This article is also available en español. DISCLAIMER: We are an independent crypto-startup, non affiliated/connected with WhatsApp Inc in whatsoever manner despite its business API integration.

Introducing Wuabit the first crypto wallet for WhatsApp

Manuel Polo
Wuabit
Published in
6 min readSep 11, 2018

--

I’m proud of announce the first crypto wallet, soon available, in a WhatsApp client near you!.

What is Wuabit?

Well, in one sentence, it will start as a cryptocurrency wallet accessible via a chat interface (WhatsApp first, others next).

After being a wallet, it will add more services like exchange, payments etc..

We are preparing the beta launch soon. If you want to be one of the first to test it out, you can go and register in our landing site.

One picture is worth… so look:

Bitcoin transaction conversation

Wuabit is a so called “software agent” powered by some specialized AI and accessible via a chat interface (so it’s a chatbot).

Why WhatsApp?

It's a matter of network effect, WhatsApp is the most ubiquitous instant messaging (IM) platform on earth, followed by FB Messenger, Telegram, WeChat, and Viber.

Complete article: Mobile Messaging App Map — February 2018

Why now?

Until recently, there was no official API for third parties to start making chatbots or other messaging services, and create things like Wuabit.

There were hacks, and reverse-engineered protocol based software libraries that put your next big thing chat idea onto risk of being banned from WhatsApp.

Now the way it’s opening gradually via direct connection to their API, or via third party integrators like Twillio’s API offering.

But, why not create another app wallet?

There are a bunch of app wallets out there already. But creating another mobile wallet app has a lot of challenges ahead, but summarizing a lot:

  1. Development cost: support at least iOS/Android platforms is costly, even using single-codebased platforms (e.g. Ionic).
  2. Cryptocurrency support: Adding support for more cryptos and tokens is a burden for an app. The current apps available in market delegates to external servers to handle transaction notifications for example in order to be lean.
  3. Network effect: Compete with other wallets for the user to choose your app, install, update, and.. use it :-)

Using WhatsApp instead:

  1. Development cost: Only the backend servers, the frontend app is ready done!.
  2. Cryptocurrency support: Adding support for more cryptos and tokens involves adding a native service in most cases, all within the private backend server cloud. The user has nothing to do, but to know that he can do more things: e.g. Notice: Now you can use Bitcoin Gold!
  3. Network effect: Already done! it’s spreaded all over the world, pre/installed, updated and ready to be used. Just add Wuabit’s contact phone and go!

Each update done in the backend is ready at the fingertips of every user. For example adding a new currency, service or feature.

Think of it as an “agent”, that gets smarter and smarter as time goes by, regarding all it’s knowledge within the crypto world.

How it will work?

In the wuabit.com website will be provided the service’s phone number. Just add it to your phone’s address book as a new contact called Wuabit.

Then start a conversation being polite by saying Hi!

Sample initial welcome

Notice that our goal is to accept natural language, but also direct commands in the shape of single words (e.g. receive) will be available for simple text platforms like SMS.

What about the security?

Notice security per se is not 100% achievable. As in the strongest chain, there could be a weaker part. Here the user is the weaker part but with good practices and guided advice the platform could be safer than a normal banking app. We are the crypto expert partner for the average user that approaches this kind of new technology via a familiar human-like interface.

Starting with the phone, the user should secure it with all measures available in its platform (e.g. use a PIN) down to those that WhatsApp app itself provides (e.g. 2FA).

Nonetheless here are some security insights that are given from the start:

  1. All conversations are encrypted end-to-end, from your phone to our backend servers.
  2. The backend servers does not store private keys.
  3. The backend servers are not publicly available.
  4. Almost 100% of funds are offline in a cold wallet. Only the required operational amount will be in a hot wallet in the backend servers.
  5. A second factor like an extra PIN could be provided via SMS to execute certain actions (and use another phone number as an ideal scenario).

For basic usage, the user can have a less secure, but convenient, password/pin or emoji construct (e.g. 🤪🧐🤓😎😉). After use, the user will be prompted to delete it from the conversation.

Emojipass is better than simple passwords or pin numbers

Even a hardware key generator like our Wuabit-Dust could be used as a secure password here (with an OTG adapter):

Wuabit Dust: cheapest open-source HW key generator

In next articles we will cover tech aspects surrounding security, so stay tuned!

What about the privacy?

Only Wuabit will know the user’s phone number from its initial conversation. After that you could be prompted to enter an email or another phone number for second factor authentication messages.

The user’s name or alias could be given to Wuabit to allow others to send money to the user by using this alias. This would be a good use case for receiving money from within a Wuabit conversation (eg. saying send 1$ to Vera) or by sharing a link to your receiving public social/profile page (e.g. https://wuab.it/Vera).

Regarding crypto transactions (on-chain), the system manages the address generation and receive transaction monitoring for the user. This is an industry standard called hierarchical address generation or HD wallets. For outgoing on-chain transactions, the user addresses are not involved at all, only the global system’s hot wallet, thus the privacy is preserved.

We are also planning micro-payment support via ⚡️Lightning Network!, but as a mixing hub, so still, privacy is preserved here.

A special gaze on legal aspects

According to my legal pal

:

“The regulator is aware of the importance of governing the “algorithm phenomenon”. We could observe, for example, the articles 22 of the GDPR (decisions based solely on automated processing) or 17 of MIFID II (Algorithmic trading).

Moreover, one should follow the approval process of e-privacy regulation. We could point out about this law that:

  • The legislator aims to ensure the confidentiality of European’s electronic communications, no matter what technology is used (internet based-voice, internet-messaging services…).
  • The flow of non-personal data is going to be also subject to this regulation.
  • The law will protect not only the content of the messages but also the metadata.
  • The proposed provisions will cover the traditional telcos as well as the Over-the-Top providers (Whatsapp, Facebook Messenger, Skype, Telegram, Viber…)”.

Stay tuned for more legal insights covering the state of the art.. ;-)

Closing Remarks

We believe in giving more people the chance to use easily Bitcoin and other crypto-currencies within a familiar place like WhatsApp and other chat apps.

The world needs more ways to access a financial freedom leveraged by the blockchain and cryptocurrency power uses. Having an accesible wallet with easy of use is key and one of the first goals of our startup.

After this stage, more complex to day usages of blockchain/cryptos, like purchasing,selling, exchanging, transferring, even publishing assets (e.g. smart-contracts), are going to be explored in order to be added in a textual interface near you…

--

--