pull down to refresh
Spark is a fraud, using it and calling it self custodial is lazy and dishonest
Primal is a company that lost the plot
Cool art and domain you got, but this is positioned as a savings tool ... And if either breeze or sparks servers go down most your users are cooked. Very few will be able to recover, assuming Spark doesn't rug their fully custodial LN deposits.
Good write-up. Many of the issues you mention are already well understood, and, as always, this comes down to trade-offs and probabilities.
From my perspective, the probability that Spark would rug users and prevent them from exiting is very low. By contrast, I saw an order-of-magnitude higher probability of a government raid on our office and the seizure of keys when we were operating a custodial service. That is why we stepped back from that model.
Piggy is not designed to be a tool for storing life savings. It is a piggy bank. There are many risks associated with it, and we understand that clearly. Many of those risks are disclosed in our Terms of Service. Even in the unlikely scenario that Spark became fraudulent and unilateral exit failed, which I believe is close to zero, we would likely be the biggest losers, given our multi-bitcoin investment in building this project. No individual user should be keeping anywhere near that level of funds in Piggy, not even a hundred times less. In that kind of worst-case scenario, the loss should be thought of more like someone stealing a ceramic piggy bank from your kitchen, not like losing a serious long-term savings account.
More broadly, Lightning is not meant for savings. It is meant for transacting. If I were building a tool for storing life savings, I would not rely on current Lightning technology, including fully self-custodial Lightning setups. That problem is already well solved by other tools, including hardware wallets, multisig setups, and similar approaches.
Hug
(By the way, we don’t use Breez, and users can still exit even if our servers are down, so the only dependency is Spark)
I’m openly explaining how it works. Nothing is secret. If you check the ToS, it describes everything in detail. None of the mobile wallets use enclave to sign transactions, yet they’re still considered self-custodial. Primal, your god of nostr, lightning, and sovereignty, uses exactly the same technology. So why do you want people to keep their pocket change in a hardware wallet? We can develop any kind of wallet and this one is a fucking piggy bank…