Georgios Konstantopoulos I The Future of UX with Paradigm I Pragma Bangkok 2024

[Music] so without further Ado I'd like to bring on Georgio for our next talk and Georgio is going to talk about the future of ux for Designing more and more amazing things on chain so please give georgos a big round of applause good afternoon everyone all right who here has used metamask privie coinbase wallet missed okay nice all right so all of that stuff is getting closer and closer to what true crypto full force crypto ux enables us and full force crypto ux is something that I don't think we have truly experienced the date and this presentation is about showing us that I think we've made great steps towards it my name is Georgio I lead the EA team we're accelerating crypto and I also uh invested Paradigm all right this going on okay great so who knows what this is this model okay great more more people should know what this model is this is the strip link model model stripe is one of the biggest companies in the world and they basically route all payments web 2ux is really really good you go to a website you enter your card information click pay and it works and if it doesn't work you get your money back fantastic gets better Shopify has shop pay shop pay is a one-click checkout solution where you insert your email and you pay if you don't have an email you send it sends you an SMS and you insert a code and you pay hell you don't even need money they have buy now pay later which means I can go one click without even having the money and I can still pay and buy my goods so until we have this type of ux the word consumer crypto is banned and we got to figure out how to get to this kind of ux who here knows about the defense in depth or the Swiss ches model of security okay what it says is that if I'm an adversary and there's a bug I'm going to layer a bunch of things in a row and hopefully the bug from the left side is not going to enter my code base all the way to the right side I claim that we have the same issue but in ux where you don't have an adversary you have a user you have to manage Keys you have to manage Fiat you have to know get what gas is then you get a popup oh my I need to change my chain where is my gas money I need to use a bridge that's a lot of stuff and after you've done all of that stuff you realize that oh my God everything I've done is public so anyone can check what I've done who here has used Dao okay when you go to use that's a small group by the way um when you use D everything is public there's a dune dashboard and I love D there's a dune dashboard that when you go to I can insert my name and will show me all my transactions and my balance until we get to something that doesn't show that we're not going to be able to compete with web to so we need to solve all of these problems and we built a company born out of the open source work that we've been doing for many years with Foundry with re with alloy rev and a bunch of other things to fix ux and we call the iaga as part of our journey in crypto that lasts many years and we resist a lot of temptations that pull us into short-term activities and really solving for the long run and today I hope to demonstrate to you some things assuming that demo CES allow me today so we'll we'll see what happens so just to zoom out on what we're looking for from an account not a smart contract not a wallet I just have an account that I get with an email or with something an account is free it means that I don't need to pay to create it or use it it's safe which means that I don't lose my money I don't lose my account there's no notion of a memonic or a hardware wallet or anything crazy that we've been thought about in crypto it's easy to use which means that if I'm drunk at 5:00 a.m. and I want to buy something and just like click click click click click and it just go through and it's also usable everywhere which means that if I'm on mobile I can log in on desktop if I'm on app a I can log in on app B if I'm on chain a I can log in on chain B and the hard thing about all of this stuff is that you need to really do everything everywhere all at once right and that's challenging and that's a big problem and that's why we've been for over 10 years in crypto and we're still haven't fixed this problem it seems that a crypto powered account can give you two very nice things it can give you the superpowers of stripe and the superpowers of OCTA where stripe allows you to pay anyone anywhere and OCTA allows you to O everywhere for free and ideally you can do it in one line which means that you import the code in your in your web app and you run that code and loow and behold you have not a wallet not the smart contract Wallet not a smart account an account so stop using fancy words just call an account call it a day next so my claim is that in 2025 crypto powered accounts or again accounts are going to not require you to think about Keys they're not going to require you to think about gas they're not going to require you to think about the chain which app you're on or which device you're on and if we don't have that we're never going to grow beyond the internal cycle of meme coins and all of that stuff and no shade but I think we can do better so today I will try to demonstrate you a gasless a keyless account that works across apps and across devices it's not multi-chain but I think we can also make it work multi-chain so I'm going to again I'm going to pray to the demog goods that this stuff works um and yeah we'll see what happens so the first thing I'm going to do is I'm going to close this wi-fi panel um I'm going to switch tabs to is this yep all right so this is our website right it's a harmless normal website am I connected to the internet I am connected to the internet great so this is just a harmless connect website you know it could be your blog your e-commerce page honestly whatever you want it doesn't really matter but what we did is that if you go to the blog on I think we called experiment you scroll all the way down you know again this is like a technical blog it doesn't matter what the blog says but this innocent looking blog um as you scroll down and and it shows something that says your account it says register and sign in so I'm going to register I'm going to click register it's going to give me this popup who here knows what a pass key is okay great fantastic so aasy is a way that I can o without having to think which is really nice whereas right now I need to think a lot when I want to Au and that's a problem so I'm going to click enter it's going to prompt me and if the demo CES are good because my internet is really slow this should create an account all right so this just created an account but it's not an EA it's not a smart contract exactly it's something new it's something that's using a new EAP from the future called EIP 7702 which allows any what we've known of as an account to become a smart contract so in this demo we show just to just to demonstrate to you that is a smart account or an account that can do excellent things I can mint um for free in this case so you would need a Dos resistance mechanism I can mint um coins without gas without popups just with the touch ID which is kind of nice this doesn't require rpcs this doesn't require Bridges this doesn't require Key Management third party apps nothing it's like just you go in and you experience real web 2ux you just log in you click you off action happens great this account is pretty powerful because it can also do um multi calls so not only does it done does it do a single call I can use it do multiple calls and you will see here how it's sent to two places what's nice about this is that it uh means that this works for UNIS swap where they do approve and Swap and just works which again is kind of nice now another thing this account does really well is that it does cross device login so without again without third party services so to demonstrate this to you I'm going to remove the account I'm going to try signing in again but this time I'm not going to sign in with the existing pasket that I had and I've demoed this to bunch of people as you can see so bear with me um I can use use a phone to or security key and actually the nice thing that you will see is that not only does it work it also says is on a USB security key which is kind of nice I can also do it with my UB which I've demonstrated to many people already so I will open my camera app this is just the normal iPhone camera app it's nothing fancy there's no wallet connec inv there's no third party service involved just apple and apple is really good at ux and we're tapping onto that so I'm going to sign it it's going to prompt me to face ID I wish I could share the screen but I had some issues on it you see it says follow the steps on your device um and if the demo goodes are good like I'll be able to off uh in a second again this is just a demo not a real thing but maybe the demo Goods don't like me so maybe I'm going to continue all right we got to fix this so I'm going to continue failed to request credential but usually what this thing does is that it logs you in and you're able to do the Coss device login so contributors welcome on this so the next step from this is to really accept that no longer should the app be going to where the account is no longer should the form factor of a Chrome extension be frankly acceptable no longer should we be expecting that if I'm in a website I'm going to get a pop up to a different website and I'm going to off it there and then I'm going to go back you should really look at like what web 2 does you want web 2 like you know startup style ux stripe style ux you don't want web 2 Bank style ux where they pop you up to a different app where you need to off and then you go back to the app that like you lose conversion you lose users anytime you introduce additional screens you want it to go as fast as possible so the wallet goes to the app or the account goes to the app again what you want is a oneline import that just works and we're in the early phases of having SU we think can be really exciting um and I think there's this observation that the evm which historically was pretty painful to work at um who here has used truffle okay hardhead Foundry okay nice so basically the evos it has been getting better over the years and we're finally able to do more complex things and the two things that enable the experience that I demonstrated is a the p256 curve which is the secure Enclave curve that's available everywhere on everyone's phones right now the demo that I showed also works with Android it doesn't require um iPhone it just is nicer because if you have the same iCloud keychain the accounts are automatically synced so you don't even need to do this QR code flow that I showed uh which evidently is not that robust um and the other thing is that you don't need to also have things like security vendors because you can make the smart contract that backs that wallet that account you can add role based Access Control you can say oh if you're trying to transfer 100 bucks don't you don't prompt the popup because it's going to be using a scoped session key for the next 10 minutes or if you want to do over a th000 bucks it should promp me for the pass key if I'm trying to do more than 10,000 bucks it should prompt me for my UB ke if it's over a million dollars it should set a delay and make me call my mom to like authorize the the rest of the transfer and that's how the real world works and again I don't think we need to reinvent the wheel we should just bring what crypto is really good at which is Keys we should bring the keys into the existing ux to empower the user so the evm has been getting really good at doing these things either with new transaction types with new OP codes with new pre- compiles at the same time the world of performance is rapidly commoditizing which is nice if we can solve the ux layer the performance I claim is basically solved and now the final boss in all of this is the interop and the Privacy layers which is again kind of nice we have solved a big part of that swis cheese that I said I shared earlier again I want to emphasize that we reuse features from the web on the left you see Target the very popular store offering pasy login I think that top down there will be a massive wave of pasy adoption and that Apple I would predict like in the screen that you where it says you know login it will allow the app to program the popup and that's going to be excellent because it means that the popup that you get natively is going to also have information of oh you're trying to transfer you know five bucks to Georgio DOI or something now the thing on the right is pretty nice also because traditionally people have been using pass Keys scope to one web application which means that if you go to another one you really cannot reuse your pass key um and earlier from today Tom and Jake from our team they showed me a demo where we can do cross app web aen using related Origins which is a feature of the standard that I don't think many people are aware of which means that you create your account in one place and that account is instantiated in the chain but that account can also be used across any app which means that I'm on Unis swap I did a swap I go to a I can do a borrow same account no keys no gas just actions to do that we had to implement a bunch of things from the future we implemented four things in this particular demo thing one EIP 772 this is an EIP that's coming to ethereum in March 2024 or whenever 2025 or whenever we do the pectra upgrade it's a great EIP ethereum L1 has it will have it every L2 should have its stat so if you're building an L2 if you're working with an L2 go pressure them to add this IP a sub secondly we're using leveraging the EIP for wallet calls and we're actually extending it somewhat with the bottom left with sequencer sponsored transactions which is basically additional methods for RPC services to know what what's going on with transactions it's not just for sending multiple calls it's actually super powerful and my claim with uh what we called odsy request for comments o1 where the demo we called it experimental one my claim is that the sequencers of the l2s if the l2s are businesses and they want to make good for their users instead of Outsourcing a lot of things they're going to want to offer these things themselves so gas sponsorship is a very natural thing that you want to offer but this extends to really anything it extends to managing managing authorizations extends to bridging it extends to a lot of things so I think the sequencers are going to get really powerful and there's going to be obviously a tension between okay if you're making one sequencer really powerful do you decentralize it and fourth we implemented the rip 7212 which is the p256 curve that leverages web bothan the Apple secure Enclave the Android key store anything really uh and it's quite nice op stack already has it I think Zing already has it I don't know where else it is but it's a really good IP and it should be everywhere so we're also pushing for hopeful inclusion of this in the P pectra upgrade because the ux is really really good other features from the future that we want I think these are the things I'm super excited about a I think account recovery is extremely important when I create a pass key um maybe I just don't carry my phone around right maybe I want to like be able to like log in from another device iide deally I would like to be able to scan some real world credential um or insert my email or something like that to be able to recover my account so let's say I'm at home I have lost my account I'm starting from a new phone maybe I have lost access to my Apple account as well I can always use some like well like relatively standard or stable uh credential to R Zig passport is actually quite nice because it also means I can do rate limiting and that means I can sponsor for example 1 million gas per day per user uh for free transactions on nl2 which is kind of nice now the other two things that I'm really excited for are a stealth addresses because stealth addresses are a technique that we can use to do payments where you don't know who is receiving funds I think one under Explorer area of like development is combining stealth addresses with the AP 772 which means that I can just create smart contract accounts like at random addresses and spend to them and it never looks like I'm like spending to an address that I control or a friend of mine controls which is kind of nice now many people have talked about fully homomorphic encryption that stuff is slow maybe it's fast with like Hardware but like what we want is like things that can operate like a gigas plus per second performance and I think the thing to do here is that we want to scope down the problem to something that really like tangible and in our case token transfers are just additions if you look at token transfers they're just additions there's no multiplications um you get into multiplications if you want to do lending for example but my claim is that if you just do elgamal based additive homomorphic encryption it's good enough for many use cases and the third thing is that we were just chatting with across team this morning that you want to be a able to execute a transaction on any chain so we want to combine ERC 7683 which is a standard for cross chain intent backed operations um with 772 and we think that that can be super exciting we need all of these things in ethereum L1 in every L2 can't stress this enough go to your L2 and tell them add these features if you want to add them more features tell them ux matters I'm losing users go add these features we're happy to help with deploying these features in Dev Nets that showcase full force crypto same I do with your L2 go do with your wallet tell every wallet I don't want to see a pneumonic ever again I don't want to see the gas number ever again I don't want to see Switch Account ever again like if you do that it's embarrassing frankly and you should use another wallet we're able to do that because we have built our the entire stack we built alloy we built revm we started building compiler we built Foundry we built W cryo wagi Ox VM this is full stack ethereum and we're able to modify the entire stack to fix crypto and our nordstar to solve the hardest problems in ethereum and we invite you to join us thank you [Music]