Regarding https://twitter.com/JEhrenhofer/status/1094037151694630912: “zooko, I respectfully think its misleading to say Zcash users’ funds are safe and no action is needed without further explanation. If users hold Sprout right now, their funds may be at risk. They should move their money ASAP using turnstile tool guide.”
Thank you so much for working on this! You, James Prestwich, Greg Slepak, and others have raised a lot of good objections or criticisms about this.
I wrote in this tweet “Q: Is my money safe? A: Here are two facts…”. This is being quite reasonably interpreted as “Q: Is my money safe? A: Yes! Here are two facts…” but I meant it more like “Q: Is my money safe? A: We don’t know! Nothing in life is safe. Zcash isn’t safe. Bitcoin isn’t safe. Dollars in your bank account are not safe. But here are two facts: we have seen no evidence that the issue was exploited before it was fixed. However, even if it was—or in case of any other such problem in the Sprout pool—this will not inflate the monetary base because of turnstiling.”.
Now beyond the facts there are also recommendations. Our expert recommendation is that no action is needed by users to mitigate this issue. Other experts could make different recommendations.
Of course, we could turn out to be wrong! We’re not omniscient—we’re just experts. If people want to move their money out of the Sprout pool out of an abundance of caution, that’s fine. The only reasons not to are the ever-present risk that you’ll get your money stolen or accidentally deleted when trying to move it (so be careful and don’t rush), and the fact that moving money out of the Sprout pool exposes the exact amount, which could compromise your privacy, depending on your situation.
I’d like to emphasize that it is a super valuable public service to all Zcashers for people like you to scrutinize these issues and provide your own recommendations. It’s wonderful that Zcashers are not solely dependent on the Zerocoin Electric Coin Company for analysis and recommendations. This is an important part of protecting and extending the larger Zcash community.
Thank you so much!