ckBTC and KYT Compliance

A couple of thoughts:

Section 1: API Key Security Concerns
Holding an API key in a canister is not considered best practice due to the potential risks involved. In the event of a leak, KYT providers might suffer significant financial losses in the case of abuse.

Section 2: The Uniqueness of ckBTC
ckBTC has established itself as the de facto wrapped Bitcoin on the Internet Computer (IC). As a result, the name cannot be reused, and Dfinity will not promote alternative versions such as wBTC. This ensures that ckBTC maintains its prominence within the ecosystem.

Section 3: The Importance of NNS Control
People have come to trust ckBTC because it is under the control of the Network Nervous System (NNS). To maintain this trust, any subsequent wrapped Bitcoin implementations should also fall under NNS (or something with similar trust assumptions) control. However, doing so could become cumbersome and risky for developers, ensuring that ckBTC will always hold a special status since Dfinity will continue to vote on its proposals, but might not vote on proposals to manage other wrapped BTC implementations.

Section 4: Tainted BTC and Wrapping
Concerns have been raised regarding tainted Bitcoin after wrapping. @THLO mentioned that an attacker may lose their tainted BTC sent to the minter. It is unclear whether the minter returns or freezes the tainted BTC. In the event that the BTC becomes untainted, the ability to regain access is uncertain. Moreover, a coordinated attack could potentially allow an attacker to mint ckBTC before their BTC becomes tainted or have access to the API to check if their BTC is already considered tainted and only try and mint ckBTC in the case it isn’t.

Section 5: The Risks of Halting Minting
The worst-case scenario of halted minting can have severe consequences for the ecosystem. It could lead to disruptions in token supply, reduced liquidity, and a loss of confidence in the wrapped token. Therefore, it is crucial to address potential risks and maintain the stability and trustworthiness of wrapped tokens like ckBTC.

3 Likes