Kinto Workshop - ETHGlobal Bangkok 2024
ETHGlobal·Thu, Oct 9, 2025, 12:00 AM
Join us for a Kinto Workshop with Victor Sanchez from Kinto. Join us at the Kinto Workshop to learn all there is about building on Kinto! From User-Owned KYC and native Account Abstraction to sybil resistance, enhanced security and wallet insurance - there's a lot of interesting components for developers on Kinto. This workshop will cover the basics and the not-so-basics of how to build on Kinto and utilize one-of-a-kind Kinto features while you build. This workshops took place at ETHGlobal Bangkok, a 3-day hackathon held November 15 to 17 2024, that brought together the most skilled web3 developers, designers and product builders from all around the globe for a weekend-long adventure to advance the Ethereum ecosystem! ----------------- Follow us: https://x.com/ethglobal Check us out: https://ethglobal.com/ Email us at: hello@ethglobal.com
Transcript
[Music] thank you everyone welcome to e Bangkok 2024 we are extremely excited to be here we are Kinto my name is Victor Sanchez and I'm the CTO and one of the co-founders um of the of the chain today we're going to go through a couple of things uh but we're going to start on first what's Kinto why is the reason to build on Kinto and a little bit on the specifics on how to make it work um during the hackathon and of course we're going to take a look at the prices as well so let's start on why to build on Kinto first of all it's important to understand that Kinto is fully evm compatible which means that everything that you already know about evm you're going to be able to use on kto no matter what so if you already are thinking on on pretending to build a evm application you're going to be able to to to Deon kto no issue however there are three important things that you need to know if you thinking on developing on Kinto first of all is that yes and do not run yet I promise there is an explanation for this you have to be KY SE or KY bit on Kinto in order to both develop and manage the applications however and this is really important this kyc and KYB is never a stored on chain and it's done in the more privacy preserving way possible your information will never be stored on chain it will never leave the kyc provider that you choose from an an initial list of three and you will create essentially this k to a wallet with the kin to ID which is a surrogate for that uh onboarding process and you will be able to check if an account is kyc or not if it's sanction saves or not in a given jurisdiction and most importantly you will be able to do all of that with one line of code checking those three flags that I just mentioned another very important thing is that everything on Kinto is ACC destruction we are EIP 4337 compatible and everyone including you developers are going to be creating a smart contract wallet this a smart contract wallet called the mamory wallet will allow you to do several very important things first save a ton of gas in fact for uh final users Kinto is a gasless experience it means that through the sponsor pay master and our developer portal you're going to be able to pay for the transactions of these uh kyc and KYB users and they are not going to require uh sorry ethereum Kinto in order to make those transaction happen we are going to offer you however because we that it can be daunting right to do user operations uh right right away especially if you have never been touched uh by EIP 4337 or by or by a smart contract wallets you're going to be able to use our Kinto wallet SDK with just a few lines of code finally you will see that we have a streamlined the chain and all its applications for user experience and this includes you developers so if I haven't convinced you yet about why to build on Kinto let me add 20,000 more reasons on top top of that we are going to be uh choosing our best Kinto app overall and uh give it a price of $7,500 and then we're going to open two tracks the smart contract API track and the Kinto wallet SDK track first and second place 3500 1500 in both of those categories finally you are a student please make sure to let me know directly on your application when you send uh at the end of the of the of the hackathon on Saturday night and make sure as well uh to take care of your ux and UI because there is a special price as well for ux and UI finally I'm going to be releasing before the end of the afternoon a documentation for Ben our Integrated Security firewall uh and we have our partners right there Joanna uh and they going to be as well for the best Ben integration a price of $500 all right so without further Ado what is Kinto Kinto too fast uh that's something that happens with me sorry so uh k is the first L2 developed on the arbitrum nro stack and we like to say that we are what base is to optimism Kinto is to um arbitrum basically we run parallel to arbitrum one and arbitrum Nova therefore we settle directly in mainnet our mission is to create a safe space for developers Defi and trat five to engage on and that's why now you probably you are understanding already that kyc aspect of it uh just yesterday a big trfi institution from from Europe deployed 20 million of tbll thanks to these protections that I mentioned before our two pillars are security and usability I have explained security a little bit but security doesn't matter if you are a new user that have never touched crypto the dream of kto as an L2 is for people to forget that they are using an L2 we will see ourself as a defi super app thanks to that usability prospects that I'm going to be commenting as part of my talk so Quinto is designed for developers and it doesn't matter if you are a veteran or you are just starting uh what you're going to see is first of all you have that permissionless and decentralized kyc KYB is still permissionless because anyone can start that process and no one can stop you from doing that we just have added one consensus rule to the stack to the arbitrum consensus stack we have modified gu in order to do this uh in order to have that guarantee that we know who the counterparty is and which jurisdiction they are on but once more that pii will never be transferred to any Pier onchain or to any of the partners that you use unless you sign that data finally we are as I said fully evm compatible and we are not only providing that free kyc that I mentioned before we are also doing constant analysis for anti-money laundering we are doing kyt we are analyzing statically and dynamically every contract deployed and every transaction made so we are able to freeze that those skinto ID that I mentioned at the beginning in case that a malicious attack or a malicious contract is detected on the Chain this by the way allow us to do something that is a very first on the Walt of elu and is that we have partnered with brid and Hyper native to offer insurance at the chain level every single wallet on Kinto has up to $2,500 against the smart contract hacks insured and you can buy additional tiers of insurance through uh the king to application a few differences that are very important so as I mentioned right we are using these smart uh contract wallets uh by default on Kinto this is really important because what happened to EAS well EAS can be signers of that smart contract wallet but EAS cannot on their own interact with the chain everything is a user operation that goes directly to the entry point that we have developed therefore all users need a smart contract wallet and as part of that onboarding that I mentioned when you go through the kyc you also will deploy your smart contract wallet will receive on the background thanks to the sponsor pay Master the necessary gas and users will will experience it as a gasless uh overall experience another very important thing all users need a valid keing to ID the wallet has an nft a soulbound nft called the king to ID that is the one that stores the flags that I mentioned before it's kyc it's KYB is safe in this jurisdiction and other useful wallets that we will see as part of our API finally uh basically these kyc and compliance rules are enforced at the node level which means that this cannot be hacked through a smart contracts right because uh this consensus rule reside in this modification that we have done um at the GU level all right whoops sorry about that press the wrong button for a second apologies let's go back I'm going to stay here even though I don't like the stand so how does it work basically the first time that the user arrives to Kinto they are going to uh have to select a kyc or a KYB provider CA plat and we have recently added on Pho one that that user completes the kyc or the KYB process those uh are going to be stored in the kyc provider and it checks that pii but it never leaves it never starts on the Chain after this basically on the successful kyc we're going to create through the K through the kin to Identity note your wallet and your kin to ID and not only that we are also creating this is a multi wallet which is really important to offer that level of security that we were mentioning before but that first signer is a turnkey manage signer that is triggered to either your Biometrics or your fingerprint or your face or your device itself or your password manager if you have it once that you have cleared all of this process you will end up with a Kinto wallet with at least two signers the first one being trigger to your Biometrics a Kinto ID that is clear to operate on the chain so let's talk a little bit about the wallet as I mentioned before if you are familiar with thep 4337 um this wallet is absolutely compatible with the standard it's a multi- by default as I mentioned before and it has integrated this kyc AML kyt and Security based rules there is also these pasky based signatures that makes it extremely easy to to use and when you go through through the process you will see that you can do kyc create the transaction go against the faucet deploy your first contract in literally putting your finger a couple of times on top of your on on top of your laptop there is another very important thing as there there is no pet eating your 24 Wars or a boating accident losing your Kinto wallet because thanks to that kyc system you can also recover your wallet I w't I won't mention who lost it already but we have a user a very big well that lost access to to their wallet and by rwi seeing they were able to recover the wallet through that recovery signer that we have as part of the Kinto wallet finally is that easy and a straight for ux that I was mentioning at the beginning and that you can experience at en. kin. xyc SL onboarding now everything that I'm going to talk from now until the next 16 minutes is almost the stepbystep our development guide if you go to docs. Kinto doxyz and find development guide you will see and I promise uh we stand by our word a 10 minute setup that 10-minute setup will imply doing your kyc see setting up your deployer EA preparing your environment setup and finally creating your first Kinto app and using it and I promise it's exactly 10 minutes so let's take a look at that process a little bit first of all you're going to have to set up your deployer OA this is very important as I told you before um everyone including the developers are going to need to have a smart contract wallet right however uh developers uh I'm going to let you cheat and the way I'm going to let you cheat is basically you can nominate an EA that you're going to use to deploy and to set up your own contracts how do you do that you go to en. kin.
sycd developer don't worry it's all on the guide as I mentioned before so no need to take notes and just copy and paste the public address of your deployer EA set your deployer account put your fat finger or show your face to the laptop to make that signature and you're going to have that uh ready and you're going to come to the developer portal in the developer portal you will see what is your wallet what is your deployer EA and you're going to be able to do two things from this screen both very important one add balance to your deployer EA so you can operate against those contracts that you are generating you're going to be able to create new apps and as you see here I have already my Victor test counter so you're going to be able as well to top the pay Master for the test counter so again if someone wants to increment my counter they are never going to require uh gas right kto in order to to do so because the pay Master pays for the entire party all right one second so how do you create your first app on Kinto basically you are going to arrive and all of the apps on Kinto and this is another of the kind of beautiful things of Kinto is a 721 um nft so basically you're going to create this uh nft that has a couple of things number one you have all of the um contracts that are going to be part of your application so if your application has one contract it's very easy but let's say that you deploy 20 40 50 on on that piece so this nft has a list of all of the contracts that are included as part of your applications you also can include more than one EA obviously we mentioned before that you had that ability of having one EA that interacts with your contract but it may be that your security model requires more than one EA to directly without the user operation attack those contracts you are going to be able to do so finally the metadata also includes the details of the sponsor pay Master another of the beauties of having Kos apps as nfts is that you can very easily transfer or burn those applications as part of your development process so uh you know it hasn't happened yet I believe but you could literally sell your application to someone else if you wanted to which is pretty cool all right so the first thing that you're going to do in order to get started with Kinto is you're going to set up our uh RPC you're going to get your private key of that developer OA obviously that never leaves your your computer you're going to for instance try to deploy a contract in this case a simple counter and once that you have your counter address you are going to go back and click on that KN up button that I told you before you are going to in here the address of your of your um of your counter and then you're going to be able to establish rate limits for who can use your pay master and how obviously the there there could be dos attacks right against your pay master so you want to make sure to know hey what is the gas limit per amount of seconds or what is the number of requests that each of one of those addresses that is using my app can do and of course you are able to charge uh as part of your application whatever you want but the gas for those transactions are going to come for what you top up on your application in the developer portal okay so once that the app is created now you can directly uh start working with the wallet SDK so as I mentioned before this can be kind of challenging right if you have never sent a user operation be before uh doing that UI and preparing and packaging those user operations to the entry point could be a little bit challenging however we have prepared for you this Kinto web SDK download the example and take a look at exactly this you're going to need to put your app address in this case the address of your counter when you start as part of the G and you're going to um call to the line create K to SDK with that app address once that you call it to the connect method you're going to be able to start sending transactions and those transactions those user operations are going to be as easy as let me know where are you sending that transaction to in this case the counter address let me know the value of that transaction one e way if you want to and the data in hexadecimal that you are sending from that moment on the SDK takes care of everything else and this by the way is array you can send as many user operations on that transaction As You Wish once you have it kto sdk. send transaction and you have a wonderful promise on the other side to either have the successful hash or an error uh coming from here if it's the first time that they connect they are going to need to do the same thing that you did going through that process of uh doing the kyc creating their wallet Etc how do you do it on your site extremely easy go call to Kate create new wallet and you're going to trigger that process on your web application directly so there is a react SDK example that we have done that integrates already uh my counter uh so you can test it uh and increment it and uh you can see kind of all of the methods that are part of the Kinto web wallet SDK so you can take just download the react SDK example again all of those links are in the guide that I mentioned at the beginning click on J install and you're going to be able to uh get those packages as I mentioned one of them the kto wallet SDK make sure that you create a valid SSL certificate for your project in Local Host this is important because at part as part of the pasy you require SSL to make those signatures work with the pasy so it's really important that you don't Mi don't miss this step it's just three lines but without this it won't work and on the previous hackathon I went through over this with like 20 teams or something like that so I added this slide please remember to create vssl certificate before getting started once that you have it make sure that you add that def. kin. xyc or whatever you are calling your application uh prir into your local host and of course it needs to match the SSL uh certificate that you just created once that you have that JN start and you're going to be able to start editing this you will see that the files by default are called def. Kinto xyc PPM dev.
to dosc keypm and you have them directly in your package.json if you have another name make sure to edit them make sure that you put your uh contract address on the app transaction and once you have it you will be able to see this you will click on login sign up that will connect your Kinto wallet once you do that you will be able to increase the counter and send the first example user operation as I mentioned before well it's as you see this counter increases this is my my application I will be paying for a lot of gas for all of you to pay those increments but but play around feel free uh to try to hack my app or try to tag my sponsor pay Master rules see if you can break it all right there is as well a smart contract API and as I mentioned before a smart contract reference so if you go uh smart contract tracks and prices as well go to smart contract reference on docs. kin. xyc and you will find um a lot of very useful contracts I recommend that you start in one called The kyc V the kyc viewer has very useful methods like uh is this address which is my wallet an individual yes or no is this kyc and you will see that there are others like is company and you will see others like is sanction safe etc etc so you can make uh very useful applications like for instance dinari I don't know if you are familiar with them they do a stocks on chain they have deployed on Kinto and they use these methods to the to determine if you can buy US Stocks or Canada stocks on Kinto can you hold Tesla yes or no depending on some of these flags and this is one of the examples that we have in here so as smart contracts API I'm I'm not going to go into detail in there because our time uh is limited but basically remember that the idea is exactly the same you have these user operation arrays that you're going to create and once more if you have never created the user operation what you need to know is that our ktoo repository includes helpers that will allow you to create us user operation at the Smart contract level with a helper that is extremely useful give me the blockchain ID give me what is the uh source and the destination give me the value Give me the nons give me the private keys that are you on that array that we show show at the beginning and then en code with signature whatever you want to do you're are going to start always with wide listing the app on the wallet that is another of the security features that Kinto has but then the next transaction is going to be one more create user operation and the only two things that you need to care about is increase the nons and then called increment into this case so again you can decide to do that with the very easy to integrate web wallet SDK or do it directly in your smart contract and there are different tracks different prices and different benefits to both options finally as I mentioned before all of this is in dog. Kinto doxyz you have as well the development setup these are all the links that are going to be available as well in there but if you are watching this online or you are watching it after the hackathon you will have a reference always on this spot we have a very active developer community on Kinto so make sure that to join not only the global uh Discord but discord.
com invite Kinto um to talk with our community of developers and I want to finish and I hopefully I have a few minutes for questions after this but I want to me to finish mentioning something extremely important I have been working together with my two co-founders and an excellent smart contract developer now for almost seven months to put together a lot of stuff you have the stack arbitrum you have the infrastructure Cala is our uh um uh infrastructure sorry I would chain as a service uh service you have things like netlify for the website you have FAA for the things that we cannot put anywhere else you have RPC noes like noce anchor and quicknote that give you Global access wherever you are with a fraction of a second you have security with Hyper natives chain analysis iron blocks you have kyc KY an AML providers integrated in this chain oops there we go you have things like the data availability layer you have the sequencer decentralized sequencers explorers like blog Scout you have the bridging that goes through socket and allows you to do uh chain abstraction and do swabs with other chains you have the bundler with pimo you have an on Ram with coinbase you have turny utils and wallet through Dynamic chain with allow you to do uh things like connecting your Twitter account as a signer the reality of it all though is that none of this matters the reality is that all of this is work that we have done for you the developers because we believe that the killer application is not any of these features that we have hammered our way through to make this chain possible the reality is that we are here today because the killer app is going to come from you not for not not from us and we are really really looking forward to see what you guys build with them with this said Thank you welcome to e bangok 2024 and I'm looking forward to see what you buil on K all right that's a record for me I'm a sper my DNA doesn't allow me to summarize or to speak uh as slow so yeah I have four minutes for questions so if anyone has a question I'm very happy to answer I want to ask is the Smart contract APS is API is compatible to other EPM chain 100% all of our smart contracts apis that I show you on that reference they are even am compatible everything is solidity so if you are uh if you have contracts for um your your your application in any other evm chain you can literally take the same contract at one line if is kyc if is sanction safe in this jurisdiction and you are done okay thank you of course more questions if you have them two minutes if not uh do you have an idea do you know what you're going to build on on on if you want to pit it this is the time please yes can we yeah thank you so much um so my question is uh does Kindle support those Omni solution like layer zero because you guys using the accounts abstraction right so uh I don't know if it's when we Implement that if there's going to be any issues have you tried that so right now layer zero is not connected to ginto we use however an alternative solution with from Super socket it's called Uh the super Bridge uh you can take a look at the documentation as well on our docs but if you have any questions I will be at our booth and I can help you out uh doing you know any cross messaging chain uh sorry any cross mess cross messaging uh message that you need to send or if you want to breach uh items I can help you out with that okay okay thank you of course any other questions 60 seconds no all right in that case thank you very much uh enjoy the hackathon and yeah I hope that you sleep more than what I'm planning to do but I think yeah all of you won't sleep at all have a good one everyone cheers [Music]
Automatic transcript — names and jargon may be misspelled.