Andrew M. Bailey

Nick Almond

Worldcoin — a new financial system connected to sensitive biometric information,<a href="https://www.technologyreview.com/2022/04/06/1048981/worldcoin-cryptocurrency-biometrics-web3/"> mostly harvested from poor people</a> — sure sounds like a terrible idea.



“Terrible” doesn’t do it justice.



Worldcoin will need to assemble a vast database of iris data. But not everyone is eager to gaze into an Orb. In the bootstrapping phase, at least, you had to pay people to scan their eyes. And so Worldcoin turned to the global south — home to the cheapest eyeballs — and played a dark game of ‘what will people do for money?’



Incredibly, <a href="https://www.theblock.co/post/237647/inside-sam-altmans-worldcoin-and-its-quest-to-catalog-all-humans">Worldcoin was unprepared</a> for an obvious consequence of this rollout strategy: A black market for verified credentials. You can now seemingly <a href="https://twitter.com/BlockBeatsAsia/status/1659060950748782594?s=20">buy a World ID</a> for as little as $30. Anyone, then, with more than $30 on hand can command more than one digital identity (although Worldcoin is <a href="https://gizmodo.com/worldcoin-black-market-iris-data-identity-orb-1850454037">aware of this issue</a> and has proposed solutions to resolve it). Connecting real people to digital identities is a thorny puzzle.&nbsp;



Worldcoin does not fix this. And it’s unlikely it ever can, since nothing in the design can stop professional sybil attackers farming eyeballs on the ground level through nefarious means.



This does not inspire trust in the system or its designers. And yet trust is what they demand. Worldcoin’s promotional materials are <a href="https://worldcoin.org/faqs#data-privacy-&amp;-security">full of promises</a> — to delete sensitive biometric information, or keep it hidden from view, or not use it in nefarious ways. One blog post (quoted <a href="https://www.technologyreview.com/2022/04/06/1048981/worldcoin-cryptocurrency-biometrics-web3/">here</a>; the original appears to have been changed since initial release) put it this way: “During our field-testing phase, we are collecting and securely storing more data than we will upon its completion… We will delete all the biometric data we have collected during field testing once our algorithms are fully-trained.”



“Trust us,” in other words. “We’ll totally delete the eyeball database.”



But when it comes to sensitive information, promises aren’t enough. And the very people who insist that you trust them are the ones who should command the most suspicion. The fact that Worldcoin’s co-founder Sam Altman also heads up OpenAI — a firm currently <a href="https://www.theguardian.com/books/2023/jul/05/authors-file-a-lawsuit-against-openai-for-unlawfully-ingesting-their-books">being sued</a> over allegations of dubious uses of large data sets — asks more questions than it answers.



Sometimes Worldcoin’s privacy promises are conjoined with dazzling technical details. Zero-knowledge proofs, we’re told, will save the day, and allow users to prove humanity without connecting any particular financial activity to a World ID or other associated transactions.



There’s a grain of truth here. Zero-knowledge proofs can generate impressive privacy guarantees. But in the case of Worldcoin marketing, they’re more theater than substance. Taking off your shoes at the airport makes it look like important precautions are being taken (but doesn’t actually make you any safer); and <a href="https://worldcoin.org/blog/developers/privacy-deep-dive">long blog posts about zero-knowledge proofs</a> distract from, but don’t in fact address, the problem of Worldcoin asking for users’ trust.



Linking immutable biometric traits to money could have dystopian consequences.



Imagine that your digital identity has been lost in some way — shut down by authorities for non-compliance, or otherwise blocked. With traditional cash — and other cryptocurrencies — you can always make a new wallet and stash some fresh coins in it. But this isn’t Minority Report, and you can’t get a new iris from your neighborhood surgeon.&nbsp;



When your immutable digital identity is locked — imagine merchants who won’t take your coins from you without a digital signature announcing your World ID — it’s over for you. No old account. No new account. No soup for you. You just lost your digital personhood.



Boosters might reply that, thanks to zero-knowledge proofs, one could prove that a given transaction is associated with a valid World ID without disclosing which World ID that is — thus reducing the risk of total identity blockade. But this reply misses the point.&nbsp;



Zero-knowledge proofs could be used in benign ways or to preserve user privacy. Or authorities could demand more; they could demand that users reveal all, or be locked out altogether. Setting up a system and simply hoping its full powers of surveillance and control won’t be used is naive, at best.



<h2 class="wp-block-heading">Dystopian premise… dystopian premine?</h2>



Worldcoin is billed as a network “<a href="https://worldcoin.org/cofounder-letter">owned by everyone</a>.” Early promotional materials claim giving “<a href="https://spectrum.ieee.org/worldcoin#toggle-gdpr">every person on the planet an equal share of a new cryptocurrency</a>” as a premise of the project. It sounds laudable. But a glance at the actual plan for distributing tokens casts doubt on whether equal distribution is an aim of the project at all, much less one it will achieve.



It’s a curious ‘world’ coin that <a href="https://blockworks.co/news/worldcoin-not-in-us" target="_blank" rel="noreferrer noopener">isn’t even available</a> in the <a href="https://www.bloomberg.com/news/articles/2022-03-16/worldcoin-the-eyeball-scanning-crypto-unicorn-hits-signup-snags">United States, Turkey, Sudan, or China</a>. And if equal distribution is a goal, allocating a significant chunk <a href="https://whitepaper.worldcoin.org/tokenomics">of all the tokens that will ever exist to insiders</a> is another curious choice. Early documentation put that insider number at twenty percent; it’s now slated to be at least twenty-five.&nbsp;



Who are these insiders? It’s some combination of Worldcoin developers and their partners, Orb operators (with signup bonuses that exhibit a <a href="https://twitter.com/zachxbt/status/1452065666824028160">pyramid-like structure</a>), and a <a href="https://venturebeat.com/consumer/worldcoin-launches-a-global-cryptocurrency-that-will-be-given-to-every-person-on-earth/">slate of (in)famous investors</a> including Sam Bankman-Fried and Three Arrows Capital. Such self-dealing is not the plan one would expect, to put the point mildly, from an operation with genuine egalitarian ambitions.



Read more from our opinion section: <a href="https://blockworks.co/news/worldcoin-eyeballs-scan-brooklyn" target="_blank" rel="noreferrer noopener">Worldcoin hackable by cutting off someone’s face, draping it over your own</a>



Now that Worldcoin has launched, we know a bit more about how token distribution will work. It is not entirely reassuring.



There’s a well-known crypto trick; they call it a “Sam Coin” (yes, after <a href="https://blockworks.co/tag/sam-bankman-fried" target="_blank" rel="noreferrer noopener">that Sam</a>). The idea is to release into circulation a very small percentage of all the tokens that will ever exist. Despite low liquidity and trading volume, some eye-popping fully diluted market cap numbers can result, which make for great marketing and creative accounting.



Worldcoin — much like MAPS, a <a href="https://twitter.com/DrNickA/status/1588132362847748096">notorious crypto dud</a> — <a href="https://twitter.com/DrNickA/status/1683404751164022786">is a Sam Coin</a>.



About one percent of the ten billion Worldcoin tokens that will ever exist are in circulation, <a href="https://www.coindesk.com/business/2023/07/24/worldcoin-release-tokenomics-report-geofenced-for-some-countries/">mostly in the hands of market makers partnered with Worldcoin</a>.&nbsp;



And yet Worldcoin’s fully diluted market cap, at the time of writing, is somewhere around twenty billion dollars. It’s a great setup to attract speculative retail investors. And those market maker insiders, furthermore, have a deal that guarantees them <a href="https://twitter.com/MomoOnChain/status/1683395484738527233">access to tokens at a fixed price</a>. Their profits are secure. The result is a market structure <a href="https://twitter.com/AriDavidPaul/status/1683627646633013249">primed for manipulation and pump and dump dynamics</a> — familiar to anyone who’s paid much attention to crypto.



Worldcoin is no radical new financial system, and certainly not one aimed at equality or fairness.&nbsp;



It’s just more of the same, but with extra data harvesting steps.



Do not look into the Orb.



<hr class="wp-block-separator has-alpha-channel-opacity"/>



Nick Almond (@DrNickA) is Founder and Architect of FactoryDAO, a next generation modular DAO creation protocol.







Andrew M. Bailey is Associate Professor at Yale-NUS College in Singapore and a Fellow at the Bitcoin Policy Institute.

recent news by Andrew Bailey