0trace has been tested, and here are a few key points.
1️⃣ The letter of guarantee system works properly.
All order details are included in the letter of guarantee, including the order ID, deposit addresses, creation date, expiration date, and exact amounts.
⚠️ However, there's a problem with letters of guarantee because you use an unusual format, the authenticity of which can only be verified directly on the website itself. You will often encounter the problem of users refusing to complete a transaction simply because they can't verify the authenticity of a letter of guarantee in a convenient way (including BitList, BitMixList, PGP4Win, and others).
Therefore, I would recommend modifying the letter of guarantee system to a generally accepted standard.
2️⃣ AML corresponds to the stated values (I've updated the information on BitList, indicating the low AML score and adding a link to this post as proof).
At this point, the project has been moved to the "approved" category.
Thanks fair criticism, and it's fixed.
Letters of guarantee and receipts are now standard OpenPGP clear-signed documents (RFC 4880). They verify with
gpg --verify, Kleopatra, GPG4Win or any other OpenPGP client our website is no longer part of the process.
The key is unchanged and the fingerprint has not rotated:
C8A0 3EAF 6531 C975 561F 9FDA 1B80 0B98 D27C 5611
curl https://0trace.io/0trace-pgp.asc | gpg --import
gpg --verify 0trace-guarantee-xxxxxxxx.asc
If you imported our key before this change, please refresh it signatures are now made by a dedicated signing subkey, and an older copy of the key will not recognise them. The fingerprint above stays the same.
The second fingerprint that used to be in our first post is gone. It was never a PGP fingerprint, so no tool could have used it that was the root of the problem you pointed at.