Sonic

Algorand

when

Foundation

The Algorand Foundation has introduced LiquidAuth, a new tool to decentralize wallet authentication and communication in crypto. 
Developers in the crypto space have experienced a vulnerability in wallet communications due to most transactions going through a centralized wallet. On Wednesday, the <a href="https://crypto.news/tag/algorand/">Algorand</a> Foundation introduced LiquidAuth, a decentralized tool that aims to address this flaw.&nbsp; 
LiquidAuth aims to distribute wallet communication by enabling secure, peer-to-peer connections and reducing reliance on central providers. The new project aims to tackle the significant security risk associated with centralized wallet communication services, particularly <a href="https://crypto.news/what-is-walletconnect-how-does-it-work/" data-type="link" data-id="https://crypto.news/what-is-walletconnect-how-does-it-work/" target="_blank" rel="noreferrer noopener">WalletConnect</a>. 
In other words, many <a href="https://crypto.news/decentralized-real-time-communication-is-the-solution-for-data-privacy-opinion/" data-type="link" data-id="https://crypto.news/decentralized-real-time-communication-is-the-solution-for-data-privacy-opinion/" target="_blank" rel="noreferrer noopener">crypto transactions</a> are vulnerable at a single point of failure found in their wallet. This wallet is centralized and most likely relies on WalletConnet, which is susceptible to security flaws.&nbsp;&nbsp; 
Using established standards and protocols, LiquidAuth allows secure, peer-to-peer communication between wallets and applications (apps or dApps).&nbsp; 
LiquidAuth was created to address the vulnerabilities in WalletConnect, but it can also be utilized in other types of traditional web applications. 
“The ‘secret-sauce’ of LiquidAuth is weaving together the best of already established protocols to create a truly decentralized way to authenticate peer-to-peer communications,” Bruno Martins, Principal Architect at Algorand Foundation told crypto.news in an interview.&nbsp; 
 You might also like: <a href="https://crypto.news/tether-to-decommission-usdt-on-algorand-and-eos/"> Tether to decommission USDT on Algorand and EOS </a> 
<h2 class="wp-block-heading" id="algorand-addresses-centralization-communication-risks">Algorand addresses centralization communication risks</h2> 
The growing need for LiquidAuth stems from security risks associated with centralized communication providers. WalletConnect is widely used in the crypto industry as a central communication link between wallets and apps. However, this system introduces <a href="https://crypto.news/bitrace-highlights-rising-crypto-fraud-risk-as-trading-platforms-introduce-web3-wallets/" target="_blank" data-type="link" data-id="https://crypto.news/bitrace-highlights-rising-crypto-fraud-risk-as-trading-platforms-introduce-web3-wallets/" rel="noreferrer noopener">vulnerability</a>. 
“LiquidAuth can use multiple channels and ways to find each other’s IP to do P2P comms; therefore, it does not have a single point of failure,” Martins said.&nbsp; 
Martins further elaborated on the issues with WalletConnect, “Any application and wallet needs to ask permission from WalletConnect to enhance features and often, with their new cloud setup, register for whitelisting. They are willing to blacklist certain regions due to geo-political reasons.”&nbsp; 
LiquidAuth aims to eliminate these restrictions by providing a decentralized, permissionless alternative. 
“The whole web3 space signals immaturity to big integrators when they have to trust an non-open protocol (even if implementations are open source) for the flow of information,” Martins said.&nbsp; 
<h2 class="wp-block-heading" id="liquidauth-features">LiquidAuth features</h2> 
LiquidAuth offers several improvements to WalletConnect. According to Martins, “LiquidAuth allows any ecosystem wallets, apps, or businesses to establish P2P authenticated communication, enables wallets to provide proof of device ownership, and enables proof of knowledge of the required secret keys related to a user’s identity and/or accounts.” 
In other words, LiquidAuth lets wallets, apps, and businesses securely communicate and prove device ownership and <a href="https://crypto.news/pepe-tokens-shady-wallet-activity-nefarious-ex-team/" target="_blank" data-type="link" data-id="https://crypto.news/pepe-tokens-shady-wallet-activity-nefarious-ex-team/" rel="noreferrer noopener">user identity</a>. It ensures that only verified messages are sent between wallets, improving security.&nbsp; 
LiquidAuth’s decentralized design also means there is no single central server, which lowers the risk of attacks. 
<h2 class="wp-block-heading" id="open-source">Open-source&nbsp;</h2> 
One of LiquidAuth’s main principles is its open-source nature. Martins emphasizes that LiquidAuth is fully open source and utilizes only open standards.&nbsp; 
LiquidAuth serves as a means for combining existing infrastructure, standards, and protocols without the need to rely on only one company. This reliance on one company or product for the flow of information leads to serious vulnerabilities.&nbsp; 
LiquidAuth ensures interoperability and security without introducing new vulnerabilities. This approach allows for seamless integration across various digital platforms. 
<h2 class="wp-block-heading" id="governance-and-community-involvement">Governance and community involvement</h2> 
The Algorand Foundation hopes to improve and maintain its project with community contributions. 
“We will maintain our own implementation and improve it to give the Algorand ecosystem unique decentralization levels,” Martins said. The foundation welcomes contributions, suggestions, and changes from developers and organizations to enhance LiquidAuth. 
<a href="https://www.algorand.foundation/" target="_blank" rel="">Algorand</a> believes that the benefits of a decentralized, permissionless system will naturally attract big developers. 
The primary motivator when adopting LiquidAuth is the freedom from reliance on a centralized entity. Providing projects and wallet developers with the freedom to create their protocols and systems without seeking permission from a specific company or product is an immense incentive in itself. 
 You might also like: <a href="https://crypto.news/sonic-hits-100k-wallets-and-17m-transactions-after-testnet-launch/"> Sonic hits 100K wallets and 17m transactions after testnet launch </a>

Interview: Algorand launches LiquidAuth to combat WalletConnect vulnerability

Table of Contents

crypto.news

Other articles published on Jun 26, 2024

Grab Your Chance! BlockDAG’s $2M Giveaway Outperforms As XRP And STX See Notable Gains

US State Department Unveils $5M Bounty For OneCoin Scam Mastermind

Jupiter DEX aggregator implements Solana’s Blinks, offering swaps through any link

FBI warns of new crypto scams involving fake law firms

Best Crypto Presales for Long Term Wealth in 2024 : Top 6 Crypto Presales for a Breakout

Crypto Analysts Rally Behind BlockDAG’s $53.5M Jump Amidst Solana ETF Debut & PEPE Price Fluctuat...

Join our free newsletter for daily crypto updates!