CanYa announces Power Ledger & Bluzelle board member and leading crypto legal expert as new advisors. Sebastian Quinn Watson and Michael Bacina are joining the CanYa Advisory Board and will help us achieve our ambitious roadmap!
Sebastian is a board member of Power Ledger and Bluzelle. He is also a US-based partner at Blockchain global and a qualified lawyer.
Seb is coming on board to create value for CanYa in a number of areas.
Sebastian provides value to CanYa with:
Business and token strategy
Investor and community engagement
Sebastian only provides advisory for a small number of projects that show immense potential. Having Seb on board with CanYa is a huge tick of approval for the project, the token and the broader CanYa community.
“I am delighted to be joining the board of another of Australia’s world leading blockchain companies. It is a leading decentralised company with a strong ethos of social responsibility. I am excited to continue to expand the CanYa platform internationally with leading corporate and blockchain companies.”
Sebastian Quinn Watson
Michael heads the Piper Alderman Cryptocurrency and Blockchain group. This group is one of the leading crypto and ICO regulatory organisations in the world.
Michael is a former developer turned lawyer with over 11 years of experience in leading Australian and Canadian law firms. He advises in a number of areas to ensure CanYa’s legal compliance
“Distributed ledger technology is changing the world. Initial Coin Offerings have created new ways for innovative businesses to raise significant amounts of funding very quickly. Taxation, privacy, anti-money laundering, corporate structuring and other regulatory changes all intersect around this new technology. As a former software developer I enjoy the both the technical details of cryptocurrency as well as the regulatory challenges.”
“The whole CanYa team worked really hard to run their ICO and to comply with the regulatory landscape. The CanYa team and advisors deserve every congratulation for achieving the second most successful ICO in Australian history.”
Further Piper Alderman has recently announced, effective December 2017, that they will be the first major Australian law firm to accept Bitcoin as a form of payment for legal services.
CanYa is proud to be the first to take advantage of this offer and has already starting paying for our legal services with BitCoin!
For all the latest news and updates follow us here:
CanYa has acquired the majority stake in the online P2P software platform Bountysource and its 46,000 users
CanYa has again raised the bar for ICOs following a major acquisition of Bountysource and its passionate 46,000 open-source developer community. In a world where most ICOs (and traded cryptocurrencies) have no product or user-base, this move is unprecedented.
Bountysource directly aligns with CanYa’s long term goals of being a peer-to-peer marketplace of services for digital nomads to work in their own time, on their own terms.
“The CanYa team are aggressively accelerating blockchain technologyadoption in a meaningful way, and we see the acquisition of Bountysource as pivotal in growing fast and introducing more communities to cryptocurrencies.”
John-Paul Thorbjornsen, CEO, CanYa
Bountysource is the world’s first and largest peer-to-peer platform for open-source software developers to post and complete open-source bounties. Bountysource has a passionate community and throughout its 13 year old history has had a number of high profile teams including IBM, Facebook, Adobe, Ripple and Uber.
Jihan Wu and Andreas Brekken, two widely known public figures in the crypto currency community, have also engaged with the platform. The Bountysource community has been growing completely organically by over 1000newmembers every six weeks, which is reflective of the high growth of the open-source movement.
CanYa & Bountysource
The main focus will be working with the existing community to optimise the platform based on their feedback. The CanYa team are excited to see what the growth potential can be with a dedicated full time development and marketing team behind the project.
“This is the perfect timing to double-down on open-source software. With blockchain protocols soon to power the world, there is now a huge expectation that software be open and to be contributed to by a wide variety of users. Bountysource will be the portal and a major repository of open-source software.”
John-Paul Thorbjornsen, CEO, CanYa
Some of the initial plans for Bountysource will include the integration of numerous cryptocurrency payment options including the CanYaCoin, while also refreshing the user experience, reducing feesand adding a portal for ICOs and blockchain based platforms to add bounties for smart contracts. Smart contract auditing is an ever growing space with huge growth potential. It will also create familiarity with everyone in the crypto community and the Bountysource / CanYa brand names.
“Smart contracts need more scrutiny than other types of code – as we’ve seen in 2017 already, exploits and vulnerabilities can be hiding in plain sight. Bountysource will be the best place for blockchain teams to get their smart contracts scrutinised before being pushed live.”
True Global Ventures – Existing Shareholders
True Global Ventures is an early seed investor in Bountysource and will stay on as a shareholder. Additional parties may be involved in the near future to further support the roadmap and vision of CanYa.
Dusan Stojanovic, the Director and Founder of True Global Ventures adds his vision:
“I am delighted by having CanYa and its great team as a new partner in Bountysource. As more and more open source projects reach the market, bounties have become an important source of income to digital nomads all over the world. TGV firmly believes in the power and knowledge of the open-source community, specifically for bounties in blockchain and ICO projects. The timing is perfect and CanYa will be an excellent partner to take Bountysource to the next level of acceptance and growth”
The CanYa ICO will be the first step in positioning CanYa to becoming the first ever Decentralised Autonomous Organisation for peer-to-peer services globally. By integrating a number of emerging decentralised technologies, CanYa will have no geographic or financial boundaries while offering a 20x disruption in price when compared to traditional incumbents.
Ultimately, CanYa will be powered completely by its users and their resources.
CanYa partners with Gladius to offer decentralised DDoS protection
DDoS, or Distributed Denial of Service attacks, cost the worldwide economy an estimated $150bn this year alone. It is estimated that 50% of all websites will face an attack with an average length up to 6 hours long. As a platform for digital service providers, CanYa must ensure that we are protected against such attacks. This is where Gladius steps in.
Gladius provides a cheap, easy to use and tailored decentralised solution to combat DDoS attacks. They also accelerate the way in which content is delivered on your website, allow you to rent your spare bandwidth to the network and provide a number of other value adding services to those that run their own web platforms. Their ICO pre-sale is currently in progress and the reception has been fantastic with over 15,000 ETH raised at the time of writing.
The CanYa and Gladius partnership:
CanYa will be pushing hard to acquire digital service professionals throughout 2018. These ‘digital nomads‘ are generally self-employed web professionals who are the ideal target audience of the Gladius platform. By making DDoS protection affordable and customised, we will be offering and encouraging all of our service providers to utilise the Gladius solution. The partnership will revolve around three key avenues.
Digital nomads can now access affordable DDoS protection
1. Gladius services for CanYa
CanYa the platform cannot have any down time. We are providing the go-to solution for digital service providers to be found, booked,paid and reviewed; therefore, we need to be well defended against DDoS attacks. When Gladius complete their next development milestone (pegged for March 2018), CanYa will be using the Gladius Network for all of our online needs.
2. CanYa secondary service provider
We also want our service providers to be protected. Businesses big or small cannot afford to have their website taken down for hours or days due to malicious third party attacks. Any business or individual on the CanYa platform will be able to purchase Gladius services tailored exactly for their needs.
For example, if there is a freelance that runs their own website, they would be able to get DDoS mitigation, Content Delivery Network (CDN), and Web application firewall (or WAF) services from Gladius going through CanYa.
3. Gladius (GLA) token drop for CanYa HODL club members!
Finally, Gladius have generously offered to air-drop an amount of their GLA tokens (amount and date TBD) to our CanYa HODLers! This further cements the relationship and shows the commitment the Gladius team have to our CanYa users.
We are very excited for the future of this partnership; CanYa (and our users) will significantly benefit from the fantastic solutions offered by the Gladius platform. CanYa can now focus on what we do best, providing the best place to book local and digital services!
One of the problems with an Initial Coin Offering is scammers are everywhere trying to steal money from potential contributors. It is very important that you keep well informed about these nefarious acts and this guide will show you how wekeep you safe, and as a guide for other ICO’s.
There are two main avenues to stealing ICO funds:
Exploit flaws in Solidity smart-contracts, or
Trick users into sending money to fake Ethereum smart-contract addresses.
The best way to defeat #1 is to have solid, simple and well tested smart-contracts. The contracts must be audited by a third party. One of the main priorities is to ensure the integrity of the ICO is maintained above all else.
What security measures has CanYa utilised to prevent unwanted access?
Lock down EVERYTHING!
The most prudent way is to create a totally new server environment, from scratch, only for the ICO. A single person will manage the entire scenario. Every password will be long and unique. Here are some specifics about the CanYaCoin ICO:
Create an entirely new environment. Single point of access. 2-factor (2FA) using Google Authenticator. Do not use SMS 2-factor as scammers can socially engineer phone companies to change sim cards and receive your 2-factor codes. Disable phone security options (see above). Add recovery questions but make them completely random (e.g. not your mothers name questions) and write them down in a secure offline location. Enable AMI access for all external services, and use the contract editor to assign the least number of permissions required to make it work.
We host a static site straight from S3 bucket using CloudFront CDN: make sure it is public read-only! If you configure AWS CLI tools and a separate limited-permission AMI profile to update the bucket, you should configure AWS to send automated emails & SMS whenever a file changes (e.g. index.html) so you have awareness if index.html is modified without your knowledge.
Transfer to a single point such as AWS, or if domain is in lockdown (i.e. unable to transfer just yet), manage from a separate site but change your password to enable only a single point of access. Lock transfers. Enable 2-factor with Google Authenticator. Write down recovery codes.
Buy every other similar domain name, including ones with similar words (for example if you have an ‘I’ in your domain, buy all the combinations swapping with ‘l’).
Enable 2-factor and harden your personal Apple accounts. Never save any account passwords in Safari/Google Chrome.
Enable 2-factor using Google Authenticator. To do this, add 2-factor SMS, then in the 2-factor menu, enable Google Authenticator, then disable SMS. Write down recovery codes. If you are admin, enforce 2-factor. Properly setup SPF and DKIM DNS records for your custom domain(s).
Enable 2-factor (bonus: you get a 10% discount!). Enforce 2-factor for all users. Only give out low-level user permissions such as ‘Author’ to those who need it — this prevents them being able to send mail or export your email list if they get hacked.
Setup proper SPF and DKIM TXT records for properly authenticated mail (don’t use the default Mailchimp or Sendgrid ones). Use SPF “-all” for a hard policy to ensure the mail is rejected (a lot of online guides are wimpy and use “~all” for soft fail. Don’t be a wimp!
Bonus Points: add a default “reject all” SPF record on all the domains you bought up that you don’t use for sending mail:
Not many people have heard about this, but if you add a DMARC TXT record to your domain, you can tell email clients how to treat unauthenticated email. You can start with p=none (just report) up to p=reject. This will ensure Gmail and others send phishing mail straight to spam more easily.
If you enforce full reject policy you may even see a golden key show up next to your mail (like you see with PayPal etc) once they get enough emails to work out you’re legit. It’s best to start with p=none then gradually go higher until reject. Not all mail clients will support DMARC but Gmail and other big ones do. Example of canya.io TXT entry at time of writing this:
"v=DMARC1; p=reject; rua=mailto:firstname.lastname@example.org"
Google more details on how to do this — make sure you test it thoroughly using some fake email senders online to check that your legit mail works and fake ones are binned.
Set up a channel for announcements. For an active community, set up a group, then convert to supergroup. Add other admins but only with limited permissions. 2-factor your login. We created a cool anti-scam bot to add to the group. It detects the regular-expression for an Ethereum contract address and warns users if somebody posts a fake address.
The Scam Bot was created by:
Create a bot using the Telegram BotFather. Disable privacy mode so it can read all messages. Give it a name, description and image.
Creating an AWS Lambda script in Python to read an incoming Telegram webhook (specifically: “message” → “text”) and checking against a regular expression to check for the presence of an Ethereum contract address. If detected, it pulled out the message id and calls the Telegram sendMessage API to post “Danger…”.
Create an API endpoint (POST) with AWS API Manager. Attach the Lambda script and deploy. Copy the https endpoint URL (the AWS one is fine).
Call the Telegram setWebhook API with your API endpoint url and allowed_updates = [“message”]. This will make sure Telegram starts firing update events at your API every time the bot hears a group message. Make sure your endpoint returns 200 OK in order to ‘ack’ the update, otherwise it keeps sending them.
Attach your bot to the group. Give it limited admin rights. Enjoy! It’s essentially free to operate since AWS Lambda+API Manager is so cheap (probably even free tier).
It’s worth the money to buy an EV certificate. You’ll need to register your company with DUNS to make this a little easier. Anticipate this taking several days for authorise. Once you receive your certs, put them into AWS Certificate Manager and attach to your CloudFront endpoint → instant green bar.
If people are used to seeing the green bar (which are a huge pain to get!), it will make scammers job slightly harder to fake your website. Plus it looks cool and gets you +1 cred.
Use a CanYa Ledger if you can get your hands on one (or buy a normal one if you cannot). Write down your backup 24 words in a secure offline location. All transactions are signed on the wallet and your private keys are never exposed. They are brilliant — worth every cent.
Multisig’s are hugely important for a secure team wallet, although there’s been a recent bug in Parity’s mutlisig wallet CanYa still considers them essential for ICO fund management. At time of writing, gnosis has an awesome multisig.
Publish Contract Address?
There’s a few decisions to make regarding when/where to publish the ICO contract address. Our contract address is available on EtherScan and we’ve planned to use only an ENS address for our primary ICO. The contract has a start-block and end-timestamp for time limits. We decided to do this instead of a last-minute reveal as that seems to be a scammers paradise with every scammer in the world posting fake contracts in channels.
Final word on security
There’s been a wide range of exploits,bugs and scams happen in the creation of smart contracts and the deployment of Initial Coin Offerings. CanYa has taken all of the steps list above to ensure we don’t join that list.
CanYaCoin – A strong value proposition and a real life use case.
After a series of introductory blogs it’s time to deep dive into the value proposition and the use case of the CAN token. The Initial Coin Offering marketplace is hugely over saturated right now, which makes it hard for projects with real value to stand out. A continual demand and a token that can be transferred instantly into real world services positions CanYa and the CAN token as a leader in this landscape.
Continual Coin Demand
CAN tokens will be in constant demand – not only from users of the local and digital services platform – but also from our asset contract and our trustless hedged escrow contract. Both of these smart contracts will only accept CAN tokens, meaning all other deposits will first be converted into CAN tokens; thus creating a constant market demand for CAN tokens bringing value to our token holders.
CanYaCoin Asset Contract
The Asset Contract receives tokens from the 1% flat transaction fee that service providers pay, as well as the monthly subscriptions that services providers can choose to pay in order to become a “Featured Provider”.
After these fees are collected (in the providers chosen currency) they are converted into CAN tokens and then deposited into the Asset Contract. The Asset contract receives CAN tokens from both our flat 1% transaction fee and monthly subscriptions and they are sent to a smart contract which distributes the tokens. 30% of the tokens are allocated to a user rewards pool which is then given back to the community though referrals, welcome bonuses, ‘token-backs‘ andcommission payments.
The CanYa platform receives 30% of tokens is distributed to the CanYa platform, these tokens will be used to provide consistent user support, marketing, platform operations and future development for years to come.
The CanYa Asset Contract escrows 10% the CAN for disbursement to selected charities, of which Giveth is the first.
The remaining 30% of tokens are burnt using a trusted burn method – Similar to Iconomi’s burn model.
Trustless Hedged Escrow Contract
Traditionally, the general public would resist against paying for services with crypto because of the volatility in cryptocurrencies. A simple decking job might take 4 weeks to complete but the user and/or provider would be constantly concerned with the volatility in the crypto-markets. CanYa completely removes the risk via the Hedged Escrow Contract.
The Trustless Hedged Escrow smart contract is our stand out feature and one that brings consistent value to the CAN token. Our hedged escrow system ensures that when a user books a service at an agreed upon price, it will remain static throughout the transaction, to ensure $100 in is $100 out.
This escrow contract demands a constant supply of CAN tokens. Users can pay with any cryptocurrency (or fiat denomination) but this deposit is instantly transferred into CAN tokens using a decentralised token exchange. These CAN are then sent into our escrow contract where the value of these tokens is hedged against the volatility of the cryptocurrency market.
Not only does our escrow contract provide continual CAN demand, it also creates price stability for the volatility of cryptocurrency. This is hugely important for a services dApp as building a deck or creating a website could take an extended amount of time.
CanYawill provide a trustless exchange of hedged cryptocurrency for skilled services, as well as a way for the cryptocurrency community to spend their holdings on skilled services.
A flexible token that can be stable and volatile simultaneously
Hedging CanYaCoin is achieved by “HODLing” an underlying store of value –a stable coin – which is held to guarantee value of the CAN tokens deposited. This will allow CAN to act like a stable coin (only when it needs to), while keeping the demand high for CAN tokens. Every transaction that isn’t paid directly in CAN will be instantly converted into CAN for our smart contract.
Both of these smart contracts ensure a constant buying pressure on the CAN token which why the CanYa economy will benefit all users and token holders!
Stay tuned for announcements about partnerships with stable coins, decentralized token exchanges and more! Get involved with our community bounties to start earning CAN tokens today!
For all the latest news and updates follow us here:
CanYaCoin powers CanYa – the world’s first cryptocurrency-based autonomous marketplace of services. The struggle with the crypto-community these days, is trying to work out which ones will be around in 5-10 years? The secret to success is working out which ones will be complimentary or which will be supplementary; that is to say, which new ICOs will be competition with BTC, ETH or XMR and which will be in cooperation?
CanYaCoin is an ICO that is complimentary and will not be competing against BTC, ETH, XMR or any other cryptocurrency. The CanYa platform, through the CanYaCoin cryptocurrency payment integration, will actually support and encourage mainstream adoption of cryptocurrencies! The Ethereum ERC20-based token – CanYaCoin – will bridge the gap between the general skilled public and the wider crypto-community.
CanYaCoin encouraging mainstream adoption of crypto
CanYa is a platform where local and digital service providers can get found, get booked and get paid; and conversely, where the general public can find, book, pay and review skilled providers. To participate in this one-stop experience, cryptocurrency or traditional fiat currency will be effortlessly added to CanYa by the users and receive CanYaCoin.
CanYaCoin will be used to pay for services of all types within CanYa, be spent using 3rd party solutions anywhere in the world (think Monetha, Monaco etc) or withdrawn as another cryptocurrency/traditional fiat currency.
The appeal is two-fold for users of CanYa
Firstly, the CanYa platform will be a true international meritocracy for service providers of all shapes and sizes. The strengths that Ethereum smart contracts bring to the blockchain technology means CanYa will have the world’s first true services marketplace where the best providers are ranked accordingly. This peer-to-peer (P2P) curated ranking empowers customers and quality providers alike.
Secondly, CanYa will be unlike any incumbent competition because the technology of the blockchain and the efficiencies of cryptocurrencies frees our payment structure from the heavy charges imposed by “trusted” 3rd party payment solutions. CanYa will only charge a 1% transaction fee (about 20x cheaper than Uber, AirBnB or any existing services platform) and allows for instant, trusted and immutable payments all over the world.
CanYa in the real world
Imagine someone in Queensland (Australia) downloading CanYa for free and through the unbiased ranking system, finds the best app developer in the world is in Hyderabad (India). The user can peruse the provider’s profile, check previous reviews, communicate in-app and get a quote in a few seconds. Once the work is completed, the smart contract is finalised and the payment is made with next to no fees for either party – an autonomous marketplace of skills is born!
Now imagine a Venezuelan plumber who is concerned about his countries sky-rocketing inflation and currency volatility. He brings his existing clients over to CanYa so that all payments can be paid with CanYaCoin and he can be protected from currency volatility. The hedged escrow smart contracts ensures that the plumber earns a guaranteed price for his work and CanYaCoin reduces the fees his would normally pay with an existing 3rd party fiat payment system on BitCoin in isolation.
Scenarios aside, CanYa will finally bridge the gap between the general public and the crypto-community. Early BTC and crypto investors have a fortune of value that is largely trapped in cryptocurrency. Many don’t want to convert back into fiat currencies but these are real people with real-life problems. CanYaCoin will power the CanYa platform to make it easy for the crypto-community to access skilled local and digital service providers. How about a new deck on the house with your crypto profits? The possibilities are endless.
For all the latest news and updates follow us here: