4.1 KiB
Tornado Withdraw
Fastest Tornado Cash Withdrawal UI built with Bootstrap and jQuery
What is this?
This is a Withdrawal only UI for Tornado Cash Pools built upon @tornado/core package that enables you to interact with Tovarish Relayer which provides historic events API as a replacement of deprecated The Graph Subgraph endpoints.
The UI is built with the simple technical stack of Bootstrap 5 and jQuery and it is based on the modern browser API like WebAssembly, BigInt, and WebCrypto and thus this UI wouldn't work on older browsers like IE (Or any older browser that has been released before 2020).
You can run this UI from a single index.html file or the standalone web server that could be spawned by yarn dev command (which should open the page on http://localhost:8080/).
As long as the index.html refers to the correct libraries with correct hash values, this UI can be considered uncontaminated.
Disclaimer
This UI is built with the mindset of transparency, and simplicity. The UI has used the least required libraries ( @tornado/core, ethers.js, bootstrap, jquery, circomlibjs ) to make the withdrawal from Tornado Cash deposit pools happen. Auditing index.html and @tornado/core library will be enough to guarantee the functionality of the UI working correctly.
Currently, this UI should be considered as an early alpha phase and will fix or add the functionality if required. This UI has not been audited by any trusted party so before using this UI you must understand how it works, and most of all you must use this UI under your liabilities of yours including technical and legal perspectives.
This UI is built with the mindset of free speech and asset recoverability of deposited assets under Tornado Cash pools. By using this tool you must comply with local regulations and the author or dev of this tool holds no responsibility of your financial assets as you aren't interacting with us but the world computer called Ethereum.
How to use
Simply open index.html or start yarn dev if you have Node.js and yarn installed locally.
How to Audit
This UI is designed with a focus on transparency which prevents any possible malicious code from being injected on the UI ( and it also prevents from scam sites from popping up. ).
You can audit components by
@tornado/core
Clone the @tornado/core repository from git and run yarn && yarn build command to make sure webpack produces the same result ( if the umd file has some manually added codes running yarn build will remove the edited line ).
This UI
Simply clone this repository and run yarn && yarn update. You can audit the script ./scripts/update.ts which would fetch the latest built @tornado/core from the repository and generate the digest hash of files under the ./static directory ( can be checked on ./static/hashes.json file ).
The hash values are included on index.html file which compares the fetched files either from remote CDN (jsdelivr) or from ./static path. This ensures that if you have the correct index.html file any remote or local resources fetched will be audited by your local browser.
Static files
Bootstrap CSS files and @tornado/core files are directly fetched from the respective npm repository. tornado.json.zip and tornadoProvingKey.json.zip file are fetched from the last commit of tornado-classic-ui repository.
Event files are irregularly updated by tornado-cli with 6~12 months timespan.