ETHBEAT (formerly L2BEAT)

Home

The CROPS guide

4 projects

Protocols that hold to CROPS: Censorship resistance, Openness, Privacy and Security.

Read our mandate

What ETHBEAT stands for and how we work.

Privacy

All 16 projects

Value locked$875.75 M−29.0%1y

Deposits$3.58 B+16.3%1y

Top protocols

PrivacyTVL7dVol 30d

1Tornado Cash
Privacy assessment
- Public observer: Private. Each pool has one fixed amount and no in-pool transfers, so every withdrawal spends exactly one deposit.
- Chain analyst: Private. A relayed withdrawal hides among all unspent deposits of its pool, the anonymity set, which differs sharply between pools.
- Network observer: Private. The app works in Tor Browser and downloads every deposit of a pool, so its services learn the pool but not the user's note.
- Privileged insider: Private. The pools cannot be paused, upgraded or made to reveal anything.
- Future adversary: At risk. Whoever breaks elliptic-curve cryptography can test whether a given deposit could fund a withdrawal, since commitments use a Pedersen hash on an elliptic curve.
$662.02 M$406.63 M
2Railgun
Privacy assessment
- Public observer: Private. Everything inside the pool is hidden, including which shield funds which unshield.
- Chain analyst: Private. The candidates for an unshield are the shields of the same token.
- Network observer: Private. With a local node as direct endpoint for reads, RailOxide keeps Ethereum reads local and sends the rest over built-in Tor.
- Privileged insider: Private. Only the user holds viewing keys, and DAO upgrades wait 7 days.
- Future adversary: At risk. Whoever breaks elliptic-curve cryptography decrypts every note sent to a 0zk address they know.
$105.48 M$58.99 M
3Privacy Pools v1
Privacy assessment
- Public observer: Private. A zero-knowledge proof hides which approved deposit a withdrawal spends.
- Chain analyst: Private. A relayed withdrawal of a common amount hides among all approved deposits of its pool.
- Network observer: Private. The website works in Tor Browser and scans every pool whole, matching notes locally without revealing the user's deposits to third parties.
- Privileged insider: At risk. The ASP postman can publish a new approved list at any time with no delay, and withdrawals must prove against the latest one.
- Future adversary: Private. Nothing encrypted is written onchain and commitments are Poseidon hashes, so whoever breaks elliptic-curve cryptography recovers nothing from the chain.
$8.57 M$1.60 M
4Umbra Cash
Privacy assessment
- Public observer: Private. Each payment goes to a fresh stealth address, and only the recipient's viewing key shows whose it is.
- Chain analyst: Private. Any of the 11,983 registered recipients could be behind a stealth address.
- Network observer: At risk. The hosted app checks the payee's address with its Alchemy RPC seconds before each payment, so timing ties the payee to the payment.
- Privileged insider: At risk. The hosted app gives the operator the user's wallet address on every scan and withdrawal address in the same session.
- Future adversary: Exposed. Whoever breaks elliptic-curve cryptography matches every past payment to its registered recipient from chain data alone.
—$1.11 M
5Privacy Pools v2
Privacy assessment
- Public observer: Private. A zero-knowledge proof hides which approved notes a withdrawal or transfer spends, and a transfer publishes only encrypted notes.
- Chain analyst: At risk. A note's label passes to every later payee, and the ASP update that first approved it often leaves one candidate deposit.
- Network observer: At risk. The default RPCs, led by Alchemy under 0xbow's key, see the account at sign-in and can time it against the withdrawal.
- Privileged insider: At risk. The ASP postman can publish a new approved list at any time with no delay, and every private spend must prove against the latest one.
- Future adversary: Exposed. Every registered account's viewing public key sits in the Keystore, so whoever breaks elliptic-curve cryptography decrypts every note ever sent to it from the chain.
$632.86 K$1.37 M

Layer 2s

All 90 projects

Value secured$28.28 B−37.1%1y

Activity/UOPS2.37 K−54.3%1y

Top rollups

RisksStageTVS7dUOPS

1Base Chain
Risk analysis
Sequencer Failure
Self sequence
State Validation
Fraud proofs (1R, ZK)
Data Availability
Onchain
Exit Window
None
Proposer Failure
Self propose
Stage 1$13.78 B103.18
2Arbitrum One
Risk analysis
Sequencer Failure
Self sequence
State Validation
Fraud proofs (INT)
Data Availability
Onchain
Exit Window
Emergency: None
Regular: 10d
Proposer Failure
Self propose
Stage 1$9.00 B15.20
3OP Mainnet
Risk analysis
Sequencer Failure
Self sequence
State Validation
Fraud proofs (INT)
Data Availability
Onchain
Exit Window
None
Proposer Failure
Self propose
Stage 1$1.42 B21.58
4Mantle
Risk analysis
Sequencer Failure
Self sequence
State Validation
Validity proofs (ST, SN)
Data Availability
Onchain
Exit Window
None
Proposer Failure
Cannot withdraw
Stage 0$1.16 B0.35
5Lighter
Risk analysis
Sequencer Failure
Force via L1
State Validation
Validity proofs (SN)
Data Availability
Onchain (SD)
Exit Window
None
Proposer Failure
Use escape hatch
Stage 0$1.07 B2.19 K