Thread by @librehash

1/ Wrote an article here about an exchanger that allows you to swap several different cryptocurrencies for Monero without KYC or logins at all

librehash.org/alfacash-a-mon…

2/ Being the eternal skeptic, wanted to test if this website was actually legitimate (there are a lot of crypto scams out there; way too many)..

So we start off visiting the main website and set up a LTC:XMR conversion.

3/ The Monero address that you see in the picture above was created using this "mindwallet" altered tool created by Pactito (patcito.github.io)

3a/ Wouldn't recommend creating a Monero wallet this way, specifically, but this tool generates addresses deterministically with Argon2 as its KDF using BIP32 + BIP38

3b/ You can try it yourself. Password for this wallet = librehash

E-mail (salt) = [e-mail]

You'll generate the exact same addresses and keys as you see here.

Benefit = in theory, you never need to have your private key stored anywhere, ever.

3c/ If you're wondering if this is legit or not, check out the @KeybaseIO implementation at keybase.io/warp ; as you can see, a simple 8-character alphanumeric password with 20+ btc in it has yet to be solved 3-4 years later (salt already given)

4/ Back to the site, we tested out a simple $LTC #Litecoin to $XMR #Monero transfer

5/ Elected to send about $20 worth of $LTC at the time. Enough of an amount to where it felt like a legitimate test. The 6 confirmation wait screen is pretty standard. Cool.

6/ Once that was finished, we were given this screen.

$XMR Monero is diff from other cryptocurrencies (obviously). We need to visit the transaction link.

xmrchain.net/tx/c43ab352aaa…

7/ The link from above takes us here. Notice the two stealth addresses with question marks for 'amount'.

If we want to see ours, we need to use our reg. $XMR addy + priv. view key.

8/ Upon doing so, we can see that the correct output has been matched. Cross referencing it with what the site told us (and what we agreed to), we can see that the values match.

So this gets the stamp of approval right now.