That’s surprising. What’s the best way to verify this, is there an open source dashboard? Dune?
I asked NEAR a few pointed questions about this at Zeboot and was mostly satisfied with their responses, but due to confidentiality rules I’m not sure if I can share.
Even if no user IPs are shared with AML providers, the moment that NEAR Intents sends them an address to screen, you better believe that the provider will log that address forever and tag it as “NEAR User”. Arguably that doesn’t matter much for users that did ultimately send funds into NEAR for a swap, but for the users that looked up a swap quote and decided not to swap, that’s a privacy leak.
NEAR: What is the entirety of information shared with AML providers? Are user IPs, user agents, or affiliate IDs shared with AML providers at any point? (identifying, for example, which 1click deposit address is held by a Zashi user) Can you open source that part of your code for us to take a look at?
Regarding shielded/orchard support, I have never seen an orchard deposit address. What do you mean by orchard support?
I have only seen:
- Transparent addresses in the NEAR Intents user interface for user deposits.
- Transparent addresses in the 1click API responses (perhaps you updated this)
- Transparent addresses holding liquidity in NEAR validators’ TSS vaults
Can we get clarity on which of the above support orchard, or where exactly in your stack orchard is supported?
AFAIK true Orchard support would require that NEAR validators move to FROST instead of using TSS.
I want to caution everyone to what we should flag as “traceable orchard” support across our community. When is an orchard transaction traceable? When someone deposits into Orchard with an exact amount, then withdraws from Orchard that same nearly-exact amount. Especially if the withdraw happens soon after the deposit.
To a new dev in our ecosystem, the easiest way to support orchard is to allow users to deposit into an orchard address, then immediately transfer those funds out into a transparent address. That’s almost as good as not using orchard as all, it’s very very traceable.
When a project claims shielded support, let’s be vigilant about verifying what exactly they mean by that. The “traceable orchard” approach I define above is not entirely bad - it is a baby step towards full orchard support - and is perhaps better than nothing. But what I really don’t like about it is that users get a huge false sense of security.
(Context: Immense tooling and understanding exists for Bitcoin addresses, which is why I strongly support Zcash transparent addresses (which are essentially BTC addresses) for developer evangelism. T-addresses got us NEAR and Maya years sooner, if ever. TSS is the technology that allows Maya and NEAR to safely store massive amounts of Zcash across multiple validators in a mostly-trustless, decentralized way. But it does not support Orchard addresses. For that you need FROST. So, transparent addresses are essential right now, and are absolutely both a feature and a bug.)