Matt Luongo

Zcash will be [doable in Istanbul](https://github.com/ethereum/EIPs/pull/2129), as will Decred and perhaps Sia. Checking on Beam.

[Istanbul has landed :tada:](https://www.theblockcrypto.com/post/49637/istanbul-upgrade-goes-live-on-ethereum)

We'd have to upgrade Solidity 6 days before launch. Too risky for my tastes, but flagging this for v2. Keep these coming! 😍

> With the shutdown, will this make it into the next version? Highly unlikely. If it didn't require a Solidity upgrade, touching the whole codebase, it would still be a...

So! A quick note for next time — normally you'd want a disclosure like this to happen privately [via secure channels](https://github.com/keep-network/tbtc/#security), but in this case we discussed first briefly on...

Okay, responding here from the top. The behavior you're seeing is not ideal for the network, but it's also already mitigated in the protocol and only allows signers to inconvenience...

> From the victims perspective. The only way to fight this exploit today is to increase ETH bond and constantly monitor and notify the abandonend deposits, resulting in higher risk...

> Pushing extra cost on signers who already are taking on risk and costs is a form of victimization for something they have no control over To be clear, it...

> but the reality is that without stakers there is no tbtc. Without *minters and stakers*, there is no tBTC. This is a two-sided market, which is why we're subsidizing...

Looks like we're going to start with `n`-of-`n` to prevent ~~griefing~~ subgroup fraud... meaning we'll want much smaller signer sets for the first release, otherwise any significant network outage could...