ETHBEAT (formerly L2BEAT)

Home

The CROPS guide

4 projects

Protocols that hold to CROPS: Censorship resistance, Openness, Privacy and Security.

Read our mandate

What ETHBEAT stands for and how we work.

Privacy

All 16 projects

Value locked$851.95 M−27.5%1y

Deposits$3.60 B+17.3%1y

Top protocols

PrivacyTVL7dVol 30d

1Tornado Cash
Privacy assessment
- Public observer: Private. Each pool has one fixed amount and no in-pool transfers, so every withdrawal spends exactly one deposit.
- Chain analyst: Private. A relayed withdrawal hides among all unspent deposits of its pool, the anonymity set, which differs sharply between pools.
- Network observer: Private. The app downloads every deposit of a pool, so over an IP-hiding route its services learn the pool but not the user's note.
- Privileged insider: Private. The pools cannot be paused, upgraded or made to reveal anything.
- Future adversary: At risk. Whoever breaks elliptic-curve cryptography can test whether a given deposit could fund a withdrawal, since commitments use a Pedersen hash on an elliptic curve.
$641.89 M$390.21 M
2Railgun
Privacy assessment
- Public observer: Private. Everything inside the pool is hidden, including which shield funds which unshield.
- Chain analyst: Private. The candidates for an unshield are the shields of the same token.
- Network observer: Private. With a local node as direct endpoint for reads, RailOxide keeps Ethereum reads local and sends the rest over built-in Tor.
- Privileged insider: Private. Only the user holds viewing keys, and DAO upgrades wait 7 days.
- Future adversary: At risk. Whoever breaks elliptic-curve cryptography decrypts every note sent to a 0zk address they know.
$106.20 M$63.45 M
3Privacy Pools v1
Privacy assessment
- Public observer: Private. A zero-knowledge proof hides which approved deposit a withdrawal spends.
- Chain analyst: Private. A relayed withdrawal of a common amount hides among all approved deposits of its pool.
- Network observer: Private. The website works in Tor Browser and scans every pool whole, matching notes locally without revealing the user's deposits to third parties.
- Privileged insider: At risk. The ASP postman can publish a new approved list at any time with no delay, and withdrawals must prove against the latest one.
- Future adversary: Private. Nothing encrypted is written onchain and commitments are Poseidon hashes, so whoever breaks elliptic-curve cryptography recovers nothing from the chain.
$8.56 M$1.50 M
4Umbra Cash
Privacy assessment
- Public observer: Private. Each payment goes to a fresh stealth address, and only the recipient's viewing key shows whose it is.
- Chain analyst: Private. Any of the 11,983 registered recipients could be behind a stealth address.
- Network observer: At risk. The hosted app checks the payee's address with its Alchemy RPC seconds before each payment, so timing ties the payee to the payment.
- Privileged insider: At risk. The hosted app gives the operator the user's wallet address on every scan and withdrawal address in the same session.
- Future adversary: Exposed. Whoever breaks elliptic-curve cryptography matches every past payment to its registered recipient from chain data alone.
—$757.26 K
5Privacy Pools v2
Privacy assessment
- Public observer: Private. A zero-knowledge proof hides which approved notes a withdrawal or transfer spends, and a transfer publishes only encrypted notes.
- Chain analyst: At risk. A note's label passes to every later payee, and the ASP update that first approved it often leaves one candidate deposit.
- Network observer: At risk. When 0xbow's registry feeds fail, the default RPCs, led by Alchemy under 0xbow's key, receive the account right before its withdrawal.
- Privileged insider: At risk. The ASP postman can publish a new approved list at any time with no delay, and every private spend must prove against the latest one.
- Future adversary: Exposed. Every registered account's viewing public key sits in the Keystore, so whoever breaks elliptic-curve cryptography decrypts every note ever sent to it from the chain.
$566.47 K$1.48 M

Layer 2s

All 90 projects

Value secured$27.59 B−36.6%1y

Activity/UOPS2.40 K−55.1%1y

Top rollups

RisksStageTVS7dUOPS

1Base Chain
Risk analysis
Sequencer Failure
Self sequence
State Validation
Fraud proofs (1R, ZK)
Data Availability
Onchain
Exit Window
None
Proposer Failure
Self propose
Stage 1$13.63 B94.67
2Arbitrum One
Risk analysis
Sequencer Failure
Self sequence
State Validation
Fraud proofs (INT)
Data Availability
Onchain
Exit Window
Emergency: None
Regular: 10d
Proposer Failure
Self propose
Stage 1$8.73 B11.99
3OP Mainnet
Risk analysis
Sequencer Failure
Self sequence
State Validation
Fraud proofs (INT)
Data Availability
Onchain
Exit Window
None
Proposer Failure
Self propose
Stage 1$1.41 B27.07
4Mantle
Risk analysis
Sequencer Failure
Self sequence
State Validation
Validity proofs (ST, SN)
Data Availability
Onchain
Exit Window
None
Proposer Failure
Cannot withdraw
Stage 0$1.12 B0.32
5Lighter
Risk analysis
Sequencer Failure
Force via L1
State Validation
Validity proofs (SN)
Data Availability
Onchain (SD)
Exit Window
None
Proposer Failure
Use escape hatch
Stage 0$1.01 B2.24 K