kohaku is a new @ethereumfndn project spearheaded by @ncsgy & @vitalikbuterin, here is a simple explanation:
kohaku is focused on privacy and security for wallets
it is NOT a wallet you can download today, but a toolkit that seeks to make future wallets safer.
it is:
> an open-source sdk
> a reference wallet: a power-user demo that shows what these next-gen privacy and security tools can do (not a consumer app).
> a collaborative effort: designed so other wallets can adopt its features piece by piece as they wish. the ethereum foundation works for you, not against you.
note: what is mentioned below are goals of the project and things it will focus on, things may change over time.
here's what kohaku seeks to do (non-exhaustive) note that this is currently for power users it is not a consumer app, however given the open source nature, existing wallets could begin to adopt things:
1. build wallets that don’t depend on middlemen
right now most wallets rely on centralized servers (called RPCs) to tell them what’s happening on Ethereum; if the rpc is down..you're cooked and tx's won't get through (anyone who's tried to buy a hyped release has been through this).
kohaku looks to run a “mini Ethereum” inside your browser so it can check things for itself.
2. private actions
when you use apps today they can see everything you do. Kohaku seeks to let you still interact with things without exposing your entire self.
3. private sending and receiving
kohaku aims to connect with privacy systems (like railgun and others) that let you send & receive without having the world watching.
4. one identity per app
today your wallet address is like a username that never changes. which makes it easy to track you across apps. kohaku has a potential feature that can automatically create a new address for each app you connect to.
5. private communication between wallet and app
normally your wallet talks to apps through public servers but kohaku is building a way for them to talk peer-to-peer.
like whispering instead of shouting across the room
6. better+private ways to recover your account
Instead of writing down secret phrases or giving your ID to a company, you’ll be able to recover your wallet in better ways
very useful for someone like me that gets their phone snatched in london (smh)
7. protection against future tech
kohaku will explore a safety switch to upgrade wallets to new cryptography to right off quantum computers
basically future-proofing so the deepstate doesn't wreck you.
8. smarter hardware support
kohaku seeks to make it easier for hardware wallets (like ledger or trezor) to support advanced privacy features out of the box.
9. spending limits and guardrails
you’ll be able to set limits like “this account can only spend $100 a day.”
stops phishing and mistakes from draining your wallet, also stops you from over-aping into new shitcoins...(i'm projecting)
10. local AI safety
they’re going to be experimenting with small ai models that run on your device to spot risky transactions without sending your data anywhere.
local ai in itself is fascinating, and there's tons to be explored there overall; as we use ai more, we'd probably want it to keep our secrets.
okay so now who’s building it:
the effort is led by nicolas and vitalik, but kohaku isn’t just one team. it’s a collaboration among many of Ethereum’s best-known privacy and security developers people and teams like: @ambire , @DeFi_Wonderland, @RAILGUN_Project, helios, @PrivacyEthereum @obliviouslabs, and several individual researchers including @LucemansNL @kassandraETH @zknoxhq @fredrik0x @barinov @samczsun @pcaversaccio @MicahZoltu
the first demo will focus on privacy and be shown at Devcon.
it’s not meant to compete with wallets like; it’s meant to make all wallets better.
nico said it best: "it’s time for us to go public so you all can go private, and it’s time for us to be bold so you all can be safe."
onwards.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
adding cryptography to ai..some weekend thoughts 🧵
imagine an agent so intimately woven into your daily life that it’s almost a second brain. it checks your emails, invests your money, and even makes deals on your behalf.
but here’s the key question: how will you trust it?
leading researchers predict personal ai agents will become as common as smartphones in the next decade (see de lange et al)
these agents won’t just answer queries; they’ll evolve with you, learning from every email, transaction, or conversation you have.
BUT the risk today is that if they’re compromised or manipulated, then well...you're f*cked.
the privacy dilemma:
these ai agents will handle everything from financial transactions to sensitive health data. one breach could expose it all. so how do we solve this?
1. secure hardware enclaves (tees): run sensitive computations in isolated hardware zones, even if the OS is compromised, the data remains encrypted within the enclave. see the work of @sxysun1 @socrates1024 @ropirito @NousResearch @flashbots_x to see what this looks like for agents.
2. zero-knowledge proofs: prove an agent followed your instructions (e.g., made a correct calculation) without revealing the raw data.
the ethereum pectra upgrade is coming. it’s one of the most ambitious upgrades yet.
here is what you need to know 🧵
so, what is pectra?
pectra = prague + electra.
it’s ethereum’s glow-up.
let’s dive in.
first, the process:
teams tested over 100 devnets during an event in kenya (nyota interop). they tried everything. from there, they narrowed down 20+ ideas into 11 that are ready for prime time.
⚠️ You're about to hear the word 'Attestation' throughout ETH Denver; here's why it is important: 👇 🧵
To attest is to say something about something. E.G. "His name was Robert Paulson." We do this all the time in our daily lives; e.g when you sign into your email account, you attest that it is you.
Blockchains have attestations, too; when you sign a transaction, you use your private keys to attest that it is you. If someone goes to your txn history, they can see that you 'attested' to a contract.