg/claymaticgames) and request access to the forthcoming beta of Eufloria RPG, an experimental spin-off from the classic indie game Eufloria

5/6 🌳 Arbitrum is a major Ethereum associated blockchain where you can quickly and cheaply bridge your edge. Move 0.0601 eth over to make your purchase (price + gas).

https://bridge.arbitrum.io/?l2ChainId=42161

6/6 🌌 Don't miss out on this opportunity to own a piece of the Eufloria universe. Join me for the launch on a live stream at 5pm on the @prohibitionart discord and become a part of this exciting journey. See you there! #NFTDrop #Arbitrum

You can read the unrolled version of this thread here: https://typefully.com/sillytuna/dfQZpsk

"Trees of Eufloria" NFT Launch on Arbitrum Blockchain

Five ways we're going to see an end to NFT thefts and wallet scams.

Until now crypto wallets have been fundamentally broken but here's how we're belatedly seeing a fight back against the scammers and thieves. 

A thread.

Not a day goes by without another hack or theft in cryptoland. 

Everytime it happens, it's ordinary users who are hit hardest. 

Inexplicably, social media is often full of comments ready to blame victims, including from developers.

Recently we witnessed millions of dollars hacked from wallets stemming from an attack on a Solana wallet, one which users could most likely do little about.

NFT scams are so common and tricky to spot that even well known and experienced crypto users have been victims.

How did this become acceptable and what can we do about it? 

Bitcoin's ethos was to be your own bank but, as many have discovered, securing your own bank in a digital world is extraordinarily difficult. 

Unfortunately many developers and early adopters still hold to this ethos without addressing how to actually do the 'secure' bit in a way which works for regular human beings across the world.

Finally we're seeing real progress. 

Here are 5 ways the problems will be addressed.

1) Improved Transparency

MM recently added a feature to indicate when you're being asked to "Set Approval For All" on your NFTs. 

It's not great UX but it's a start - and has saved me once already after an efficient social media scam.

2) Wallet Guards
Multiple projects are developing wallet guards, such as @wallet_guard. These are similar to virus protection but will warn you if you're about to do a dubious transaction.

Multiple methodologies are being developed but these will be standard in the near term.

3) Vaults and Signing Accounts
For too long it's been normal to sign every transaction using your primary wallet.

EIP5131 proposes a standard which separates your NFT account from one which is used to prove ownership, and perhaps mint in future. 

By avoiding exposure to your primary NFT account or vault, it becomes impossible for scammers to steal your NFTs and other tokens.

We've seen variants used recently but we aim to standardise how it's done.

4) Token Protection
Some wallets already allow you to set on-chain limits on transactions, such as Gnosis Multisig. 

I'd like to see this extended to NFTs and off chain protection, a low cost option which can provide additional security against user error and scams.

5) MPC Wallets
A relatively new technology and one which is yet to be in mainstream consumer use, MPC wallets avoid users having a single key at all, and avoids them trusting an entity. 

By using multiparty computation it's possible to never even have  a single private key.

In future, I would hope that popular wallets move to a hybrid MPC approach by which only the user and metamask working together can sign transactions, preventing key theft on a local device.

Business level MPC is offered by Fireblocks, Zengo, CryptoAPI and more.

Moreover, MPC wallets can allow free multi-sig support and asset protection rules.

For example, tell Hybrid MPC MM never to sign a transaction involving your Bored Apes without 2FA on mobile and a 7 day wait period.

This is akin to how your bank and credit card providers can protect you from malicious transactions.

Items 1-4 can be built into MPC wallets - and that's the ultimate wallet type we should be aiming for.

There's still a place for single key and on-chain multi-sig wallets, but the vast majority of users should have mobile and desktop MPC wallets protected with a username, password, 2FA and all the points above, as well as a recovery option.

It's only then that we'll stop seeing so many thefts and successful scams

It will also mean regulators and the media will have to take note instead of the constant stream of reasonable criticism.

Early days but the light is at the end of the tunnel.

Fed up of NFT thefts, constantly signing messages and transactions exposing your NFTs, and want to go on holiday without carrying crypto and missing drops?

This is the thread for you! #safernfts

(long form https://sillytuna.medium.com/solving-nft-access-list-minting-and-holiday-problems-with-ens-91187d739c7e)

How many times are people going to be asked to prove ownership of NFTs by exposing the keys to their most valuable items over and over again?

How safe is it to carry your crypto with you when traveling for work or holidays? #safernfts

How many drops and perks have you missed because you don't carry your high value NFTs with you? i.e. you practice good security! #safernfts

Theft after theft and still we do almost nothing. As users and project creators we need to fix this and fix it now.

Here is a starting point for an easy to implement solution using @ensdomains, trivial for @Collab_Land_ and NFT projects to support. #safernfts


(1) register mydomain.ens
Point this at your main account.

#safernfts

(2) register a subdomain sign.mydomain.ens

Point this at the account you want to use for signing messages, e.g. to prove who you are.

Do not keep money or assets on this account.

#safernfts

(3) (opt) register a subdomain mint.mydomain.ens

Point this at the account you want to use for minting.
Keep only minting funds on this account, and NFTs of negligible value or use.

You can forward on valuable assets after minting, e.g. using OpenSea.

#safernfts

(4) (opt) register a subdomain vault.mydomain.ens
Point this at the account you use for your vaulted NFTs.
Keep your high value NFTs on this account.

#safernfts

For all of the above, set the Primary ENS Name Record for each of the addresses.

To set the Primary ENS Name record, please click “My account”, and select “Primary ENS Name”.

https://app.ens.domains/faq

#safernfts

How should projects use this?

Proving identity:
Ask user to sign a message with sign.mydomain.ens.

It should never contain NFTs or funds so is completely safe. Users can change this at any time to a new account, use a mobile wallet, whatever they want.

#safernfts

Check NFT ownership:
Monitor NFT ownership at mydomain.ens and vault.mydomain.ens, or ask user which to use.

#safernfts

Access lists:
Snapshot NFT ownership from mydomain.ens and vault.mydomain.ens, or ask user which to use.

Look up the mint address from mint.mydomain.ens if it exists, else get from mydomain.ens.

Do this at a single fixed block since ENS records can change.

#safernfts

Optional:
Allow a minting address to mint to another address, or mydomain.ens.

#safernfts

We need to educate users to only sign using their sign account, never to use accounts which hold assets, and to mint using a minting account from where they can forward assets onwards.

This will stop them continually risking their assets.

#safernfts


Users should never have to sign using any account other than their signing account unless directly interacting with a specific NFT, e.g. to sell on OpenSea or for staking purposes.

#safernfts


What can you do?

1.  Engage with the topic on #safernfts and iterate this idea into one that works.

2.  Demand that all projects implement the solution once consensus is reached.

3.  Firmly reject any projects which do not until they do so.

Perhaps we can all agree a solution and then everyone can go on holiday having safely secured their assets, and can sign up to projects and discords without taking yet more unnecessary risks.

Long form: https://sillytuna.medium.com/solving-nft-access-list-minting-and-holiday-problems-with-ens-91187d739c7e

#safernfts

You can read the unrolled version of this thread here: https://typefully.com/sillytuna/j8gemZb