Two days ago we have made our first step in bringing CeFi into DeFi context using Web3 approach: no more login+password authentication for our clients! As for now and so forth it's a key pair inside YOUR Tronlink that identifies you to the service! And it was successfully tested when the real client has registered and used all the service parts, no problems detected! It's a right thing not to even request the data a service doesn't need, and - especially - to store that data anywhere! Now, even in case of a data breach, no logins, password hashes, emails, phones and so forth can be extracted because we don't have them anywhere - even in our debug logs! And the public keys are as they sound - they are public, so no need to steal them - you can read them from the blockchain!
For our previous clients who've used an old authorization method there's a form on our website where they can enter their login and password for the last time and attach their Tronlink stored key pair. After that they can use an easy way for logging into our ecosystem just using a Tronlink key pair - and that very moment all the data stored for them is wiped out from our system. Why we're keeping the data for now? - It's a part of our CeFi to DeFi transition process and we can not authenticate the client in the old way without them, but after the Tronlink is attached - Web3 is used and we do not need any other data for that client.
Blockchain-based referral system and staking of our TRC-20 token will be released soon - it's in a development testing now, stay tuned for updates!
Log in or sign up for Devpost to join the conversation.