Security

Introduction: The Vision for Grindery Wallet

Grindery is committed to redefining the cryptocurrency wallet landscape by offering a platform that is easy to use, secure, and ultimately decentralized. The Grindery Wallet is designed with three groundbreaking features: Keyless Setup, Walletless Transfers, and Gasless Transactions. These features are made possible through "zero onboarding" via Patch Wallet, advanced functionalities like bundled transactions and gas sponsorship enabled by EIP-4337 account abstraction, and a strategic roadmap toward progressive decentralization. Together, these elements aim to provide users with an intuitive and secure experience, while also laying the groundwork for the autonomy and resilience that come with a decentralized system.

Current State of Grindery's Infrastructure

Grindery is currently built on Patch Wallet, a "zero onboarding" wallet that is seamlessly integrated with Telegram ID. Utilizing EIP-4337 account abstraction, this wallet allows for advanced functionalities such as bundled transactions and gas sponsorship. At this stage, users are required to place their trust in Grindery for authentication and in Lit Protocol, along with Patch Wallet, for transaction signing. The platform is on a path toward progressive decentralization, with the aim of achieving full decentralization by the first quarter of 2024.

Roadmap to Decentralization

The existing smart contracts and on-chain components will continue to serve as the backbone of the platform for the foreseeable future. A transition is planned wherein trusted providers will be replaced by decentralized alternatives. Specifically, authentication will be transferred to dauth.network, and signing services will transition to Lit Protocol's Lit Actions. These changes will ensure that users can access their wallets in a completely permissionless manner, even if Grindery or Patch Wallet were to cease operations.

Comparison with Centralized Wallet Systems

Unlike centralized wallet systems commonly found on traditional exchanges, Grindery offers a unique blend of security and user autonomy, progressively moving toward full decentralization. In centralized systems, users must relinquish control of their private keys and place their trust entirely in the exchange for both authentication and transaction signing. This creates a single point of failure and potential vulnerability. Grindery's approach, starting with a "zero onboarding" Patch Wallet and transitioning to decentralized services, not only enhances security but also ensures that users will retain permissionless access to their assets, irrespective of the operational status of Grindery or Patch Wallet.

Compliance and Resilience

Grindery is in the process of implementing a comprehensive, multi-faceted security architecture that aligns with the stringent standards of fintech SaaS companies and complies with the Monetary Authority of Singapore (MAS) guidelines. Our roadmap includes the integration of advanced data encryption algorithms, the establishment of Role-Based Access Control (RBAC) for nuanced access permissions, and the incorporation of DevSecOps into our Software Development Life Cycle (SDLC) for ongoing security vigilance. These initiatives will be complemented by regular penetration testing and IT security audits, all aimed at ensuring a secure, resilient, and compliant ecosystem for our users.

The Roadmap

As part of our strategic roadmap, Grindery, in collaboration with Lit Protocol, Patch Wallet, and dauth.network, is on a mission to decentralize the entire system and create a trustless network. In the interim, we're doubling down on security by streamlining our technology stack and eliminating as many third-party components as possible, including bot software. It's worth noting that while we integrate seamlessly with Telegram, our platform is not confined to it, nor can Telegram impose any restrictions on wallet access for Grindery or its users. Our immediate focus is on implementing robust security measures, protocols, and processes that fortify the system's safety. This will enable secure transactions across the network, supporting payments with high-value tokens like ETH, USDC, and other major ERC20 tokens, as well as NFTs on leading blockchains. The culmination of these efforts will be the full decentralization of the platform, aligning with our ultimate goal of creating a secure, efficient, and decentralized financial ecosystem.

What This Means for Users

For our users, this roadmap translates into a progressive enhancement of features and security. As of today, you can receive, send, and earn G1 tokens through our platform. However, it's important to note that we currently do not officially support, nor do we recommend, transferring any tokens of significant value to our wallets. Our immediate focus is on expeditiously implementing robust security measures. Once these are in place, we will extend our support to a wide range of tokens, allowing for secure and versatile transactions. Upon achieving full decentralization, you can place your trust in Grindery wallets with the same level of confidence and security as you would with any of your other non-custodial wallets.

Additional Resources

Telegram Security Best PraticesRoadmap