James Cirrone

Web3Auth, a wallet-as-a-service infrastructure provider, has launched a noncustodial wallet extension on Firebase, Google’s mobile development platform.&nbsp;



Now, the thousands of businesses and the millions of applications that use Firebase — the New York Times, Lyft and Venmo to name a few — can get their customers using crypto with Web3Auth’s extension.&nbsp;



Web3Auth, which also powers popular crypto storage solution Trust Wallet, uses a multi-party computation (MPC) setup to secure users’ assets. MPC wallets split a user’s keys into several parts, often called shards.&nbsp;



Co-founder and CEO of Web3Auth, Zhen Yu Yong, told Blockworks in May that <a href="https://blockworks.co/news/mpc-wallets-security">his company shards users’ private key into three parts</a>: the user’s device, a social login provider and a recovery method. For a user to access their assets, at least two methods must be triggered.



The recovery methods for Web3Auth includes a manual backup of the device key shard, an SMS one-time passcode and a recovery email.



But for its Firebase extension, Web3Auth told Blockworks that social logins are the only supported recovery methods.&nbsp;



“Users can choose either one of email, Google, Apple, Telegram or Discord among others,” Web3Auth wrote.&nbsp;



According to a press release shared with Blockworks, latency times for people logging in are under 1.5 seconds, which Web3Auth chalks up to its collaboration with Google Cloud for over a year.



“For an unparalleled performance to meet global demand, we needed a multi-region cloud infrastructure setup across the world at Web3Auth,” Yong said in a statement. “This Firebase extension sits on top of <a href="https://blockworks.co/tag/google-cloud">Google Cloud</a>.”



He continued, “No matter where you are in the world, any Web2-centric application or Web3-native dapp can now allow its users to use their social logins with uniform login times.”



<hr class="wp-block-separator has-alpha-channel-opacity"/>



Get the news in your inbox. Explore Blockworks newsletters:



<ul class="wp-block-list">
<li><a href="https://blockworks.co/newsletter/daily">Blockworks Daily</a>: Unpacking crypto and the markets.</li>



<li><a href="https://blockworks.co/newsletter/empire">Empire</a>: Crypto news and analysis to start your day.</li>



<li><a href="https://blockworks.co/newsletter/forwardguidance">Forward Guidance</a>: The intersection of crypto, macro and policy.</li>



<li><a href="https://blockworks.co/newsletter/0xresearch">0xResearch</a>: Alpha directly in your inbox.</li>



<li><a href="https://blockworks.co/newsletter/lightspeed">Lightspeed</a>: All things Solana.</li>



<li><a href="https://blockworks.co/newsletter/thedrop">The Drop</a>: Apps, games, memes and more.</li>



<li><a href="https://blockworks.co/newsletter/supplyshock">Supply Shock</a>: Bitcoin, bitcoin, bitcoin.</li>
</ul>

Google Cloud

Web3Auth launches Firebase wallet extension

Macauley Peterson

The hidden costs of centralization have been on display in spades this year, between the bankruptcies of centralized lending platforms and exchanges, <a href="https://blockworks.co/tag/ftx" target="_blank" rel="noreferrer noopener">especially FTX</a>. Non-custodial decentralized exchange (DEX) ThorChain, meanwhile, has flown under the radar — despite its unique connection to Bitcoin and growing user base.



The DEX is known for being the first — and by far the largest — to facilitate cross-chain swaps between native bitcoin and other networks. Previously, this kind of cross-chain asset transfer required a centralized exchange like Binance or Coinbase: Deposit bitcoin, sell for ether and withdraw to Ethereum — or use a custodial wrapped asset, such as <a href="https://blockworks.co/price/wbtc" target="_blank" rel="noreferrer noopener">WBTC</a>, on Ethereum.



That’s the main problem that developers of ThorChain — which is based on the <a href="https://blockworks.co/tag/cosmos" target="_blank" rel="noreferrer noopener">Cosmos</a> software development kit (<a href="https://www.blockworksresearch.com/glossary#cosmos-software-development-kit-sdk" target="_blank" rel="noreferrer noopener">SDK</a>) — set out to solve. The network beta version launched in April, 2021.



<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
“Instead of trying to bring bitcoin to DeFi via a wrapped asset, let’s bring DeFi to bitcoin,” Chad Barraford, the project’s technical lead, told Blockworks.
</blockquote>



The DEX is conceptually “asset agnostic,” with Barraford likening the notion of being locked into any one crypto ecosystem as “like being a computer manufacturer that will only sell to Japan.”



There have been some forks — attempts to improve on ThorChain’s open-source code — such as Maya Protocol, and Chainflip, but, according to Barraford, “there hasn’t been a design for interacting with bitcoin that maintains economic security, other than ThorChain.”



<h3 class="wp-block-heading">Improving the utility of Bitcoin and DeFi user experience</h3>



ThorChain’s integration with <a href="https://blockworks.co/price/twt" target="_blank" rel="noreferrer noopener">Trust Wallet</a>, a self-custodial, multi-chain wallet provider, is a move to expand the user base of both: Trust Wallet — which is <a href="https://www.binance.com/en/support/announcement/binance-acquires-trust-wallet-a-secure-mobile-crypto-wallet-360010790652" target="_blank" rel="noreferrer noopener">owned by</a> the world’s largest centralized exchange, Binance — brings 10 million active users, a spokesperson told Blockworks. Thorchain, meanwhile, has logged about 62,000 addresses and 9.3 million transactions over its history, according to the <a href="https://thorchain.net/dashboard" target="_blank" rel="noreferrer noopener">latest data</a>.



Blockworks Research analyst Dan Smith said the integration is a significant step.



“People like simplicity,” Smith said. “[You] don’t have to use a site you are unfamiliar with.”



ThorChain, after all, hovers among the top four options in terms of bridge volume, and even did a stint at No. 2 during the peak of the November FTX-driven sell off.



The biggest problem, as many DeFi projects are discovering, is liquidity, according to Barraford.



“The more shallow the pools are, the higher the swap fees will be,” he said. “We do a slip-based fee model, not a straight 30 [basis points] like Uniswap]. At some stage it’ll be uncompetitive, like right now the pools are very very shallow, largely because it’s a bear market.”



That pushes up transaction fees as a result of slippage between traded assets. If ThorChain can attract enough liquidity, the swap fees can drop to become even cheaper than Binance, as they already were during the height of the last bull market.



A new product, “Savers”, launched in November, allows native bitcoin to be included in liquidity pools — without the risk of impermanent loss, or the need to whole any of Thorchain’s native token, RUNE.



That should appeal to bitcoiners, Barraford said, “who want to earn BTC on their BTC” but have no interest in RUNE as an asset.



The eventual goal, he said, is DEX aggregation — giving users the ability to conduct multiple cross-chain swaps in a single transaction, would be a huge improvement to user experience.



<h3 class="wp-block-heading">Promoting DEX benefits</h3>



The turmoil associated with the downfall of FTX and other centralized parties may help refocus attention on truly decentralized projects.



“Users are now more motivated than ever to capitalize on the benefits of self-custody,” Barraford said in a statement. “The latest market developments emphasize the importance of transparency and self-custody, features that are inherent in decentralized finance (DeFi).”



There are even efforts to bring institutional capital into the ThorChain sphere, with firms such as Nine Realms, whose CEO Gavin McDermott commented that, “beyond the philosophical appeal of self-custody, people will use THORChain because it provides an excellent user experience and feature parity with centralized counterparts.”



The biggest risk to the ThorChain narrative seems to be its complexity. Even sophisticated crypto builders like Solana Labs co-founder Anatoly Yakovenko have been confounded by its economic design.



<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"><div class="wp-block-embed__wrapper">
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">Thor is great, but it carries similar risks as wormhole. There exists a set of keys not your own that can spend your crypto.&mdash; toly 🇺🇸 (@aeyakovenko) <a href="https://twitter.com/aeyakovenko/status/1603426133348712455?ref_src=twsrc%5Etfw">December 15, 2022</a></blockquote><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
</div></figure>



This claim — that “it carries similar risks as [Wormhole]” — is objectively false according Smith, who said, “risks do certainly exist, but very different,” with ThorChain.



“Economic security is so important,” Barraford said. Theoretically, a hacker would need to simultaneously compromise the private keys of all of ThorChain’s decentralized active nodes — <a href="https://thorchain.net/nodes" target="_blank" rel="noreferrer noopener">currently 86 of them</a> — to steal the network’s assets. But the validators themselves must escrow a security bond in RUNE such that their own economic incentives <a href="https://twitter.com/ChadThoreau/status/1603433481547096065" target="_blank" rel="noreferrer noopener">prevent malicious action</a>.



Otherwise, it would certainly spell trouble for the ThorChain token, but that’s by design — it also keeps network participants honest. Thus, the token is a critical part of what makes native cross-chain swaps possible.&nbsp;



“The value of the RUNE that I bought would go to zero…We needed an asset that would go to zero, in order to maintain economic security.” Barraford said.



Update, Dec. 15, 11:54 p.m. ET — Yakovenko elaborated in <a href="https://twitter.com/aeyakovenko/status/1603597553009770497" target="_blank" rel="noreferrer noopener">a follow-up tweet</a> that he was referring not to ThorChain&#8217;s economic design, but to the risk of an unnoticed remote code execution (RCE) — a malicious bug — in the node software or hardware.



<hr class="wp-block-separator has-alpha-channel-opacity"/>



Get the news in your inbox. Explore Blockworks newsletters:



<ul class="wp-block-list">
<li><a href="https://blockworks.co/newsletter/daily">Blockworks Daily</a>: Unpacking crypto and the markets.</li>



<li><a href="https://blockworks.co/newsletter/empire">Empire</a>: Crypto news and analysis to start your day.</li>



<li><a href="https://blockworks.co/newsletter/forwardguidance">Forward Guidance</a>: The intersection of crypto, macro and policy.</li>



<li><a href="https://blockworks.co/newsletter/0xresearch">0xResearch</a>: Alpha directly in your inbox.</li>



<li><a href="https://blockworks.co/newsletter/lightspeed">Lightspeed</a>: All things Solana.</li>



<li><a href="https://blockworks.co/newsletter/thedrop">The Drop</a>: Apps, games, memes and more.</li>



<li><a href="https://blockworks.co/newsletter/supplyshock">Supply Shock</a>: Bitcoin, bitcoin, bitcoin.</li>
</ul>