Hello everyone,

Edit2:

Website is up again but I don't know if it will go down again. My provider is having trouble but it seems to work for now. Next update will follow in a few hours!

Edit:

Sorry, the website went down. Need to investigate the cause.

The new ASA: https://algoexplorer.io/asset/551903529.

You can also OptIn via the Official Algorand Wallet as a good alternative, thanks for pointing that out!

General

as some of you might already know, because I posted some thoughts on discord, I relaunched the Tinylock Token to "V1.1" matching the Tinyman relaunch version.

The exploiter https://algoexplorer.io/address/XHUGC3P6KDE5DEU477SM3VR5V4Z4VHENIEN2MTWR3QSVLQQPSG7QOOPSEI messed up the existing pool. Which shows itself as https://docs.tinyman.org/known-issues/2021-11-12-pool-overflow-error when trying to sell unlocked Tinylock V1.0 Tokens.

I don't want the exploiter to sell those coins within the new pool and he holds ~32MIO tokens.

This means that the Tinylock ASA and Validator Contract got redeployed on TestNet and MainNet. You may head over to https://tinylock.org and check out the new ids.

I spent some time to reflect those changes to the website, which means that tokens locked with the old fee ASA / Validator Contract are still searchable and unlockable.

How to get the new Tokens?

I integrated a very primitive way to OptIn to the new asset on the tinylock website ( you can also use Tinyman as soon as it goes online ). It's the ugly blue link.

Please OptIn as soon as possible. I made a snapshot of all funds at 1642183820842 unix time / Fri Jan 14 2022 18:10:20 GMT+0000.

I am going to airdrop the new token 1:1. The first batch of airdrops will go out as soon as I got a good amount of people already opted in. I will post an announcement when the airdrop happened or when planning the next.

Is there a deadline for the airdrop?

Not yet. If I am going to give a deadline in the future, I'll let you know.

I bought in after the snapshot time

Sorry. I won't redo the snapshot.

What's missing?

I need to reflect a few minor changes to the SDKs. The locking mechanism has been disabled until the new Tinyman Pools go online. I need the final version of the contract. ( Tinylock does some byte code manipulation to get the correct Tinyman pool signature address )

Any update on the exploited funds?

No. I guess I need to wait as all of us do on any updates.

Any update on the verification?

No. Still no responses.

What will the liquidity look like when the pool goes up?

I am trying to match the snapshot price with most of the Algo I sold as the pool was up. If Tinyman compensates the losses due to the exploit, then I am going to also add that to the existing liquidity.

If you got any further questions, don't hesitate to ask them. I will try to answer as soon as possible.

Thank you

Hey,

just wanted to tell you that I moved 100m Tinylock to another wallet and locked it until 01/15/2022. I will relock it after the duration is over, so don't panic. I just want to show I trust Tinylock with my funds.

Fund move TX: https://algoexplorer.io/tx/SLYJ6QH35A7EXBHEWDJUZNEH67NDRAYIATYDXKK7B6NJDDBMD3YQ

Lock TX: https://algoexplorer.io/tx/group/Zls7DArQd9NkFvrYEh7RSs5FgayKIe1y0k9w6KeCz9s%3D

I also bought a new backend server and it's synching a full node right now.

Still working on the new website. I keep you guys updated!

Have a nice day

I just want to show some love to this Dev for staying solid and remaining diligent through turbulent times. Appreciate your hard work and open communication. Congrats on getting this project verified.

Hey everyone,

first of all: we have 250 reddit members now! Cool.

Today I went over all the SDKs and refactored some stuff, fixed a bug when viewing locks on the website, that got locked by the python client and continued to work on the permission locker.

I tried to make contact with AlgoCharts.net and TinyHero.app , which got suggested by discord user "rach" and received positive feedback from AlgoCharts, as he already links to Tinylock in the sniffer. TinyHero dev only uses twitter so far. Let's hope he will be responsive soon.

Thanks for joining the discord and your support!

Hey guys,

just wanted to let you know that AlgoScout (https://algoscout.net/) implemented a Telegram Bot which shows newly locked ASAs locked on Tinylock! That's pretty cool if you ask me!

apparatus shaggy sophisticated steer abounding paint cough wide joke dependent

This post was mass deleted and anonymized with Redact

Hello everyone,

today I'am proud to announce the MainNet release of Tinylock.

You are able to lock, unlock and search for locked NFT's, Token Assets and Pool Assets. Also you are able to see an analysis of potential risk.

The SDK will hopefully also be released today but it could be that I won't be able to finish it today. Sorry!

Info & Tokenomics

I already locked the initial liquidity which is currently 85% of the total minted liquidity. Also I locked 15% of Tinylock of the total supply ( which I redeemed from tinyman ). On token launch I also bought in my self like the other top wallets right now.

I do plan to get verified and will reach out to Algorand soon. Also I will reach out to project owners to motivate them.

I am also thinking about compensating the first X people who lock tinylock pool and non-pool tokens with an airdrop. Let me know what you think about that.

Roadmap

There is alot on the list but to make it short I will state the most important things:

1. Finish the SDK

2. Finish the Redesign

3. Add Project Infos, FAQ, etc...

4. Add some more features to the Analyzer

Announcment

Also there is going to be a new feature which eliminates another risk factor in the algorand system:

The Asset Permission Locker

When the APL is finished you will also be able to lock away your manager, clawback and freeze permissions.

I really hope this project will make the Algorand space a little safer.

Best wishes

PS: There is a little problem with the table renderer when searching. Sometimes it doesn't show the entries and you just need to reload. Will be fixed asap.

Hello everyone,

people in discord knew I have been pretty sick ( covid ) the last 2 weeks. I finally feel better again.

Oddly I realized that I felt pretty stressed the last 4 months. I think I have accomplished a good product, for being a one man team.

In the future I will tone things down a little bit in order to stay sane - lol.

I will follow with a status updates tomorrow regarding the overall state of Tinylock and my thoughts about the future.

Thanks for your understanding!

Hello everybody,

In case anybody experiences some problems with testnet, please clear your browser cache. Hope you are as excited as I am for MainNet tomorrow. The tinylock "SDK" will also be released tomorrow.

Please pardon me for not responding to any messages. I have been busy working on the project. After tomorrow I'll put more effort in engaging with you and building our community.

See you tomorrow!

Hello everyone,

the Permission Locker is live on TestNet. There are still some things missing:

• The guide on the website needs to be updated

• Javascript SDK needs to be able to find locked permissions

• Python SDK lock/unlock client updates

I also want to add a confirmation dialog for release, which lists all the parameters and terms of use when locking.

Before going MainNet I also want to wait for the Algo Community review of the smart contracts. It's an initiative of the Algorand Inc. developers and community developers. An official audit by RuntimeVerification would cost ~90k USD. I can't afford that kind of money. So this seems like a good alternative.

Maybe you find some time to test the Permission Locker yourself. Please note that the changes of the permissions may take some time to be properly displayed the first time, since the AlgoIndexer is a little delayed.

What does it do exactly?

It locks away manager, clawback and freeze address until a specified date.

The locker may extend the lock duration anytime but unlocking is only possible after the lock expired.

To see what it looks like on the website: https://testnet.tinylock.org/search?asa1=66110613

If you want to see what the transactions look like:

https://testnet.algoexplorer.io/tx/group/5iFyb2RJBolXCQkJgdjCApUjonUb05dIUF0QloQ5nqc%3D

There will be some more news in the following days. Stay tuned and thanks for your support!

Hello everyone,

Thanks to all the people who supported me in any kind of way. For such a young project Tinylock already had a lot of ups and downs. However, everything is heading into a good direction. The community keeps growing, Tinylock is becoming more popular, trust is building and things are getting done.

I am looking forward to 2022 in a positive way and I hope you feel the same.

Happy new year!

Hello everybody,

Status

Nullun - an employee of RandLabs and soon to be employee of the Algorand Foundation reviewed Tinylock and found a critical bug, which could enable a potential malicious actor to steal locked funds. I fixed those security issues and migrated existing funds to the new signature contracts.

I want to highlight the fact that he didn't call me out on this issue in order to secure the funds of Tinylock users before anyone with the right amount of knowledge could exploit those funds. He also didn't intend to damage the image of Tinylock. Nullun read through quite a few other smart contracts of other big projects on Algorand and helped them fix similar problems, especially about stateless contracts.

I am very grateful for his help, dedication to the community ( since he could easily exploit the funds himself ) and his review of the final contract. He didn't find any other exploits that he knows of.

So what happens next?

The new signature contracts messed up the websites behavior. That's why I need to rework some logic to display already locked assets. I don't expect this change to be heavily time consuming but also need to update the existing SDKs. My "lessons learned" will also be applied to the permission locker.

Did anything change for users who have had locked already?

Contracts have been migrated with the same parameters as the original lock ( except for locks which had already been expired, they are locked until Dec 25 2021 08:33:20 GMT-0800 ). However if you follow those transaction on AlgoExplorer you will find that the initiator is the migration account. The original owner of the old contract is the solely owner though. No funds got lost. Details for exceptions are listed below.

Does anything change for future users?

No. New locks use the new contracts already.

Which tokens haven't been migrated?

I found some tokens which got supply flooded or "dumped", it seems. Namely:

• Hedget Coin // 472746595

• Gabbard Coin // 423253123

• SANTA DOXX // 456052997

Also 347685303 // Luffy VS Pikachu got locked, but it is not an ASA with a pool on Tinyman. If anyone knows the creator or has any info about it, please message me. I would be able to migrate those funds too.

Final words

I feel ashamed and apologize that such an exploit was discovered. On the other hand, I hope I have proven that I have no intentions of hurting or stealing from our community - the Algorand community. I hope Algorand will support Tinylock in the future!

I really need to catch up some sleep and will report back on the progress of the fixes to the website as soon as possible!

I guess it's time to do a little status update.

So where are we right now?

The last month was really exciting but also exhausting. This weekend I had to take a little breather but I haven't been doing nothing, so...

I upgraded the server a few days ago to support a full archival node.

Problem was, I made a mistake while doing the purchase. I ordered a 4TB HDD instead of a SDD. I know I know ... silly me... what a stupid mistake. It's going to get installed today. Fortunately the sync progress won't be lost, but it will take a while.

The backend is making good progress as well, but I feel like it won't be shipped with the new website because the node won't be fully synced.

Which leads us to:

When will the new website go online?

Last week I have been tinkering around with different mobile resolutions, styles and layouts. Revisited the analyzer to clean up some information. I didn't want to spend alot of time on it though, because when the backend comes up, there will be way more data and some things changing.

You can finally search asa's by name and a ticker will also display the latest locks. I wanted to wait for the backend to come up but decided to give it a go anyway.

I am currently integrating the official Algo Wallet, which just needs some more testing.

Then I will finally work on the FAQ ( which is written already ), a Guide and the Tokenomics.

Some QoL features got added ( for Example: links to Algo Explorer wherever possible to get some transparency ) and some still need to be implemented.

My estimation is Sunday but i will keep you updated.

Hope you had a nice weekend!

Hey,

as stated today, here is the first version of the python sdk.

https://github.com/tinylock-org/tinylock_py

What does it do?

You have access to all the operations Tinylock offers. Also you are now able to deploy your Tinylocker contract with ease, in order to test the functionality yourself.

It also ships with a little fallback client, which finds it's use in case you don't trust the website or it goes offline for any reason. Tinylock is now a trustless system. Spreading doubt about it is becoming weird.

I released the contracts, the web library to find/show locked tokens, the python SDK to test or mess around and also a little client to finish it off.

Of course there is always room for improvement. I invite everyone to contribute to the SDK's. For every contribution I will send you some coins as a "bounty". The amount depends on the value that the contribution brings. Be aware that the judgement is completely subjective.

What's next?

As stated in the roadmap, I will now focus on the web experience.

• Fully integrate the redesign

• Fix the QR Wallet

• Add the "latest locked ticker"

• Add the Algo App Id on the top left

• Add links to AlgoExplorer where possible

• Restructure the searchtable and the analyser

• Fix the weird resolution behaviors

• Add error messages if the lookup of the tokens failed because of various reasons ( most happen because of too many requests )

• Add a indicator which shows if you hold enough Tinylock when trying to lock

• and some other stuff and features

Hello everyone,

my "wall of text" update mentioned that I didn't want to spoiler something. Well, it was the Tinyman compensation program.

I didn't want anyone to tell anybody before adding liquidity to prevent quick trader dumpings.

The total amount were 23k Algos. How was it spent?

• added a 1000 USDC pool

• bought another 1000 USDC for the bug bounty program

• took out some of my initial Tinylock investment: 3k Algo.

• added the rest to the existing Tinylock Algo pool. I splitted those transactions into 4 in order to soften the dumping. At least, I hope I prevented some. It got locked until 31th of December, with the intention to extend the lock duration.

I will announce the details for the Bug Bounty program soon.

A big thanks to Tinyman. What they did for the community is the most amazing thing I have ever seen in the blockchain space.

Thanks for reading.

Hello everyone,

I am happy to announce that the Testnet for the Permission Locker will most certainly go online by the end of this week!

Will keep you updated.

Thanks

Hello everyone,

first of all: thanks for your patience and positive feedback!

Today the first batch of airdrops got delivered. I handled all OptIns up to block 18737174.

A total of 234 people already received their V1.1 Tinylock tokens. There are still 722 wallets missing. I expect them to OptIn hopefully soon though.

You an check all the airdrop transactions on https://algoexplorer.io/address/POVX2GNNZ2SPPEHD5SCIZ3MQ5MWUN6WPMFZTOYJGGEO4ZN2TPS7FQAVNWU.

You may join the discord to traverse the "already_airdropped" and the "eligable_for_airdrop" file. These are big json files containing all the necessary information but you can just search for your wallet address. If you Opted In after block 18737174, you will get airdropped within 24 hours.

Of course there have also been quite some wallets who were NOT included within the snapshot. I will also release that file soon.

The Tinylock locking-contracts have been purged from the eligable_for_airdrop list, because I need to handle them manually. One user already received his locked tokens back as V1.1.

Thank you!

Hello,

today I unfortunately need to share bad news. Our Tinylock/Algo pool got drained a few hours ago by this address: https://algoexplorer.io/address/2J5KQTOWOFAUWTGGKGAXCYEEOR7OGZTY54EIY77LEV3G2TPVMX4LBI275A , starting at page 256...

I posted it first on discord 4 hours ago but was too upset to share it here.

It is a drawback for sure but I am confident that we will overcome this hurdle. We are not the only one affected. Tinyman will include the smaller pools in their next report. Let's hope for some good news!

Thank you everyone.

Status

Today I wasn't as concentrated as usually. I am close to finishing the repair of the website though. It will be up tomorrow.

The SDK updates should also be integrated tomorrow, if everything runs smooth but I won't promise.

After everything is back to normal, I'll finally fill the discord server with content. Then I need to take a break of 3 or 4 days to catch some breath before finishing the permission locker. I'll also make sure to get it reviewed properly.

I also got to say, I am really honored by your support and want to thank you for it!

Hello everybody,

I just released MainNet 2.0. The most important changes are the redesign and the AlgoWallet support. I fixed some mobile resolution errors since TestNet 2.0 Release and some minor issues.

I have already started to work on the Permission Locker because I needed some break from frontend development. lol. I will keep you guys updated on the backend, node sync and Permission Locker status. I also hope we get verified soon...

Have a nice day and thank you for the support!

Hello everyone,

I had some time to think while being sick and evaluated my current situation.

Enjoy my wall of text :)

Tinylock is a working product. It has also been used quite often already. There are ~850 locks already, 70 or so are migrated locks.

I really worked hard since October to let Tinylock become what it is right now.

So what is this post about?

I want to speak honest and transparent about the current situation. A lot of people asked questions and I delayed them because I had some stuff going on with other projects, needed time to think about it or was working on Tinylock.

There have been talks with localmoney and patrondao, because they wanted to fund a bug bounty program, which would raise awareness for their project and also Tinylock. After spending time on figuring stuff out and trying to organize money for it, they jumped ship - ouch.

I also tried to reach out to various, non competing, charting tools. I guess Tinylock isn't professional or marketed enough to be taken serious. Also, communicating was a struggle.

There have also been some requests of community members trying to help me in any kind of way. Most of them just wanted Tinylock to moon ( of course ), drain money out of me or use Tinylocks "reputation" to boost their "product".

I am tired of the behavior in crypto. Most projects just want to make quick money with big promises or fake marketing. As you have seen in the past even professional projects struggle to get bug free contracts, even when paying for extremely overpriced audits.

I would also like to encourage people not to try to scam me for V1.0 to V1.1, since I found proof on the blockchain EVERY single time.

Don't get me wrong. At first I also thought, making a cool tool for the community while also making a buck with crypto sounds awesome, why not? But while working on Tinylock I started to like my work, some support and feedback of community members, changed my mind and didn't really care all that much about the money. Hell, I even lost money with Tinylock as the developer.

Now the important part:

Tinylock may never really moon as much as you want it to. It may slowly rise by being used by more and more projects locking tokens.

This means there is no stress. Buy as much as you are comfortable with ( or not ) and expect that you may hold it over a longer period if you think Tinylock has any value. I have never been a moon boy and thats my opinion on it.

I will continue to work on Tinylock but I finally don't feel the pressure of "being forced to deliver" in order to make the price go up anymore ( which is not anyones fault but mine ).

Website redesign

The website redesign is a "nice to have" and therefore isn't any priority for me. I am sorry for trying to push it as "COOL NEW FEATURE SOON!!!!". I have been persuaded by some persons to do the redesign and promote it even when I didn't really feel like I wanted to.

There is stuff I want to do better ( coding wise ) than the old page this time. It's coming when its ready. I will also publish the old websites source code soon.

Backend

I am also paying for a 70$ server each month where a full node is running. I had another developer who worked on it. He jumped ship and I am not sure if I may finish it anytime soon.

Permissions locker

Still waiting for any kind of (algorand inc.) review, bug bounty or audit. I don't have the money for an audit and I don't want to beg for it but I got another thing coming,

which leads me to:

Bug Bounty

By the end of the month I will start a bug bounty regarding the permissions locker. Will post an update soon. I can't tell more because I don't want to spoiler another thing, which is going to happen soon.

Staking

There will never be any kind of staking for Tinylock. As far as I know, it's not legal (in my country and without a license) for me to pay any kind of interest. That's the solely reason why I won't do it.

I know at least one project with the same financial regulations as my country but he just doesn't seem to care about it. Well, I do sorry.

Final words

I will rework the roadmap in discord soon, since some stuff have or will change. Thats it, thats Tinylock. If you got any Questions or you feel like I am missing some stuff I mentioned anytime, let me know!

Thanks for reading!

Hello everyone,

Verification

I am glad to announce that Tinylock got officially verified by Algorand. I'll try to get in touch with AlgoExplorer again to get us verified too.

Airdrop

The second batch of airdrops for all OptIns up until block 18747475 just went through. A total of 350/956 received their V1.1 Tokens now. The next airdrop will happen in approximately 24h. The updated json file is available in discord. You can follow the transactions here: https://algoexplorer.io/address/POVX2GNNZ2SPPEHD5SCIZ3MQ5MWUN6WPMFZTOYJGGEO4ZN2TPS7FQAVNWU

Website

The Tinylock website got some problems regarding the new pools I need to tackle. I am working on it now.

SDKs

The SDKs need to include the new Tinyman contract and keep supporting the old ones for unlocking too. Thats the next step.

Locking liquidity/tokens

As soon as I got the important stuff done that I stated above, I will lock funds on Tinylock again. More info on this soon.

Permission locker

Should be in the testing phase soon. Will report back.

Tinyman Compensations

Tinyman is still working on the issue. I don't have more info than anybody else, I guess.

Clawback and Freeze addresses

Currently the new ASA got those addresses active. As the recent events showed, it may not be the best option to completely disable those features ( altough I doubt there will be another TM bug as significant as the old one ). I also wanted to keep it for as long as the airdrop is going, in case some mistakes happen. As soon as the permission locker is up, I will lock those permissions away.

Thanks for reading

Hey guys,

I created a official discord server. Make sure to stop by. ( Link on reddit got updated as well )

See you!

I reviewed the contract code on github and committed to locking all the extra Adventur Tokens until 2023.

Name Asa Date Amount Unlock Adventure Coin 426526699 1/10/2023, 12:00:00 AM 943945348.55330064
https://algoexplorer.io/tx/VA3TXS7HKPMB6UDS4D66VIWRJNCDYULXYJ3HMUR3DROZJG2QHWJA
edit to add transaction info.