Hello all, my name is Dhruv and I'm a co-founder of Unchained, a company which provides vaults, loans, trading, retirement and other financial services to bitcoiners through collaborative custody.
I also occasionally write and talk about bitcoin, both about its past and its future. Some of my more popular work has been the HODL Waves chart, the Bitcoin Astronomy series, and my recent piece on how Satoshi thought of bitcoin.
These days I'm thinking a lot about layers of markets, a methodology for building decentralized systems pioneered, one exemplified by bitcoin. I enjoy speculating about the effects of decentralization on everything from energy and telecommunications, to the Internet and computer security, to artificial intelligence and intellectual property.
I'll be here for an hour starting at 12pm Eastern Time, AMA!
this territory is moderated
How do you think people (technical and/or non) can best contribute to or work towards improving/accelerating bitcoin advancement and improvement these days?
Said another way: what does bitcoin need most right now? What would you be building if you were starting today from scratch?
reply
I think you're asking two slightly different questions. The first is "How can people best accelerate bitcoin adoption?" and I think the answer is education and representation. Talk to as many people in your family, friend and peer groups as you can. Educate them about why bitcoin matters, how to safely buy and protect bitcoin, &c. The motto of bitcoiners is "Verify, don't trust" yet most bitcoiners got to where they are by trusting some friend or family member that helped them understand and onboard into bitcoin -- at least initially. Be this person for your friends and family!
The second question you're asking is "What would you build now?" -- not everyone is a builder of things, so this question has a narrower audience, but it's just as important. I tend to start technical companies at the early stages of the adoption curve of some technology. Bitcoin is still early overall, but a lot of areas have gotten mature (e.g. exchanges). I'd probably be working on Lightning, as it strikes me as both extremely early as well as poised for rapid growth!
reply
378 sats \ 2 replies \ @k00b 4 Apr
What's the worst mistake, one thing you'd go back and change if you could, that you made while building Unchained?
What's the best decision you made while building Unchained?
reply
956 sats \ 1 reply \ @dhruv OP 4 Apr
I would not have chosen to support ETH for the ~12-18 months that we did. That choice resulted in a lot of bad design choices, attempting to abstract away the differences between bitcoin and ethereum. Ripping out the ETH stuff and making our platform be bitcoin-native took months of time that could have been better spent. Our technology stack, our application architecture, our marketing narrative, our company culture -- they're all better now that we are just focused on bitcoin.
Best decision I made at Unchained? To ignore what my investors say, what my competitors do, and just listen to what my clients are asking me for. To obsess over making my clients happy and safe. To focus on low-churn and long-term retention instead of massive growth. These decisions have cost me, in the short-term, but in the long-term they're the reason Unchained is still here when so many others have failed.
reply
That is one mistake most of us did, don't bother to much :)
reply
329 sats \ 3 replies \ @k00b 4 Apr
Forgive me if you've answered this before, but do you think the existence of only 21m bitcoin was:
  1. the intentional removal of a premature optimization/requirement
  2. economically motivated and coincidentally removed a premature optimization/requirement
reply
I would lean towards (2) -- I think a finite monetary supply was a top-line goal for Satoshi, and it just so happens that imposing this constraint led to great simplifications of what came before. Check out this talk where I expand on this claim.
reply
302 sats \ 1 reply \ @k00b 4 Apr
Are there any specific bitcoin layers or products where you think they're making a mistake similar to Satoshi's predecessors? That is, adding superfluous requirements that block problem solving?
reply
A great question! I'm not sure, but probably "yes" ? I'm not an expert on lightning so it's hard for me to point at superfluous things. I do think lightning does a good job not solving some problems, e.g. finding routes, because I think those can be solved through dedicated markets that have yet to emerge. Lightning is complex, more so than bitcoin in many ways, but I worry that this complexity may be necessary to solve the problems it's trying to solve. Hard to know. But I'm excited about recent new L2 proposals -- I've long-believed that there should be multiple, competing L2s, and the fact that Lightning seemed the only major design space being explored made me uncomfortable. Let a thousand flowers bloom!
reply
Hi, I’ve been an Unchained customer for years with a multisig. I recently condensed some UTXO’s and it went really smooth. I’d like to ask some questions around the upcoming yearly fee you are going to charge. I get it’s hard to provide services for free, but the $250 feels like a lot especially for minimal engagement with your team and products, then inheritance planning is an additional fee. Would you consider more piece mail fees based on needs?
reply
Thanks for being a client! I could be snarky and say $250/yr is the same as a premium Netflix subscription...is a world-class key agent and collaborative custody platform worth as much to you as watching Netflix shows without ads? But that's not really fair because a lot of people probably have a similar worry as you do and, truly, I empathize. If you're at the beginning of your bitcoin journey, with not a lot of corn, or you're a young person early in your career when income is tight, every little bit of cash leaving your bank account hurts (and is less sats you can stack!).
With that said, Unchained's average clients have significant bitcoin holdings and, for them, this price is very reasonable -- some even say too cheap! It's challenging to build a monetization strategy that is reasonable for clients early in their journey with few assets as well as clients who have 1000s of coins. We do have some differently priced tiers now and will likely support more tiers in the future. Ideally we would be able to find a pricing model that worked for every client -- we're probably not there yet :)
reply
Thanks for the response. I got Bitcoin at the price I deserved which was the top in the spring of 2021, and I’ve been DCA’ing since. Going from $0 to $250 is a big jump for me as that can buy a good chunk of corn, but I understand. Like you said maybe in the future there will be different tiers. Unchained helps me sleep better at night!
reply
250 bucks per year is reasonable for a large stack of Satoshi
reply
How do you compare with Casa?
I am thinking of switching
reply
I think Unchained and Casa offer very similar custody products and I often say "If you're not going to use Unchained, please use Casa" -- I'd rather have people using Casa than self-custodying with a single key and losing it, or not self-custodying at all.
With that said, Unchained has financial services such as lending, trading, retirement, &c. baked into our platform, while Casa only focuses on custody. I think it's mighty convenient not to have to change your custody just because you want to buy or sell bitcoin, for example -- Unchained lets you go direct to/from cold storage!
Since you're a Casa customer already, you can probably figure out the switch to Unchained on your own, but if you need help check out our concierge onboarding program -- you'll get a chance to experience our service as well.
reply
Cool great info thanks for sharing
reply
Much thanks for your reply
I chose Casa a few years ago because of Jameson Lopp
reply
Jameson is amazing!
reply
Truth
Have you seen his amazing gun collection lol
Hi! Here is my question.
Unchained Capital, Inc. is not a bank, so why do they offer dollar loan services backed by bitcoin? I do not use nor recommend this type of service.

Change my mind!

reply
Hello! You are correct, Unchained is not a bank. But companies that are not banks can nonetheless originate and service loans. Unchained has various licenses and partners that allow us to do so. But this is really the "how" not the "why" :)
Unchained has offered bitcoin-collateralized, USD loans since ~2017. I sense some hesitation or disapproval from you about such products. I don't know if I can change your mind -- would you be surprised to know that, as a co-founder at Unchained, even I haven't used our loan product? It's not because I think it's bad or unsafe -- rather the opposite, I think Unchained is one of the safest ways to obtain a bitcoin-collateralized USD loan! -- it's because the cost is higher than I've been comfortable with. Unchained raises USD from the capital markets which we then lend out to our borrowers. The cost of this capital is often quite high, which means our loans tend to have a high interest rate. Bitcoin's historical price appreciation is so significant that, despite this high rate, it often makes more fiscal sense to borrow from Unchained than to sell your BTC (which will also have tax consequences that borrowing will not). But it's also true that if you have good credit and income you can obtain an unsecured loan for a much lower rate. This is the reason I've not personally used this product.
But I would like to! The rate for our loans has generally decreased since we started lending back in 2017, and I hope it gets even lower in the future as the capital markets come to understand how safe our model is. At some point our lending product will be competitive with other, more traditional credit products, and you can bet I'll become a borrower at that time.
Two more comments -- First, I think there's a perception that people who borrow against their bitcoin are leveraging up, using the proceeds to buy even more bitcoin. This may be true in some cases but the vast majority of borrowers at Unchained use the proceeds to purchase real estate (often a first home) or to make a business investment (often in a bitcoin business!). Second, the reason I believe Unchained's loan product is superior to historical bitcoin-based credit providers such as BlockFi, Celsius, &c., is that we use collaborative custody. The borrower gets to hold one private key within a 2-of-3 multisig wallet that maintains the collateral. Unchained holds a second private key and an independent third party holds the third. This structure prevents rehypothecation of collateral and has proven resilient against volatility and other forms of risk going on 7 years now!
To close -- I may not have changed your mind, credit isn't right for everyone, but I hope I've educated you about how Unchained thinks about our credit products and tries to do right by our borrowers :)
reply
Is there a legal reason why the loans are only offered to businesses now?
reply
Using bitcoin as collateral for fiat loans is the worst thing that could happen. We are repeating the history with gold: "give me your sats, and I will give you this worthless shity paper..."
FIAT DELENDA EST!
That means, by promoting fiat loans you are literally supporting fiat to exist. As long as fiat exist, we will never have freedom using Bitcoin.
reply
I hear this opinion a lot and I understand it, even if I don't agree!
reply
reply
reply
It’s a good service.
Don’t sell bitcoin, borrow dollars instead
reply
Can you talk a bit about your typical customers? Perhaps share 1 or 2 insights that may surprise us stackers (if you feel comfortable sharing)?
reply
519 sats \ 1 reply \ @dhruv OP 4 Apr
Unchained's collaborative custody model requires holding (typically multiple) hardware wallets, each of which costs ~$100 (or more!). This means our solution isn't suitable for people who have just a few hundreds of dollars worth of bitcoin -- which is most people who own bitcoin!
Most Unchained clients are wholecoiners, the average client holds >10BTC, orders of magnitude above average holdings at most exchanges. Our clients care about privacy, security, and service. We pride ourselves on delivering these :)
Surprise? Perhaps the extreme variance of the kind of people that become our clients. They're not what you might expect if your image of bitcoiners comes from bitcoin podcasts or bitcoin twitter. Our clients can be old or young, they can be extremely technical or they can be folks who fumble with computers. They have all sorts of professions, from programmers, to small business operators, to executives, to stay-at-home moms. I'm extremely proud that our concierge onboarding and support teams have managed to help so many people learn how to use hardware wallets and feel safe holding bitcoin through collaborative custody :)
reply
Awesome. It’s great that you’re providing that personal service and really tailoring that service to them.
It also makes sense to say “our solution isn’t right for you” in some cases. Many companies are afraid of telling customers that these days.
reply
Was going to ask you about your favorite SF books, but I'm guessing the image at the top of the Bitcoin Astronomy post gives a bunch of those away. But kind of tangentially related to that:
In the past, you've talked about your desire to see scientists and researchers in other fields apply lessons they've learned from Bitcoin's strength and resilience. Have you seen any examples of this that you can share (or if not, any areas where you see the potential)?
reply
708 sats \ 1 reply \ @dhruv OP 4 Apr
Man, I love me some good SF. You're right, I enjoyed the books listed in the Bitcoin Astronomy post but they're not necessarily my favorites. I love the classics -- Asimov, Bester, Clarke (to quote Martin Prince). Other favorite authors are Neal Stephenson, Ursula K Le Guin, Vernor Vinge -- almost every book they've put out is great. One problem with SF is that there are authors I love whose books I don't recommend because most people probably wouldn't like them. For example, I adore Greg Egan, but I acknowledge that if you like well-realized characters or good prose then you might be disappointed by Egan because all he can offer you is absolutely mind-blowing ideas :) (I feel similarly about the Three Body Problem series...) Or Peter Watts, whose books are the few which leave me feeling confused, but in a good way.
RE: scientists & researchers -- I haven't seen them applying bitcoin to their work yet, I think first they have to apply their methods to bitcoin. That's happening! Check out Micah Warren's textbook on bitcoin, or the increasing number of papers out there analyzing bitcoin from all sorts of perspectives. Hopefully as this kind of work becomes more normalized, the flow can reverse, and bitcoin-y ideas can infect the academy wholesale :)
reply
Like Egan a lot, but I LOVE Watts. The Rifters trilogy is one of the most mind-blowing things ever ("confused, but in a good way" is a prefect summary).
reply
Do you agree that compliance is the path to separating money from state and how does Unchained plan to execute a subversive compliance strategy?
reply
I'm not sure I agree. I'd like to see the separation of money and state, but I think one of the roles of compliance (as I understand it) is to work with the state where it is today, with its current rules, which definitely regulate much about money.
I don't think Unchained has a subversive compliance strategy, I think we have a conservative one -- we comply with all relevant regulations and best practices. To not do so would be to invite scrutiny and create risk for our business, our employees, our investors, and most importantly, our clients.
I do think Unchained has subversive product strategy. Collaborative custody is much harder than "just being a custodian" but it's also the right strategy -- it's disruptive and scary to the financial powers that be and this makes it subversive.
Protecting and preserving our product strategy through compliance is one of the missions of our compliance team!
reply
504 sats \ 3 replies \ @ank 4 Apr
Hi Dhruv, loved the Bitcoin Astronomy series and premise.
Do you have any future plans on expanding the Bitcoin Astronomy series into a sci-fi book, in the style of the Dune book series, to explore the fascinating premise? If not, are you open to someone else adapting it into a book, short series (animated or live action), or other medium, while crediting you, of course.
reply
Have you seen Fractal Encrypt's Timechain Codex ? It's pretty neat!
I don't think I'd ever turn Bitcoin Astronomy into a book...I'm much more a reader of SF than writer of it. I've begged my wife (who is a screenwriter) to do it for me, but no success yet. Perhaps you, or someone else could do it for me/us? I'd love to read it myself if such a book came out!
reply
0 sats \ 1 reply \ @ank 4 Apr
Thanks for the link to Timechain Codex, will definitely read it, looks awesome!
Hopefully you eventually get success convincing her or someone else picks it up. Otherwise, I'll probably give it a shot at some point in the future. Though I am also more a reader of SF than a writer, for this kind of Bitcoin themed SF, an exception is in order :)
reply
LOL, love to hear it! Good luck and let me know if you do write something, I'll be chuffed to read it :)
reply
187 sats \ 2 replies \ @kr 4 Apr
can you elaborate on how Bitcoin might act as the metabolism of AGI?
you had lots of thought-provoking ideas in your teaser tweet yesterday
reply
Here's a talk where I get into those ideas more. For here I'll just say that all life on Earth uses the same metabolic pathways to produce energy (the Krebs cycle). Some believe this metabolic cycle evolved before life as we know it (cells, &c.) evolved. Computing on the Internet is the crucible in which AI is evolving. It's already powered by money, just fiat money moving through centralized companies. I think bitcoin lets us human beings build decentralized, market-driven ways to deliver services that we've previously delivered through large centralized companies (e.g. ConEd, AT&T, Google, Amazon, &c.). I think the decentralized markets that power the Internet, which are building over the next few decades, become the equivalent of the Krebs cycle for digital life. And just as biological life did not evolve towards planet-devouring grey goo, I don't believe that digital life will evolve towards humanity-destroying superintelligence.
reply
Ohh Kr! Work this out into a post, interesting!
reply
  1. Are you willing to comply with govs rules and regulations?
  2. What does it means for you saying "Bitcoin or nothing" ?
reply
  1. Obviously it depends on the rules and regulations, but in general, yes, I am :)
  2. I don't think I would say "Bitcoin or nothing" -- I don't even call myself a "bitcoin maximalist". I think bitcoin is beautiful and the only cryptocurrency worth working on today is bitcoin. But if bitcoin were to change (for the worse), to become something that no longer can do what it does now, I would walk away from it. My loyalty is to a methodology, an end goal, an orientation towards problem solving and my fellow humans -- not a tribe, a project, or a self-identity.
reply
So Bitcoin is not a beacon of freedom for you, is just another "project", just another technology to play around with.
reply
143 sats \ 1 reply \ @dhruv OP 4 Apr
Rather the opposite!
reply
so how is freedom for you, if you are willing to comply with whatever govs says?
reply
Compliance is Defiance
reply
deleted by author
reply
are you the AMA?
reply
Forgot I was on the AMA-territory, I seldom come here.
reply
145 sats \ 1 reply \ @k00b 4 Apr
How has your vision for Unchained change since it was founded?
reply
I recently looked over a fundraising deck that we'd prepared back in 2016 and was pleasantly surprised to see how much of what we were planning to do back then is what we're actually doing now.
One major difference is that we are bitcoin-only today. Back in 2016, bitcoin's market cap was <$10B, and we assumed we had to find other assets we could work with -- that's no longer true :)
reply
Hello @dhruv, An Indian to Indian question.
How do you like Indian tadka dal on a highway dhaba?
Another one is, what's the story behind naming your company 'Unchained'?
reply
My brother, I love me some good dal, I have struggled and persevered until my toor dal is as good as my Nani's. Gotta add that dank chaunk!
Unchained -- we started the company because we say how much bitcoin "just sits around" in the HOLD waves. We wanted to "unchain" the value from these coins through financial services.
reply
What book about bitcoin or the ecosystem surrounding bitcoin would you either
a) write if you had a year to focus solely on the writing of the book b) like someone else to write c) both?
reply
104 sats \ 1 reply \ @kr 4 Apr
what is the likelihood that bitcoin does become the main currency used on Mars given the challenge you outline of mining so far away from Earth?
reply
I think bitcoin becomes the main currency used on Mars because by the time we're settling Mars bitcoin will be the main currency used on Earth. Over time I think Martians will "revolt" and start their own version of bitcoin, to gain the advantages of a combined mining/energy industry. I think this new bitcoin won't be a shitcoin because its center of hash will be far away from Earth -- a property no altcoin on Earth could ever have.
What is the likelihood this *doesn't * come to pass, and bitcoin remains the main currency used on Mars forever ? I hope low, honestly because I love the ideas I put forth in the Bitcoin Astronomy series, and if Martians don't revolt, then maybe none of the rest of it happens. I suppose one reason they might not is if their energy economy grew acceptably without mining. Who knows if that will be true or not!
reply
What is in your opinion the future of decentralization in a given time horizon of let's say 10 years?
Which impact towards this you wanna support personally?
reply
It's so hard to predict the time something happens by!
In 10 years bitcoin's price will be much higher and adoption will be much broader, that seems safe to say. I think payment nteworks such as lightning (or something else?) will have also grown a lot out of necessity -- L1 fees are expensive! My hope is that by 10 years from now these payment networks will have become robust enough to begin to bootstrap further decentralized markets, e.g. markets for the storage and delivery of data online, or bandwidth, or routing. If we can solve that problem -- decentralizing the Internet -- then I think a lot of cool things become possible!
reply
As physicist tell me, Why is everything so heavy?
reply
431 sats \ 1 reply \ @dhruv OP 4 Apr
reply
Thanks
reply
Do you strategise your business different for different locations or is it same for every place ?
reply
In the US we mostly market and strategize the same in all states (where we can legally operate and sell our products & services). International is exciting to me, but it's a much more complex and nuanced compliance regime, so will require a different strategy.
reply
138 sats \ 1 reply \ @kr 4 Apr
10 years from now, what percentage of all Bitcoin will have been dormant for more than a decade?
reply
Great question! According to GlassNode's HODL Waves chart we're at ~15% of the current supply dormant for more than 10 years. My own belief is that approx 20% of the current supply has already been lost (inclusive of the 15% dormant today for more than 10 years), so I'll conjecture that 20-25% of the supply in 10 years will have been dormant for more than a decade.
reply
Do you have a closed source phone app as part of the multi sig solution like Casa?
I like the route they go because it sets things up for the potential for them to be very compliant with authorities if needed to be.
reply
Rereading your post -- I think I may have misunderstood the first question. While we do have a mobile app, the mobile app and the device it runs on are not part of the multisig wallet that protects your bitcoin. This is different (IIRC) than the Casa solution :)
reply
We do have an iOS app we just launched recently -- check it out!
Not 100% sure if your second sentence is earnest or sarcastic! But I'll take you as earnest and say that Unchained's motivation for launching a mobile app was not compliance-related but convenience-related. Clients kept asking us for a way to check their balances, receive a deposit, or buy bitcoin while they were on the go -- the mobile app provides these features :)
reply
Yeah that makes sense. Thanks for your thoughtful responses.
If Bitcoin becomes captured because of regulated companies dominating the off and on ramps, as well as general development of products that are captured, what do you think the future looks like for humanity and how is your company trying to prevent that?
reply
73 sats \ 1 reply \ @dhruv OP 4 Apr
As a company, Unchained is centralized. But our clients can leave our platform at any time, we can't stop them, they have their own private keys and open source wallets exist (some of which we've written!) that let them pull all their bitcoin out with a single tx.
If this were true generically of all financial service providers I think the culture of finance and banking would be very different. Companies would, like Unchained does, be forced to create value and make their clients very happy in order to retain them.
Also, long-term, I don't know how important on and off ramps are...what are we moving on and off in 2060? Dollars? I don't know how relevant those will be at the time! Maybe people just stay within bitcoin by then :)
reply
I would like dollars to be not that relevant, but the push towards stablecoins that's happening right now have the possibility to really prolong their relevance.
I think we are really in an Atlas Shrugged moment where the state will be come so intrusive that the only option is for the system to collapse.
"As a company, Unchained is centralized. But our clients can leave our platform at any time, we can't stop them, they have their own private keys and open source wallets exist (some of which we've written!) that let them pull all their bitcoin out with a single tx."
I guess the only hope is that incentives will prevail.
reply
Welcome! I’m super glad you’re here, there’s a specific question I have regarding something you’ve mentioned on podcasts!
I've heard you say you think the future of the internet will run on the lightning network (or something similar), such that every single request sent over the internet will be a literal layer 2 micro transaction.
You've said that will FORCE everyone to take security seriously, because any vulnerability will result in immediate bitcoin loss, and will therefore mostly eliminate zero days and the need for a bug bounty market.
As a security engineer, I don’t understand this reasoning, and I’d love to hear your response regarding the following:

First:

The kinds of vulnerabilities you’re talking about - specifically that would allow an attacker to make requests on behalf of someone else’s server (essentially RCE), or that would allow you to access restricted service functionality (usually SSRF or something similar) - are typically critical level vulnerabilities that DO result in massive financial loss TODAY… And here we are [insert thousands of zero days]. If we wanted to include Lightning transactions via every single request, sure - everyone would have to follow best practices and completely isolate and lock down that specific service. But that would only mitigate a single kind of vulnerability, and does not guarantee ethical or competent developer behavior throughout the rest of the web service.
In other words, destroying the market for zero days doesn’t seem like matter of incentives, it’s a matter of being 100% logically sound all the time. That’s what good code is, and no code can perfectly achieve that. Therefore, it seems bug bounty is a permanent market, even if the internet runs on lightning.

Second:

The methods I’ve seen proposed include sending typical HTTP data via a parameter in a lightning transaction.
In other words, instead of using a data protocol (HTTP) and including payments, we’d be using a payment protocol (lightning), and including data.
That seems inefficient and incredibly restricting, but more importantly, it seems like that would open up entirely new classes of vulnerabilities.
There’s a misconception that security improves over time, but on the contrary1:
  • There are classes of vulnerabilities that have not diminished (especially business logic, access controls, or anything that involves a novel implementation)
  • New services and functionality are constantly emerging, and introducing new classes of vulnerabilities faster than we’re able to keep up with them.
Wouldn't putting the internet on lightning only exacerbates this issue, rather than moving us any closer towards a more secure internet?

All that being said, as a security engineer that’s worked on web2 and web3, I’m sure I have a very biased perspective here. I’m also very exciting for the future of the internet post bitcoinization, I’m very open to being wrong about all of this - so I’d be highly curious to hear more about your perspective!
Footnotes
  1. You can see this reasoning in The Web Application Hacker's Handbook, and this is something I and so many others in cybersec have experienced throughout our careers.
reply
Great question, thanks for engaging me on these ideas -- I think the bitcoin & computer security connection is really interesting and I wish more people talked about it!
To your first question -- you're right, vulns today do lead to significant financial loss. But I think vulns on a bitcoin-powered Internet would lead to even larger and more immediate losses and I believe the difference is large enough to be a distinction.
I'm a bit confused by this point "If we wanted to include Lightning transactions via every single request, sure - everyone would have to follow best practices and completely isolate and lock down that specific service. But that would only mitigate a single kind of vulnerability, and does not guarantee ethical or competent developer behavior throughout the rest of the web service."
^ What do you mean by "that specific service"? In the bitcoin-powered Internet world, any software that can make a network request from your device is software that can be used to steal money from you, since you're directly paying for network requests -- perhaps directly to the source host you're pulling the data from! So if a vuln in my software lets attackers make 1x1 pixel image request to attacker-controlled servers, that's basically a leak of sats my users will suffer. And they'll quickly see it, because it will be exploited quickly, and I'll come to know about it quickly, and I'll have to fix it -- or they'll stop using my software!
RE: the dissolution of the market for zero days -- I'm not making the claim that there will be no bugs on the bitcoin-powered Internet, just that there will be no zero days! Bugs can and will still exist and manifest, but they'll either be unknown to everyone or known to everyone -- the intermediate state of "known to attackers but not known to defenders" (a zero day!) will not exist because as soon as an attacker knows about a bug, if it can lead to the stealing of sats (via, say, the above 1x1 pixel image request attack) then it will be used to attack. It will never be sat on for weeks or months while it gets sold to another attacker in a zero-day market on the dark web. This is not true today -- a vuln in (e.g.) MS Word or some Siemens industrial control software found by some warez blackhat doesn't immediately turn into money, it has to be weaponized somehow first. If web requests cost sats, then it's far easier to turn vulns into money, and therefore selling them on zero day markets doesn't make economic sense.
To your second question -- I totally agree, the current stack is actually very robust after years of engineering on it. If we move to a new stack, that puts data within payments (I like the way you phrased that!) then we will have a boatload of new vulns that we create. You're absolutely right about this. Yet...so what? If the first part of my thesis is true, then these vulns will be quickly exploited because they'll be able to be used to steal sats. So they'll get noticed quickly and can be fixed quickly -- they won't sit as zero days for untold periods of time :)
reply
Thanks for taking the time to read and answer my question!
So, I was thinking from the perspective of an attacker being able to leverage a vulnerability that would steal from the app as opposed to other users.
It seems like if I can isolate my application’s payment validation service (similar to the way SSRF is typically mitigated), other vulnerabilities within the application couldn’t be leveraged to access that service and steal from me.
But I hadn’t thought as much about attackers leveraging victim accounts…
But that leads me to the infeasibility of this whole thing in the first place.
It sounds like you’re talking about classes of vulnerabilities that leverage the fact that a browser is happy to automatically make whatever HTTP request the app tells it to. (Fwiw, that doesn’t include all critical severity/zero day vulnerabilities, but that’s a different tangent).
That seems to be based on the idea that LightningInternet browsers will similarly be happy to automatically send payment(request_data).
If that were the case, it’d be INCREDIBLY difficult to convince anyone to join LightningInternet, IMO. I wouldn’t visit ANY website if I had no control over how many requests (payments) are being automatically sent from my browser, no matter how trusted it is. If a single lapse in ethics or security competence can result in a lightning wallet being DRAINED, I’d stick to HTTP apps.
We’d have to build an entirely new internet that functions completely differently that would have an incredibly high security barrier to entry even without the new classes of vulnerabilities that will inevitably emerge.
To me, seems like we can accomplish a lot of the same incentives by building on established security and protocols, and ease into the new unknown a lot more smoothly by simply putting lightning payments into HTTP requests as frequently or infrequently as contextually makes sense.
reply
10 sats \ 1 reply \ @dhruv OP 4 Apr
You're right to frame bitcoin-powered Internet as creating a huge, new space of vulnerabilities. If lightning browsers uncritically call payment(request_data) then bad stuff will happen. People would have to develop rules to limit carefully what kinds of data they're willing to send and receive. Subversions of those rules, or the systems which enforce those rules, would immediately lead to costly and therefore quickly noticed attacks.
Bugs which caused such subversions would not be zero days because they'd be exploited in the wild by their discoverer immediately upon discovery, not hoarded and privately sold in a darkweb market. After all, someone else could find that bug and start profiting from it, exposing it for all to see and squash. The economic incentive (of a blackhat) is to exploit a networking bug immediately before someone else does. This gets bugs fixed faster.
"Data in payments", to use your evocative framing, makes networking more secure by changing the economic incentives of attackers to shorten the lifecycle of bugs. I think this kind of pattern recurs in other areas such as distributed databases. Think of key-value sets and gets in some giant cloud database that is actually just a market. The same zero-day killing behavior will occur there, too. This is how I see a bitcoin-powered Internet emerging over time :)
reply
Interesting perspective. Thanks for sharing! I see what you’re saying a little more about vulnerabilities being exploited immediately…
What you’re proposing reminds me a bit of the scene at the end of Dark KnIght Rises where Bruce Wayne can only make the leap without the rope… More lightheartedly, I call this the Claw of Shame fallacy 😆
In other words, it sounds like you’re saying people will choose lightning internet because it has better security, and it has better security because if it doesn’t, the worst case scenario will happen… and I think I’m either missing some reasoning or missing the technical explanation to justify it, because I’m not sure why people would voluntarily opt in to that in the long run, let alone be a guinea pig…
So I remain curious to see what kinds of solutions people are proposing and building, because I’m all for better security!
reply
Late to the party, but is it possible to have a first-year discount or some kind of offer or trial? I'd like to give the service a try before deciding to sign up.
It's not that I'm cheap, but I'm a software developer who likes when a service is run as a tight ship and prefer to try things firsthand.
Thank you!
reply
Has Unchained responded to request for information from government entities?
If so, what where the nature of the questions and did you notify your customer before responding?
reply
What are the largest obstacles for getting ETFs and institutional level investors away from Coinbase custody to multi-institutional multisig?
reply
hey Dhruv thanks for doing this SN AMA, the most important question is...what is your favorite taco place in Austin?
reply
Your "Blockchain Mind Candy" talk has held up remarkably well (especially the energy section):
What would you change/update in a current version of the presentation?
reply
Thank you, Max! I would have more to say about each of the five sections and more sections to add!
reply
TLDR: The speaker delves into various harebrained blockchain schemes, emphasizing the lessons learned from Bitcoin and exploring concepts like the relationship between money and energy, the potential of blockchain in space, and the challenges of interstellar value transfer.
  • Bitcoin is seen as sound money and a potential basis for the global economy.
  • Lessons learned from Bitcoin include the idea that money is a social construct and that blockchains can move atoms in the physical world.
  • The speaker discusses the potential growth of Bitcoin in terms of value and energy consumption.
  • The concept of a distributed rekeying system is explored as a solution to key management issues.
  • The challenges of value transfer in space due to the finite speed of light and the relativity of simultaneity are discussed.
In a thought-provoking and engaging talk, the speaker delves into the implications of Bitcoin as sound money and its potential impact on the global economy. They explore the idea that money is a social construct and how blockchains can have real-world effects by moving atoms. Additionally, the speaker delves into the challenges and potential solutions for value transfer in space, highlighting the complexities of interstellar transactions. Overall, the talk offers a unique perspective on blockchain technology and its implications for various aspects of society, from finance to space exploration.
reply
Great to have you here @dhruv!
What do you think is the most complete modern theory of evolution? Do you see room for non-random mutation (e.g. see https://kk.org/mt-files/outofcontrol/ch19-d.html)?
reply
I don't feel like I know enough to choose. I do know that the more I learn about molecular biology, genetics, &c. the more I realize how, well, "evolved" it all feels :) It's not as precise as Mendel's peas, fitness landscapes are dynamic, the information theory analogy is imprecise, and so on.
I will say that Kevin Kelly is always interesting and this article doesn't disappoint. Non-random evolution seems very natural if you're a pantheist, right? :)
reply
Can you comment on the general regulatory climate, especially concerning your IRA? Is it getting more or less friendly? Can you offer any reassurance to existing or potential customers that a Bitcoin IRA will still be legally recognized in 20-30 years when retirement comes around?
reply
How did you land on Unchained as the name? What does the name represent to you?
reply
43 sats \ 1 reply \ @dhruv OP 4 Apr
From an earlier response:
On the name "Unchained" -- we started the company because we say how much bitcoin "just sits around" in the HOLD waves. We wanted to "unchain" the value from these coins through financial services.
Also maybe just the idea of "unchaining" potential, human, digital, or otherwise :)
reply
Sorry I forgot to read. Cool back story. Good choice.
reply
Woah! Reading your Bitcoin Astronomy work right now. This is blowing my mind. No question yet, just serious kudos!
reply
What are the technical differences (in terms of custody, since both are 2 out of 3 wallets) between your "Vaults" and "Business Vaults"?
reply
43 sats \ 1 reply \ @dhruv OP 4 Apr
Almost no technical differences at the level of bitcoin, or redeem scripts, or private keys. The difference is more at the application level, in terms of additional security features designed for groups of people (e.g. in-app approvals are available for businesses but not for individual vaults) as well as at the level of support from our teams :)
reply
Great thanks
reply
What is the likelihood of bitcoin replacing fiat or any other currency?
reply
On a long-enough timeline, 100%
reply
0 sats \ 1 reply \ @OT 4 Apr
Would you say Unchained is for plebs too?
reply
Yes, I believe it is!
reply