imToken 2.13.5 extends Ethereum’s “You sign what you see” and risk control features to 11 more chains, enabling seamless signing across wallets. Additionally, we’ve added a “Transfer with cross-chain bridge” option for getting tokens within the wallet, giving users more flexibility when topping up their accounts.

Furthermore, we’ve enhanced our non-custodial ETH staking service with batch validator management and address-based grouping for improved efficiency and convenience.

The update is as follows 👇👇👇

• Optimized signing experience and risk control system for 11 chains
• Getting tokens is now more convenient with cross-chain bridge transfers
• Batch management of ETH validators enabled for improved efficiency
• Upgraded WalletConnect 2.0 for a smoother desktop experience
• Supported Scroll, the native zkEVM Layer 2 solution

Extended “You Sign What You see” and Risk Control Features to 11 More Chains

The previous imToken update brought the “You Sign What You See” feature to Ethereum. This new release extends this intuitive signing experience to 11 more chains — Bitcoin, Cosmos, Tron, Nervos, BCH, Litecoin, Polkadot, Kusama, Filecoin, Tezos and EOS.

We’ve also upgraded the risk control system of these chains. Users will receive alerts for triggered risks, like compromised account permissions when accessing risky DApps.

Security alert when accessing risky DApps

Learn more: Sign What You See for Safer Transactions

Get Tokens with Cross-Chain Bridge Transfers

To make it easier for users to obtain digital assets, imToken has provided a “Get tokens” entry that supports easily acquiring tokens through purchases, withdrawals from exchanges, and transfers from other wallets.

In this update, we have added “Transfer with cross-chain bridge” under the “Get Tokens” entry for Layer 2 networks. Users on Arbitrum and Optimism can now click “Get tokens” — “Transfer with cross-chain bridge”, choose a bridge and transfer in assets from other networks to start their Layer 2 journey.

Note: “Deposit” and “Withdraw” are now consolidated under “Bridge”. If you want to make cross-chain deposits and withdrawals on Layer 2 networks, click “Bridge.”

Learn more: Easily Get Tokens with imToken and Dive into Web3

Batch Operations of ETH Validators

No matter how much ETH you hold, you can easily participate in a staking pool or non-custodial staking through imToken to enjoy stable returns.

imToken 2.13.5 enhances staking services with validator batch management, streamlining batch exit and withdrawal setup. Validators are now categorized by associated wallets for simplified management and improved staking experience.

WalletConnect 2.0 Optimization for Smoother Desktop Experience

To deliver a more stable and secure DApp interaction, we’ve fully supported WalletConnect 2.0 since June, enabling imToken users to scan QR codes and connect with desktop DApps across multiple chains. This allows seamless DApp engagement across networks.

imToken 2.13.5 improves WalletConnect 2.0 functionality with clearer connection prompts and operation guides, further strengthening stability and security when accessing DApps via WalletConnect 2.0.

Supported Scroll, the Native zkEVM Layer 2 Solution

This zkEVM-powered Layer 2 solution natively supports EVM and provides scalability. Major protocols like Sushi and Aave have already joined its thriving ecosystem.

Want to get a head start and tap into potential opportunities? imToken offers direct access to DApps on Scroll. Simply tap the central button at the top of the Asset page, switch to the Scroll network, and hit “DApp” in the toolbar. You are one click away from the hottest DApps on Scroll.

How to Download/Update

For Android users

• New users: Download from the imToken official website (https://token.im).
• Existing users: Update directly in the app.

For iOS users

Need to download from the App Store.
Note: imToken is not available on Mainland China App Store.

You can also send “Download” to support@token.im to get the latest version of imToken.

Important

• Make sure that all wallets are properly backed up before upgrading
• Never disclose your private key, seed phrase, or Keystore
• Learn more: https://token.im

imToken 2.13.5 Enhances Signing Protection and Simplifies Asset Management was originally published in imToken on Medium, where people are continuing the conversation by highlighting and responding to this story.

Ethereum’s transition to proof-of-stake has allowed ETH holders to participate in securing the network by staking their coins. In return, stakers earn attractive rewards in the form of newly minted ETH. The average APY is about 4.51% and the medium APY is roughly 3.57%.

At first glance, the APY for Ethereum staking does not seem particularly high. However, this system is quickly gaining adoption, with over 27 million ETH worth $4.2 billion now staked. That represents 22.91% of the total ETH supply.

So why do so many people choose to stake their ETH? To understand the appeal of staking, we first need to take a step back and examine what Ethereum staking actually involves.

What is Ethereum Staking?

Ethereum staking involves depositing ETH into smart contracts to become a validator on the network. As validators, users are responsible for:

• Storing network data
• Validating transactions
• Proposing and verifying new blocks

In essence, validators provide critical infrastructure to keep Ethereum secure and add new blocks to the blockchain.

In return for providing these services, the Ethereum protocol rewards validators by issuing new ETH as incentives. Validators can earn greater rewards for staking more ETH, aligning their interests with securing the network.

Validator rewards originate from two main sources:

• Staking Rewards: New ETH minted by the protocol to incentivize participation. This makes up 73.4% of all rewards.
• Block Rewards: A portion of fees from transactions included in each block. Fees account for 17.7% of rewards. There’s also extra revenue called MEV (Maximum Extractable Value) which validators can capture, making up the remaining 8.9% of rewards.

However, validators who act dishonestly or improperly will be slashed and lose a portion of their staked ETH as punishment.

Ethereum Staking is Data Validation, Not Investment

It’s important to clarify how ETH staking differs from traditional investing. Stakers are not “investing” their ETH in hopes of earning unsustainably high returns. The rewards come from real economic activity on Ethereum in the form of fees and protocol-issued incentives.

Stakers are providing valuable services and getting paid for it. They help decentralize the network and share in the upside as Ethereum grows. It is a sustainable system that discourages manipulation and properly incentivizes good behavior from validators.

Global Distribution of Validators

As of 2023, there are over 860,000 validator nodes on Ethereum that have staked ETH and are participating in block production and transaction validation. This provides a high level of decentralization.

Importantly, these validators are distributed across many different countries rather than concentrated in one region. The United States accounts for around 34% of validators, the most of any single country. And Germany follows with roughly 13% of the validator base. Other major participants include the UK, France and Canada each account for 3–6% of validators.

This worldwide distribution helps make Ethereum highly decentralized and censorship-resistant. If validators were concentrated primarily in a single country or region, it would raise concerns over centralization and aligned interests. But with validators dispersed globally, no single entity can control the network. All participants have incentives aligned around securing Ethereum and supporting its continued growth and adoption.

Evaluating the Different Staking Options

There are several ways ETH holders can get involved in staking:

• Solo Staking: Running your own validator node requires 32 ETH and high technical competence. The most secure and permissionless option but lacks liquidity.
• Staking Services: Also need 32 ETH. A provider maintains infrastructure and operations for you. Non-custodial so you retain ownership.
• Pooled Staking: Requires small amounts like 0.01 ETH. Providers aggregate funds from many users. Easy to use but introduces counterparty risk.
• Centralized Exchanges: Can stake any amount but relinquish control of assets. Highest trust requirements.

Each approach involves tradeoffs around factors like minimums, liquidity, trust, and technical needs. For many, pooled staking strikes the right balance by enabling easy access for smaller amounts while maintaining wallet custody.

Related reading: The Pros and Cons of Different ETH Staking Solutions

Why So Much ETH is Staked

The sheer amount of ETH migrating to staking, representing over 20% of total supply, demonstrates the appeal of this system. There are several driving factors:

• Attractive Rewards: While the APY around 4–5% doesn’t seem very high but is still an enticing yield in the current macro environment. This provides a steady stream of income for long-term holders.
• Convenient Participation: Options like pooled staking open up staking to smaller holders and make the process easy.
• Secure the Network: Stakers help decentralize Ethereum and secure its future. Many are eager to actively support the ecosystem.
• Long-term Potential: Staking ETH now builds your position for the long run as Ethereum scales and adoption grows.

Conclusion

Ethereum staking allows ETH holders of all sizes to earn yields on their assets while helping to secure the blockchain’s future. The incentives encourage participation, with over 20% of the total ETH supply already migrated to staking.

As more user-friendly options emerge, staking will become accessible to more people and strengthen Ethereum’s network effects. Whether you are a whale with a large ETH balance or hold a smaller amount, you can participate in staking.

Major holders can leverage their ETH power to shape Ethereum’s future through non-custodial staking services provided by imToken. At the same time, imToken also makes staking easy for smaller ETH holders through pooled staking features.

Moreover, you’ll be a supported staker because with imToken, you get staking tutorials and our customer support is on standby 24/7 in case you ever get stuck

Related readings:

• How to Participate in Non-Custodial ETH Staking with imToken
• How to Stake ETH with RocketPool in imToken
• How to Stake ETH with Lido in imToken

About imToken:

imToken is a decentralized digital wallet that carries crypto assets, identity, and data in the digital world. Founded in 2016, imToken has provided secure and reliable digital asset management services for more than 15 million users in over 150 countries and regions.

⬇️ Download imToken: Google Play | Apple App Store

💠 Follow us: Twitter | Support | Website

Ethereum Staking: A Way to Store Assets Across Investment Cycles was originally published in imToken on Medium, where people are continuing the conversation by highlighting and responding to this story.

分享者：Tokenlon 产品经理 Randy Lien

大家好，我是 Tokenlon 的产品经理 Randy，是一名技术人员，同时也是一名 DeFi 重度用户。我是宠物爱好者，有一只腊肠犬。如果你想与我联系，可以在 X（ @Randylien）上找到我。开始前，我先简单介绍下 Tokenlon 和 imToken。

• Tokenlon 是一个基于区块链网络实现的去中心化交易支付结算协议，2019 年由 imToken 投资孵化，现支持闪兑币币兑换和限价单功能。
• imToken 最新版本带来了「所见即所签」的全新签名体验，你现在可以在确认之前预览你的交易，以确保交易的细节符合期望。同时，imToken 更新了其风险控制系统，以提供更好的安全性和保护，防范网络钓鱼和诈骗。

本文我将会重点介绍 DeFi，包括如何使用它，其中存在的痛点，以及 DeFi 的概念是如何诞生的。

可以看到，当前的 DeFi 领域已经存在很多令人惊叹的解决方案，包括 Swap（交换）、Staking（质押）、LP（流动性提供者）、Perpetual（永续合约）、Options（期权）、LSD（流动性质押衍生品）和 RWA（现实世界资产）等。不过，尽管有这些丰富的选择，但对于普通用户来说，仍然面临一些挑战。

第一个挑战是交易的难度较高。DeFi 的产品过于复杂，需要更多风险控制经验。同时，交易是一门专业技能，用户必须了解市场趋势、克服自己的情感，以及掌握合适的出售时机。

针对这种情况，我认为购买现货是最常见的方式，它相对容易上手，但需要用户自行操作，必须判断市场趋势以避免高买低卖。

第二个挑战是时机的不确定性，即何时进行买入决策。当你不确定何时购买时，有两种主要方式可供选择：一次性投资方式，它适合迅速进入市场，特别在牛市中效果较好。此外，你可以考虑在市场下跌时购买资产以获得更有利的价格。

另一种是平均成本法：适合那些希望持续投资的人。它在熊市中表现较好，同时让你更加安心，因为你可以持续购买资产，无论市场是涨是跌，从而平均分散风险。此外，这种方法也让你更容易购入资产，特别是在市场下跌时。

接下来，让我们展望一下未来的 DeFi 交易将会是什么样子。

• 未来的 DeFi 交易将更加简单和便捷，用户只需关注价格、预算和持续时间；
• 我们将与专业的市场制造商合作，以确保价格更具竞争力；
• 交易将变得更加灵活和安全，用户的资金将一直在他们的钱包中。同时，我们将提供强大的风险控制机制，以确保用户的投资安全。

在未来发展中，我们将继续优化价格和性能，以确保 DeFi 交易的成本更加低廉，效率更高。同时，追求更好的用户体验，以确保我们的产品能够完全满足市场需求。此外，我们呼吁更多的用户参与测试，以便了解他们的需求和反馈，从而更好地改进我们的产品。

我们需要强调的是，我们仍在不断地开发中，但现在我们的产品已经可以正常运行。这意味着用户可以开始使用我们的 DeFi 交易平台，尽管我们仍在不断改进和完善。我们将继续努力，以确保提供更加稳定和高效的服务，以满足用户的需求。DeFi 领域充满了机遇和挑战，但通过简化流程和提供更多的自动化工具，我们可以帮助更多人参与其中，降低风险，提高收益。

探索普通用户的交易策略｜ETHKL was originally published in imToken on Medium, where people are continuing the conversation by highlighting and responding to this story.

分享者：Charles，imToken Labs 研究员

本次分享的主题是 Intent-Based Swap 以及它将如何影响 DEX 市场。以下分享内容会先介绍目前 DEX 的主流交易模式，然后介绍 intent 概念以及基于 intent 的交易的原理和优劣势，再是目前基于 intent 的主要交易产品及其延伸，最后是 Tokenlon 如何将 intent 结合到其产品设计中。

当下主流交易模式

目前主流的交易模式有两类。第一类是常见的 AMM 模型，简洁的 x*y=k 设计，采用这一模式的 DEX 能够让用户可以随时进行交易，但为了达到这一点，AMM 选择了相对保守的流动性策略，这样的策略使得资金利用率并不高，价格的波动会导致流动性提供者损失资金。此外链上订单还会遇到交易抢跑，或者因价格变化导致交易失败等问题。大家熟悉的基于 AMM 模式的 DeFi 产品有 Uniswap、Curve 和 Balancer。

第二类是链下撮合链上清算的 RFQ 模式，即用户首先询问报价，而后由专业做市商提供报价，在用户确认后完成交易。该模式对于用户相对友好，既不存在滑点问题，也无需担心被 MEV 攻击；但对于做市商则存在挑战，需要兼顾价格波动、订单有效期以及对用户报价需求进行管理。简而言之，即对用户友好，对做市商不友好。因此，AMM 和 RFQ 是互补的关系。

Intent 是什么

目前，用户和 DApp 进行链上交互需要提交完整交易信息，其 Calldata 包含该交易执行所需的全部信息。而 Intent 着重于交易的意图（或目的），并将如何达成意图的中间步骤留给专业的 Solver 角色处理。

如图所示，传统模式下，用户需要在发起交易时明确交易的路径、目的等签名信息。而在 Intent 模式下，用户只需要明确交易目的，而无需操心更多。除交易目的外的交易内容，会由 Solver 来补足，并确保补足后的交易执行结果可以满足用户的交易目的。

基于 Intent 的全新交易（Swap）模式

基于 Intent 的 Swap 只需用户发起交易订单时明确部分条件即可，这个条件可以是价格、时效、交易对手方或成交数量等。其他则由前面提到的 Solver 来填充，并将交易订单上链。因此可以这样理解，在基于 Intent 的 Swap 中，用户定义「要什么」，Solver 完成「如何执行」。

那么具体有哪些优势呢？其一是在基于 Intent 的 Swap 中，用户只需签名信息而无需将交易上链，因此用户不用支付矿工费，即对用户 0 gas。其二是订单最终需要上链，而这一步由用户转到更专业的 Solver 后，既可以提高订单上链的效率，同时又帮助用户避免了设置 Gas Price、Gas Limit、是否有 ETH 等潜在困扰。其三是可组合性好，在用户指定部分订单条件后，Solver 对于具体如何执行的可支配空间较大，可以组合各个流动性源、价格来源等，也因此更容易满足用户的交易目的。

基于 Intent 的 Swap 也有待改善的部分。一是用户如果在签名后反悔了，则需要在链上取消交易。二是由于该类型 Swap 采用 Pull Payment 的方式，因此不支持直接卖出以太坊链上原生的 ETH 币种。第三点是订单难追踪，这一点主要是由于交易实际上链的时间取决于 Solver，也不同于传统模式下可通过 From 和 To Address 字段轻松追踪交易。四是由于该模型下的 Swap 用户只定义「要什么」，因此对于 DEX 而言很难提前模拟交易执行的细节，针对部份条件定义（例如卖出价格 >= target price）较难提前预测最终结果。

基于 Intent Swap 的应用案例及延伸探索

事实上，RFQ 和限价单其实都是基于 Intent 的 Swap 的简单应用。在 RFQ 中，用户只需指定价格、数量、时效和收款地址，订单所需的其他信息则由第三方完成。限价单模式也相似。

目前市面上大家比较熟悉的这类型产品有 1inch 的 fusion mode，CoW Swap，OpenSea 的 NFT 挂单以及 UniswapX。

基于 Intent 的 Swap 不仅限于迭代传统的交易模式，它还打开了新的交易模式和应用可能。该架构是相当灵活的，除了上文列出的 one-time swap 应用以外，Intent 也可作为一种代理授权的实现方式，例如允许专业做市商在某一时间区间、价格区间对某些资产做特定操作，以此实现如网格交易、大额分批买入、TWAP（Time-Weighted Average Price）交易等进阶交易应用。

Tokenlon 如何应用 Intent 设计

Tokenlon 目前的 RFQ 和限价单功能已经是基于 Intent 的 Swap 的应用。此外，Tokenlon 正在基于 Intent 的设计理念开发全新的交易产品，如 BestBuy、网格交易等方向，通过融合行业前沿探索，期待为用户带来更多的价值和更好的交易体验。

imToken Labs 前沿分享 — 基于 Intent 的 Swap 及其对 DEX 市场的影响 was originally published in imToken on Medium, where people are continuing the conversation by highlighting and responding to this story.

Permit Signature Risk Disclosure

Recently, we received feedback from multiple users who were directed to phishing sites after Google ad searches, and carried out unknown malicious signatures on these sites, resulting in asset losses. One user lost about 2500 ARB tokens, and it was found that the user’s ARB tokens were infinitely authorized to the malicious contract address 0x00005cA8824899d3f6c10522D9cc1b04E05A0000.

Upon investigation, this malicious contract address belongs to the Inferno Drainer scam group. According to Scam Sniffer monitoring data, this scam group has defrauded $41.88 million to date, with a victim count of 89484. They have created over 689 phishing sites, targeting over 220 brands, including recent popular projects like zkSync, Arbitrum, Optimism, and Blur.

The analysis indicates that this was caused by users executing off-chain signatures (Permit authorization signatures) on a phishing site. This is a mechanism that allows users to authorize transactions without directly interacting with the blockchain, thus saving on gas fees. However, as the above user cases illustrate, this signature mechanism also provides an opportunity for phishing attacks. Once the phishers obtain the user’s permit, they can transfer the user’s authorized assets without the user’s knowledge.

Note: Avoid signing anything if you do not understand the purpose of the signature, as it could very likely be a scam!

Learn More: Revamped imToken signature for safer and more intuitive transactions

Important

Token authorization is a common operation in blockchain transactions, but it also carries certain risks. We need to exercise caution when reviewing each authorization request and regularly manage them to safeguard assets.

Before Authorizing:

• Conduct thorough research: Do solid research before using a new DApp. Understand its background, reputation, and development team to ensure its credibility.
• Verify contract addresses: When using a DApp, verify the accuracy of contract addresses. Avoid clicking on unclear links or obtaining addresses from unverified sources.
• Use official channels: Always download apps from official websites, or app stores to prevent malware infection.
• Guard against phishing attacks: Be cautious of phishing attacks, avoid clicking on unfamiliar links, and refrain from providing personal information or private keys.

After Authorizing:

We recommend users to regularly use security check tools to check and revoke unknown off-chain signature authorizations and set suitable limits when authorizing.

• Steps to check authorization: Open the ETH wallet, slide the function bar to the left, and click ‘Revoke’. You can see the authorization status by scrolling down the Revoke page.
• Steps to revoke authorization: If you want to revoke authorization, click the menu bar in the upper right corner after entering the Revoke DApp page. Select ‘Connect Wallet’ and click ‘WalletConnect’ — ‘imToken’ to connect your wallet. After connecting your wallet successfully, scroll down to find the authorization you wish to cancel in the list, click the 🖊️ button to edit the ‘Approved Amount,’ and then click ‘Update’ to sign and complete the process.
• Steps to edit authorization: imToken supports displaying details of two authorization methods, approve and permit, including authorization amount, time, token and contract details, etc. You can click “Edit” to modify the authorization amount and time。

Learn More

Besides Permit, in the previous Wallet Security Newsletter, we have disclosed other scams such as fake website scams, SMS scams, mnemonic phrase scams, and authorization scams that also need to be guarded against.

• #1: Fake websites and wallets
• #8: My wallet was drained but my password was not compromised
• #10: Beware of “Zero-Dollar Purchase” NFT Phishing Scams!
• #12：Two major questions about the new scam

imToken Is Always Protecting Your Asset Security

Brand New Signing Experience. You Sign What You See.

In blockchain transactions, it is not uncommon for authorization to be done inadvertently, resulting in signatures being stolen. To address this, imToken has carried out a comprehensive upgrade so that users can easily understand every transaction and the meaning of their signatures. The following are optimization points for different scenarios:

Active Security Protection

To combat the growing threat of malicious signatures, imToken has comprehensively upgraded and improved signature processes and potential vulnerabilities across all areas:

• Mark risky tokens, ban risky addresses and DApps;
• When transferring funds to the contract address, a reminder will pop up to ensure that misoperation is avoided;
• When authorizing an ordinary account, a reminder pops up to reduce the risk of wrong authorization;
• In the token exchange process, a warning alert pops up if slippage is too high.

End

imToken places a high priority on the safety of its users’ assets and, in addition to implementing security measures, flagged 511 risky tokens, 608 risky DApp sites, and 2965 risky addresses in September to assist users in identifying risky tokens and avoiding scams.

If you suspect that a token or DApp is risky, please inform us promptly at support@token.im.

About imToken:

imToken is a decentralized digital wallet that carries crypto assets, identity, and data in the digital world. Founded in 2016, imToken has provided secure and reliable digital asset management services for more than 15 million users in over 150 countries and regions.

⬇️ Download imToken: Google Play | Apple App Store

💠 Follow us: Twitter | Support | Website

Permit Signature Security Challenges and Solutions was originally published in imToken on Medium, where people are continuing the conversation by highlighting and responding to this story.

The Arbitrum Odyssey and imToken Iliad event is back! The Layer 2 journey continues!

Welcome to the imToken Iliad!

This one is simple: Join Arbitrum’s Odyssey campaign while using imToken! For double rewards, and double fun.

Here is how to get started!

Win double: Odyssey + 12 Zodiacs and more

The Arbitrum team invites you on a 8-week journey to explore Layer 2, where rewards are offered for the entire duration. And to sweeten the deal, imToken is offering additional rewards on top for the entire 8 weeks. During the event, imToken will also offer tutorials to help you quickly familiarize yourself with the Arbitrum ecosystem.

Get started here: https://galaxy.eco/imToken/campaign/GCekdUt1tE

Arbitrum Odyssey rules:

• Bridge week（has ended）
  Use any of the 19 selected Arbitrum projects to bridge ETH to Arbitrum and receive 1 badge. If the bridge you choose has the highest ETH transaction volume at the end of the week, you will receive an additional badge.
• Update: This week’s event has ended, and the bridge with the highest transaction volume is Hop Protocol. Users who send ETH to Arbitrum using Hop Protocol during bridge week can claim an additional badge between 09/20 12:00 AM — 09/26 12:00 AM SGT. Click to claim.
• Week 1–7 (Starting from 2023/09/27 12:00 AM SGT)
  Arbitrum will offer 1–2 tasks every week, and upon completing each task, you will earn 1 badge. In total, there are 13 tasks, each corresponding to a badge. Furthermore, if you manage to collect 12 or more of the 15 badges from bridge week and week 1–7, you will also receive an exclusive badge designed by Ratwell & Sugoi.

imToken Iliad rules:

Users who complete Odyssey tasks using imToken can receive both the Odyssey badge and the Iliad badge, for a total of 16 badges.

• Bridge week: 2 Galaxy badges (Earth and Moon)
• Week 1–7: 12 handcrafted Zodiacs + 1 galaxy badge
• Collecting at least 12 out of the 15 badges will allow you to receive 1 exclusive badge.

Users who complete tasks can claim the rewards at the end of each week on Project Galaxy.

Note: Users who complete tasks by getting crypto with fiat onramps during the bridge week will not receive the imToken Iliad badge, but they can still receive the Arbitrum Odyssey badge.

Arbitrum Odyssey and imToken Iliad have begun. 👉 Join now!

Following the gradual release of Odyssey DApp tasks during week 1–7, imToken will offer corresponding tutorials. Stay updated by following imToken on Twitter or joining Discord.

Campaign rules overview

Complete the tasks through imToken to receive Iliad badges.

• Click to view the video tutorial: Hop; cBridge
• Officially announced by Arbitrum, and you can follow Arbitrum’s Twitter

imToken, the best Layer 2 experience

Besides badge rewards, we bring a couple of unique features you won’t find on any other wallet.

Exclusively on imToken:

• 👀 Understand what’s happening: Decoded trade & account activity
• 📊 Watch your DeFi Portfolio: Positions on Uniswap, SushiSwap, GMX, Dopex and many more
• 📲 Get notified of changes in your balance via push notifications

Important for a reliable L2 experience:

• 📸 Bridges, 40+ Arbitrum DApps & WalletConnect
• 💹 Multiple price sources

Learn more about our Arbitrum wallet features:

https://medium.com/imtoken/major-arbitrum-release-everything-you-need-from-beginner-to-degen-e45c8380db45

Download imToken: Google Play | Apple App Store
Follow us: Twitter | Support | token.im

Risk Warning: The content of this article does not constitute any form of investment advice or recommendation. imToken does not make any guarantees and promises for the third-party services and products mentioned in this article, nor assume any responsibility. Digital asset investment has risks. You should carefully evaluate these investment risks and consult with relevant professionals to make your own decisions.

imToken Iliad: Join Arbitrum’s Odyssey with double rewards, double fun was originally published in imToken on Medium, where people are continuing the conversation by highlighting and responding to this story.

It’s an honor to share with you the topic of how wallets can better serve the general public in the future. Today, we’ll primarily discuss the opportunities and challenges that wallets might face in the coming times. But first, let’s delve into some design concepts of abstract account wallets.

Difference between Abstract Accounts and Native Transactions

In native transactions, users first create an account address (EOA) and then use the corresponding private key to sign a transaction, following the Ethereum standard. Once the signature is verified, the transaction is broadcast to the Ethereum network, where it is verified by validators, who charge miners fees and execute the transaction. This is the traditional transaction process.

However, our focus today is on AA wallets, highlighting how its transaction cycle differs from the conventional method. As shown in the diagram, there is an area circumscribed by a dashed line, a component not present in traditional transaction processes. This section can be seen as a piece of information, or “intent,” signed by the user during the transaction, which deviates from the standard Ethereum transaction format. This “intent” represents the action the user aims to perform. The signing at this juncture resembles the EIP-712 signature method.

Now, who is responsible for gathering these “intents” and transmitting them to Ethereum nodes? The abstract account introduces a role called “bundler”, which evaluates the transaction off-chain, determining if it can be successfully executed and whether the expected fees can be deducted post-execution. I refer to this process as “virtual validation.” It simulates the validation before the transaction enters the actual transaction pool. The bundler then forwards the transaction to the relevant nodes, initiating the real transaction process.

Compared to native transactions, abstract accounts introduce three major innovations:

• Information Signature: In the past, what was signed conformed to the transaction’s standard format. Now, only a piece of information is signed, like the destination of a transfer, rather than the full Ethereum transaction details.
• Distinction between Accounts and Signers: Traditionally, no account means no tokens. In the current scenario, the account holder and the signer are two distinct entities. This results in two primary shifts: through contracts, addresses can be pre-generated; since the signer isn’t synonymous with the account, if the signature key is lost, a new signer can be appointed to recover the account.Notably, regarding the pre-generation of addresses: In the past, if you wished to encourage someone to use a wallet but they lacked an address, even gifting a ten-dollar gift card was impossible. With pre-generated addresses, you can directly deposit funds when a user creates a new wallet.
• Gas Fee Abstraction: Apart from account abstraction, the concept of Gas has also been abstracted. This means the gas fees you pay today doesn’t necessarily have to be in ETH; it could be in ERC-20 tokens or any other fiat currency.

Opportunities and Challenges Brought by AA Wallets

Key Management

One of the core aspects closely related to wallets is key management, undeniably a primary focus of ours. In the Web2 context, existing standards like Passkey, FIDO2, or WebAuthn provide us with convenient key management solutions.

However, abstract accounts revolutionize key management. Instead of just ECDSA signatures, we now embrace diverse signing methods. With private keys in phone security chips and contract validation, your phone transforms into a hardware wallet, making mnemonic phrases obsolete.

Abstract accounts enable us to replace the signer in the event of a private key loss while keeping the account unchanged. This amplifies the sustainability and upgradability of the wallet. Additionally, as these accounts are developed based on open-source contracts, their logic and verification methods are transparent to all users, allowing for more customization and a diverse range of frontend interfaces.

For example, there can be mobile apps or web versions, offering users more choices. The persistence of abstract accounts means that transaction histories or accumulated reputation on these accounts may potentially be used for DID in the future.

Addresses

The conventional method of generating blockchain addresses is based on the encoding of public keys. As long as you know the private key, you can deduce the corresponding public key and address. The advantage of this method is that it provides consistency across multiple chains. Users only need to manage a single private key to operate on various chains.

Due to the utilization of contracts, address management of abstract account wallets becomes more intricate. On EVM-compatible chains, addresses might still be traditional. However, on non-EVM-compatible chains like StarkWare and zkSync, the situation diverges. Despite these differences, through ENS management, users can still maintain operational consistency across multiple chains or Layer 2 solutions.

While native transaction address management is popular for its simplicity, abstract accounts introduce new challenges. Ensuring consistent user experiences across various chains and Layer 2 solutions, while taking into account the intricacy of contract accounts, is a problem that beckons future solutions.

Signing message

The signing message process in abstract accounts unveils unique potential and prospects. Unlike traditional native transactions, users are not restricted to a fixed transaction format and can freely express their intentions and desires. This flexibility brings about revolutionary changes to blockchain interactions.

In abstract accounts, signing messages aren’t merely instructions for fund transfers. Users can sign their intentions, specifying actions they wish to perform on the blockchain and applications. With this level of freedom, user interactions can occur across various scenarios, including email, social platforms, messaging apps, and more.

Users can simply write “Transfer 50 ETH to Alice” in an email, without having to go through a complex transaction interface, and the system will automatically recognize the intent and help users complete the transaction. This is similar to how we type keywords into a Google search bar without worrying about the underlying processing details. This model can be extended to various applications, allowing users to easily and quickly complete blockchain interactions almost anywhere.

Gas fees

Paying gas fees has always been challenging in blockchain transactions. Traditionally, users must ensure they have sufficient ETH in their wallets to cover transaction costs. This undeniably complicates matters, as they might need to first purchase ETH, possibly through fiat on exchanges or acquire it in other ways.

However, this issue has been greatly improved within the abstract account framework. Thanks to Paymaster, users are no longer limited to using ETH for transaction fees, reducing the entry barrier and complexity. Abstract accounts also allow for more customization of contracts, enabling them to be designed based on specific needs, including how to charge and pay for transaction fees.

This innovative approach ensures that users can effortlessly and seamlessly transact, elevating the overall user experience.

Account Recovery

Account recovery remains another pivotal consideration. Traditionally, mnemonic phrases have been our primary recovery tool. In abstract accounts, even if the signer changes, account continuity is preserved. This furnishes us with diverse account recovery methods, including multi-signatures, identity verification technologies, or even off-chain solutions like MPC. Such versatility enhances user confidence, knowing they have several recovery means should issues arise.

Given that abstract accounts are contract-based, this implies we can design more modular contracts, integrating various plugins and functionalities. From the changes in user portraits, we can see the diversity of user needs. A beginner may require a wallet that is user-friendly and straightforward, while as they gain experience and their needs evolve, they may desire a wallet with more advanced features, such as DeFi functionality or enhanced security measures.

To cater to diverse user needs, we can design contracts with assorted modules and features. Abstract accounts enable us to flexibly offer services tailored to users’ needs.

In conclusion, abstract accounts offer modular and customizable functions, further realizing differentiation and customization. Yet, high contract execution costs are a concern. We need to scale to cut costs, and we see future wallets leaning more on Layer 2 technology for abstract account implementation and execution.

Mass Adoption of Crypto Wallet：The Challenges and Opportunities｜TOKEN2049 was originally published in imToken on Medium, where people are continuing the conversation by highlighting and responding to this story.

The cryptocurrency industry has seen rapid development in recent years and its application scenarios are expanding and gaining more public attention. However, decentralized wallets, which are a key means of interacting with the blockchain world, still present a high learning curve and usage barrier for the general public.

Unfamiliar technical terminology, a unique method for storing private keys, and the frequent occurrence of loss, theft, and fraudulent events has discouraged or intimidated people from engaging with it.

Moreover, user experience processes based on technical implementation have also imposed a significant learning curve on users. Therefore, helping the general public overcome these obstacles and building a user-friendly decentralized wallet experience has become the vision of imToken and many other industry players.

In the process of exploring the next generation of wallet experiences, imToken has started with user research, market segmentation, and user profiling. Beginning with user needs and pain points, we have constructed an information architecture based on usage scenarios and task priorities. The primary focus has been on novice users and newcomers, while also addressing the needs of expert users for decentralization, high security, and censorship resistance.

During the exploration of user experience optimization solutions, imToken has continually summarized corresponding design strategies. For example:

• Onboarding: Onboarding is to assist users in understanding the new product model, product value, and exploring cryptocurrency. Creating an account and backing up private keys are not the final step. The exploration process without backup or even without an account is also the process of building trust in the product and closing the knowledge gap.
• Token-Centric Information Model: Establishing an information model centered around tokens provides users with a comprehensive understanding when interacting with tokens.
• Segmenting Asset Viewing and In-Depth Analysis: Segmenting the scenarios of daily asset viewing and periodic in-depth analysis, imToken uses smart asset analysis to integrate professional insights into specific scenarios. This makes it easier for users to make decisions by providing effective information to different user types.
• Private Key Backup: Given the high threshold of private key backup, imToken is actively exploring biometric authentication, personal cloud backups, encrypted file backups, MPC, and smart contract-based backup methods. Each backup method comes with its advantages and challenges, and striking a balance between security, convenience, decentralization, and meeting the needs of different users is a critical consideration.

imToken will continue to explore the next generation of wallet products and collaborate with industry leaders to collectively optimize the user experiences of decentralized wallets.

Three Main Components of Wallets

Next, I’d like to share with you the product framework imToken has developed for next-generation Web3 wallets. I’ll cover the issues that the current wallets are trying to solve, existing approaches, and their problems. Lastly, I’ll share with you some future approaches that we have in mind.

I have 3.0 ETH and would like to stake the asset to earn profit

It actually covers three main components of a wallet.

Firstly, the ownership control, which represents who owns the crypto assets and how to easily and securely verify ownership and allow the owner to authorize assets when necessary.

Next, we also need to solve the account and asset management issues, determining the type of assets the owner has and displaying the information in an organized manner to provide insights to the users.

Lastly, the user will need to use the assets to engage in some blockchain use cases, so we would like to understand the objectives the user has in mind and help them achieve them.

Let’s look at how the current wallets are addressing these three components.

At the bottom, we have an ownership control module (also known as key management service) that uses the EOA structure with one pair of private and public keys to manage ownership. For wallets like imToken that manage multi-chain assets, we use the HD structure, allowing users to use one pair of keys to manage wallets on different chains.

However, the assets are still managed separately on each chain, and when users try to engage in on-chain use cases, those experiences are inconsistent across chains. This approach has two main problems: firstly, we use only one pair of keys to manage the wallet, which is a new concept for Web2 users and introduces a steep learning curve. Additionally, this single pair of keys creates a single point of failure with very low fault tolerance.

At the top, assets are managed on individual chains, leading to different experiences for users across chains and restricted liquidity sharing. To address this, we propose the following future approach.

At the bottom, we are going to replace the EOA structure with a more generic ownership control module, which I will discuss later. The benefits of this include introducing more devices and accounts, allowing for risk to be spread across multiple accounts and devices, and making it more user-friendly by leveraging Web2 tools. At the top, we will introduce the idea of a universal account, which aims to provide a chain-agnostic experience to users. This includes multiple components, such as a universal identity portfolio and use case abstractions, which I will discuss later.

This is a side-by-side comparison of the two approaches, providing insights into the differences.

MPC TSS and AA

There are two popular approaches currently in the community: MPC TSS and AA. For MPC TSS, instead of using one key or pair of keys to manage ownership, the ownership is split into different pieces called shares. To claim ownership and sign transactions, the user may need to present multiple shares at the same time. While the concept seems straightforward, there are many more product implementation parameters to consider, such as the number of shares to generate and the relevant threshold setup.

A common approach is the 2–2 approach, where two shares are generated and users must present both at the same time to utilize assets. This is easy to understand but lacks redundancy, meaning if a user loses one share, they cannot recover their wallet.

To address this, some teams use the 2–3 approach, with three shares total and any two can be presented to claim ownership. This adds redundancy but increases complexity and requires user education. Theoretically, any M or N number can be chosen for flexibility, but managing more shares incurs overhead. Another key parameter is the shared storage solution. After deciding the shares and the threshold, where are you going to store the shares?

A simple answer is to store it with a platform operator such as imToken. So as a wallet operator, we are typically more professional in managing this critical information and therefore can provide a more secure service and users wouldn’t have to worry about any other tasks.

However, there are platform dependencies with operators and migrating wallets across platforms lacks interoperability. Engaging with social logins is a good choice for Web2-like experiences and user-friendliness, but relying on centralized Web2 services may not be comfortable for Web3 users.

Other options include storing on hardware wallets and using social recoveries, which have minimal dependencies on centralized services. However, these concepts are complex to explain and to educate users, and social recoveries also have barriers due to the need for widespread blockchain adoption.

Overall, the situation becomes complex as there is a mix and match of different parameters, and businesses may need to consider the best combinations to suit their needs.

imToken is actively exploring different combinations to find the most optimal approach for our business context and target customers. Another approach is the AA wallet, where all wallet logic is written on chain within a smart contract, specifically ERC-4337. The benefits include a programmable ownership control module written on chain, allowing for the introduction of devices, web2 accounts, and more complex logics such as rules, thresholds, and weights design.

Additionally, more programmable use cases can be built, including having someone else authorize transactions or pay gas fees, and social recovery on chain, among other possibilities.

The question here is not about the powerfulness of AA. It’s actually more about how we strategize our product to find out the killer features for our business. And therefore imToken is also exploring this approach.

Let’s take a side by side comparison between MPC TSS and AA. MPC has a flexible setup for different business contexts with most of the things happening off chain, resulting in low cost and multi-chain support due to inheriting the HD structure from EOA.

However, teaching users about multiple shares and redundancies can be complex, and each device and account must engage in signing abilities, limiting the types of servers and devices that can be used.

AA is powerful and can support many use cases, with high transparency in implementation logic and minimal dependence on off-chain infrastructure. However, there is additional cost to wallet users due to information being stored on-chain, and compatibility challenges arise when it comes to multi-chain support since each chain may implement AA differently.

There is no one-size-fits-all solution, as it depends on the use case being served. Changwu, our chief scientist, has proposed combining MPC and AA to maximize their benefits. This is also one of the directions that we are exploring.

Universal Account

The next concept is universal account, which includes universal identity, universal portfolio, and use case abstraction.

For identity, people want to use ENS, a more readable domain name, to manage wallet addresses. We plan to expand ENS capabilities by introducing different formats, such as prefixes, to manage multichain wallet addresses and Web2 identities. However, the cost of ENS domains on mainnet, currently around $5–600 per year, is too high for most users.

We are considering using the secure off-chain data retrieval EIP, where platform operators like imToken purchase a main domain, such as .imToken on ENS, and allow users to register subdomains under it. If it’s Alice, she will be assigned the subdomain alice.imToken, and everything else will follow the same format.

This structure benefits both the platform operator and users, as the cost is constant for the operator regardless of the number of users and users pay nothing. We hope to use this structure to scale our products and serve our customers better.

Additionally, people want to see their universal portfolios across all their wallets, but currently asset information is stored at the chain level and is most accurate there.

We can manipulate the information at the display layer. On the right-hand side, the individual, when users choose an individual wallet view, we can present that information at the information layer. On the left-hand side, if people want to see the universal portfolio view, we can aggregate the information by token assets, so they don’t have to worry about which wallet is holding the assets.

We are thinking of keeping both views and allowing users to switch between them because they have different benefits. The benefits of a universal portfolio are straightforward and work well with portfolio analytics. For the individual wallet view, experienced users may prefer it because it presents information more accurately, allowing for more accurate actions. The display layer not only presents information but also affects user interactions.

Performing actions at an individual wallet view results in use cases that are specific to that wallet. For a universal portfolio, a new way of interacting with users is needed to focus on the use case rather than execution details. This is called use case abstraction. For example, Alice is using her universal account .alice.imToken to transfer 2 ETH to Bob, who specifies his mainnet address to receive the funds.

The question is how Alice can transfer the money to Bob. There are many ways to do this, and our idea is to introduce the imToken transaction routing module, which presents only the most necessary and critical information to the user for decision-making, while handling the rest of the execution. The user can choose from typical options such as fastest or cheapest in terms of cost, or customized logic, such as paying with BTC first. Each option has details on how the assets will be executed at the bottom.

But as a user you don’t have to worry about it. You can just choose the option that is most appealing to you based on your priority and your deciding criteria. And we will handle the rest of the execution for you.

Bob may not want to worry about the receiver address for this transaction, so if he chooses to use the universal account to receive the funds, the situation becomes more complex. However, the logic remains the same. Our transaction routing module is going to find out the best transaction in terms of different criterias and present it to both parties so that they can make a selection.

We are doing this because most wallet features today focus a lot on executions, helping users complete tasks. However, users today face difficulties in making decisions because they need someone to facilitate them and also present them with insightful information.

We want to delve deeper into the needs of the user and ultimately understand the key rationale behind their actions. For instance, when staking, the primary goal is to find a way to generate investment profits based on one’s wealth and risk tolerance. By shielding users from the details and hassles of the execution, we can better strategize our product to fulfill their deeper needs.

The wallet framework, ownership control model, and universal account model that I have shared are the direction that imToken is exploring. The wallet is the entry point for users to the Web3 world, and we look forward to participating in this revolution and bringing a more user-friendly product experience to users.

imToken’s Exploration of the Next-Gen Web3 Wallet UX and Product Framework was originally published in imToken on Medium, where people are continuing the conversation by highlighting and responding to this story.

In yet another industry-leading collaboration, we are partnering with Asia’s largest crypto wallet imToken to expand our offerings across the globe!

Dedicated to delivering the most reliable and intuitive wallet experience and digital asset management services to its users, imToken will work with MoonPay to offer a more accessible and seamless fiat on-off ramp experience. This partnership with imToken will help onboard new users based in Asia, as the market in this region continues to grow.

In honor of this exciting partnership, fees will be lowered to 3.0% for users onboarding imToken using MoonPay!

“Our goal at MoonPay has always been to accelerate the adoption of Web3. By partnering with imToken — an incredible wallet leader in Asia — we are expanding our reach to more users around the globe and enabling a simple way to onboard into the world of crypto,” said Ivan Soto-Wright, Co-Founder and CEO of MoonPay.

“We are excited to forge a close partnership with MoonPay to pave the way for seamless and affordable on-ramp experiences, offering crypto explorers the perfect entry point into the world of Web3 and DeFi, and a trusted gateway for crypto investors to grow their digital assets,” said Chuck Ko, VP of Product at imToken.

imToken recently redesigned the UX of its wallet following feedback from its loyal ecosystem. You can now receive a Fiat-Crypto price quote from MoonPay in one click and checkout using MoonPay easily. Further, imToken supports different chains and you can buy the protocol tokens (E.g. ETH, TRX) using MoonPay to pay for transaction fees.

We can’t wait to see what new developments will come of this exciting collaboration!

About MoonPay

MoonPay is the world’s leading Web3 infrastructure company. It provides end-to-end solutions for payments, enterprise-scale digital asset and smart contracts minting, and world-class design to power Web3 strategies and ideas for the world’s most iconic brands. MoonPay is active in more than 160 countries and is trusted by 500+ partners, including leading wallets, commercial brands, and applications. For more information, visit: https://www.moonpay.com/

About imToken

imToken, a Series-B blockchain technology company headquartered in Singapore, is inspired to make digital life equally accessible to everyone, and we are committed to creating digital wallets that are simple to use, safe, and secure for every user. Since its founding in 2016, imToken has served over 15 million users in more than 150 countries worldwide.

⬇️ Download imToken: Google Play | Apple App Store

💠 Follow us: Twitter | Support | Website

MoonPay partners with Asia’s largest crypto wallet imToken was originally published in imToken on Medium, where people are continuing the conversation by highlighting and responding to this story.

Committed to providing users with the safest and most user-friendly wallet experience, imToken reinvented the signing experience in its latest version of 2.13.1 to deliver a more intuitive and secure process. In addition to that, it has introduced a new “Get tokens” feature on the Wallet page, ensuring a smoother entry into the Web3 world for beginners.

It also added support for three popular networks, Base, Linea, and PlatON, allowing users to seamlessly switch between networks and explore their vibrant ecosystems.

This update is as follows 👇👇👇

• Brand new signing experience, for more intuitive and secure transactions.
• Common deposit methods are integrated for you to get tokens in one stop.
• Added support for Base, Linea, and PlatON networks, making it effortless for users to explore these popular ecosystems.
• Optimized address book management for easier NFT sending.
• Improved DApp search functionality for faster and more precise results.

New signature experience with enhanced visibility and security

As part of the constant pursuit of a better user experience, imToken 2.13.1 has rendered a newly designed signature experience, which enables users to have total control of each transaction with higher granularity. The security risk control system has gone through another upgrade to safeguard the whole signing process.

First of all, imToken has implemented a holistic upgrade to all operation involving signing, such as DApp access, making transfers, token swap and authorization. Taking token exchange, with the latest version, you will be able to see all details such as the exchanged currencies, swap amount, metadata, contract details, and security risk warnings.

The risk control system is also upgraded to provide stronger protection. Now it labels risky tokens; bans risky addresses and DApps; sends alerts when users show abnormal behaviors (e.g., making a transfer to a contract address, or authorizing EOA); sends warnings when the slippage is too high, to make sure that every step of our user is safe and secured.

Learn more: Revamped imToken signature for safer and more intuitive transactions

Common deposit methods integrated for you to get tokens in one-stop

With the new portal, ImToken is offering unprecedented token accessibility. Now, users have three options when it comes to token acquisition: on-ramp services, withdrawing tokens from exchanges, or transferring tokens from other wallets.

It is worth noting that imToken now supports the purchase of tokens through MoonPay, saving you the trouble of operating through exchanges. We have also made a step-by-step guide available for these three easy-to-use options.

Learn more: Seamlessly Get Tokens with imToken for a Smoother Entry Into Web3

With Base, Linea, and PlatON in the supported network list users to easily experience popular ecosystems

In order to further support the Layer 2 ecosystems, imToken v2.13.1 fully supports two popular Layer 2 networks, Base and Linea. Simply tap the drop-down list at the top of the homepage, switch to the network of your choice, and then you can browse the hot DApps by tapping the DApp icon and explore.

In addition, imToken also supports the PlatON network in the latest version in order to users with a more convenient and secure digital payment experience. This allows users to easily manage assets on the PlatON network and access the Dapps deployed on the blockchain.

Learn more:

• How to use Base Wallet in imToken?
• How to use Linea wallet in imToken?

Other features

In this update, we have optimized the address book management features. From now on, users can add the current address to the address book and select an address from the address book faster than ever. We have also optimized the DApp search feature for more precise results.

How to download the latest version

• For Android users
• New users: Go to the imToken official website (https://token.im) and download.
• Existing users: Update directly in the app.
• For iOS users: Go to the App Store and download.
  Note: imToken is not listed in the App Store in the Chinese Mainland.

You can also send “Download” to support@token.im to get the link to the latest version of imToken.

Finally, please always remember

• Make sure that all wallets are properly backed up before upgrading
• Never disclose your private key, seed phrase, or Keystore
• Learn more: https://token.im

About imToken:

imToken is a decentralized digital wallet that carries crypto assets, identity, and data in the digital world. Founded in 2016, imToken has provided secure and reliable digital asset management services for more than 15 million users in over 150 countries and regions.

⬇️ Download imToken: Google Play | Apple App Store

💠 Follow us: Twitter | Support | Website

imToken releases v2.13.0 with enhanced signing security and streamlined token accessing experience was originally published in imToken on Medium, where people are continuing the conversation by highlighting and responding to this story.