Kidnappings; are we ready?

ECC, ZF and Shielded Labs are all entirely composed of KYC’d people.

Do we think this will age well?

4 Likes

I’m not a fan of KYC but this is a bit much. I’m not a fan of the extreme fear mongering. We all know there are bad folks in the world, thanks for reminder.

I think we should focus on the good, unless your goal is to scare everyone away… :light_bulb:

5 Likes

Third time this happens in France, in 2025. Extreme fear mongering?

I don’t think so. We should have this conversation.

Think about it for a sec, and reverse the logic you’ve just expressed. Isn’t it potentially scary to participate to Zcash activities (governance, etc) given there’s hardly any place for someone not comfortable with disclosing their identity at any point? I know it’s theoretically possible, but if there’s really nobody doing it, maybe it’s not realistically doable.

I think we should discuss anything we can do to protect people involved in the project, including suggesting to let go of legal identities. And we should obviously also be more welcoming and encouraging of anon identities.

If you cant see how this is socially awkard then I don’t know what to say. You must be a hit at the partys :sweat_smile:

Pointing out how the world is fucked up doesn’t make folks want to particate in any governance let alone an all anon one.

1 Like

Sorry, I didn’t realize we shouldn’t talk about socially awkward topics, even if they are extremely relevant.

Let’s agree to disagree and leave this post for people wanting to express what we could do to decrease the chances of contributors to the project being negatively affected by things such as kidnappings if you don’t mind.

Or is it going to be like unified addresses and we’re going to wait until someone gets doxed and we publicly shout oh wow emergency fix release. Only it wouldn’t work here, it’s something to think about way ahead of time.

You are talking and zero folks are listening. Much effective, very wow.

Its going to accomplish one thing: less particaption. Good job!

I pointed out the UA issue long ago, it is a Education problem.

Folks can-not-wait for ECC, or any other group/person to do the correct thing, because they have other priorites or it would have been fixed by now.

notice the date

Good luck substantiating this, and if you can’t, consider not doing it next time.

Good luck substantiating this, and if you can’t, consider not doing it next time.

Please respect the CoC and let this thread be if you have nothing constructive to say here.

This is funny coming from you. I will :+1:

1 Like

I agree this is a very important topic. One thing I have noticed is that all the incidents I have heard about happened in Europe. That is somewhat surprising since my impression is that the US has more crypto rich people than Europe, yet I haven’t heard about any such incidents in the US. France seems to be particularly bad, and I am pretty sure that this is organized crime. I think it would be an interesting discussion as to why this is more prevalent in Europe than the US. One reason might be that there is no federal police force in the EU, making it easier to escape by crossing national borders.

Anyway, the most obvious precaution is to be anon as you suggest, but for KYC’d people it is imo to stay away from Europe, or at least not announce that you are going there. I don’t think Zcon should be hosted in Europe any time soon.

2 Likes

I think it follows crypto adoption and once that’s unlocked, kidnappings can happens to public figures (even lesser publicly known) where law enforcement is seen as weak. There’s a lot not to like about the US, but I can’t imagine it would be a good idea to kidnap someone there, it’d be a pretty lethal idea. Poorer countries all over the world will likely become more and more affected however. I actually expect Europe to positively adjust to this over the medium term.

This is just the beginning and we should all individually prepare for such events; protect our contributors, and guide our users in understanding not just how to cryptographically protect themselves using our apps, but also exactly how to secure their finances with Zcash at the center. We have too much resources centered around code development and too little towards education and broad discussions around privacy. Those would be very beneficial and could attract more privacy-minded people to the project, even if they are not into crypto.

The more public members of the Zcash community like Zooko, Josh, Jason, etc.. certainly need to be careful with their personal security but they don’t necessarily have the private keys to a large crypto exchanges coffers like in the OP post, so theoretically the incentives are less.

Good personal OPSEC is always important.

Reminded me of this old XKCD comic

3 Likes

I think it’s the opposite, here’s why:

The kidnapping of a prominent Ledger employee has immediately unleashed a very unusually large police force, because (I would argue) Ledger is important for France, for its reputation, for its tax revenues. The most recent kidnapping also affected the leader of a French company, and immediately thereafter, a strong public message from the CEO of Ledger.

Individuals “like Zooko, Josh, Jason, etc..” with known (expected to be, and expectation matters more than reality here) large holdings are actually less risky targets for kidnappers because the state would not have the same type of incentive to react as quickly and forcefully.

Bingo:

Targeted attacks on high-net-worth individuals: Victims are specifically chosen because their wealth is public knowledge. “In one case we had, the victim was taken hostage at his place of work, and the attackers knew how much crypto he owned and where his children were. These details were used to coerce him into transferring the funds.”

As I said.

1 Like

Do I need to say more.

I’m no bestie with @zancas either, but I think his approach of the old school Volvo is not only tremendously more inspiring, but also a lot safer on the matter discussed here.

Likewise with ZF, can’t extract much details, wealth or otherwise; good.

ECC? I understand @joshs is being watched by LE because of previous threats, and I think it’s a great thing because he’s very front and center…

1 Like

There we go: Florida teens accused of kidnapping crypto investor and stealing $4M.

1 Like

Did some digging and found a list of all known physical crypto attacks. Seems to have really picked up steam since 2020.

3 Likes

Got interested so I plotted the number of physical crypto attacks by state/country. Seems to be pretty equal between USA and EU actually.

4 Likes

Strange how this keeps happening in France, a country notoriously known to be in a very acute fiscal crisis and suffering of capital flight. Probably all just an improbable coincidence.

so some Coinbase users KYC data leaked

this is not the first and wont be the last hack/leak
KYC is dangerous for anyone holding or trading large enough amounts for criminals.

DEXs fix this, or some sort of ZK KYC so your data never leaves your device.

1 Like

There are so many ways to get doxed, it’s scary.

I wish our project would be a beacon of light in the privacy space, not just one in the cryptography.dev sphere.

We really need an anon counterpart to ECC, ZF & Shielded Labs. Ideally one that would focus on privacy, UX and governance. I think it will happen in due time and I’ll be there for it, but with that being said, for now it’s probably better to have the back of Shielded Labs that is just getting started.

1 Like