ShapeShift Memberships in Jaxx Liberty

ShapeShift Memberships in Jaxx Liberty

Jaxx Liberty is a platform. It provides native functionality for managing your blockchain assets. And it provides for on-platform functionalities by allowing users to interact directly with third parties — like ShapeShift, whose exchange functionality will undergo significant changes from 5 pm Eastern Time (22:00 UTC) on Wednesday, November 7th.

ShapeShift Membership and Jaxx Users

ShapeShift is now changing the way it interacts with users. ShapeShift Membership is a registration and loyalty program that requires basic customer information — ShapeShift calls this a “Level 1 membership” — and provides ShapeShift’s FOX token to its users. We’re told that the FOX token will provide ShapeShift users with benefits like higher trading limits, rewards on trading volume, better exchange pricing, private market and trade data, and early access to new coins, products and services.

As a result of this change, those who wish to be ShapeShift users must sign up and activate a Level 1 membership on the ShapeShift Web site here. ShapeShift users will then be able to connect their account in order to access the service directly through Jaxx Liberty, as of 5 pm Eastern Time (22:00 UTC), November 7.

We know users enjoy the seamless ShapeShift experience.  If you wish to continue using ShapeShift in this way, you can do so by making sure you have upgraded from Jaxx to Jaxx Liberty. It’s free and the upgrade takes less than two minutes. We have added exciting new features in Jaxx Liberty like portfolio charts, market prices, a multi-chain block explorer, and news feeds.

We are expecting the Jaxx Liberty update that provides for the updated ShapeShift connection to be available as of the morning — Eastern Time — of November 8th. As a result, ShapeShift access will no longer be possible via Jaxx or Jaxx Liberty from 5 pm Eastern Time (22:00 UTC) on November 7th, and will be enabled only in the Jaxx Liberty update the following day.

Connecting ShapeShift Account to Jaxx Liberty

Here are a few steps required to connecting your ShapeShift Membership account to your Jaxx Liberty:

Step 1: Download and install Jaxx Liberty. If you’re currently using the original Jaxx, here’s how to migrate to Jaxx Liberty in less than two minutes.

Step 2: Get a ShapeShift Membership account. If you already have one, go to the next step. If you don’t have one, visit and get a Level 1 membership. Then continue with Step 3.

Step 3: Open Jaxx Liberty wallet and go to the menu.

Step 4: Scroll down to Third Party Authorization. If you don’t have this item in the menu, update to the version 2.0.6 or higher.

Step 5: Choose the ShapeShift option from the Third Party Authorization menu.

Step 6: Click or tap on the orange Connect to ShapeShift button.

Step 7: Authenticate with your ShapeShift account. This is executed through a direct connection between your device and ShapeShift. It doesn’t pass through Decentral’s servers, and we’re never privy to the sensitive information you provide to ShapeShift.

Step 8: Once logged in, there will be a loading animation, then a green checkmark with the message ShapeShift connection successful.

Important Reminders

Now you are ready to access ShapeShift directly from Jaxx Liberty. Some important reminders:

  • Jaxx Liberty never stores your ShapeShift user account or password. It only stores, on-device, a connection “token” authenticating you to ShapeShift for a year. This authorization does not grant Jaxx Liberty any privileges. It only tells ShapeShift that you’ve logged in — a little like a browser cookie.
  • The connection token only exists on the device on which you’ve completed the process. It is never stored on any of our servers. If you reinstall Jaxx Liberty, or use it on another device, you’ll need to connect that device to ShapeShift to use it through Jaxx Liberty, too.
  • This process is only available in Jaxx Liberty, version 2.0.6+. All users of the original Jaxx are encouraged to migrate to Jaxx Liberty — it is free and it takes less than two minutes.
  • This change only influences Jaxx’s and Jaxx Liberty’s third-party connections. All native wallet functionality is independent of third-party integrations, and can be used in the same way as before.

Integrating this new connection to ShapeShift has given us the opportunity to re-engineer the entire Exchange module for the Jaxx Liberty platform from the ground up. This means that, in the future, it will be a faster and easier process for you to access other third-party services that broaden the experiences Jaxx Liberty helps unlock.

We’re here to help with these changes: our User Success team is available 24 hours a day. Simply submit a request via our support form, and be sure to choose ShapeShifting funds in Jaxx under the What type of issue are you having? section.

How We Deal With Blockchain (Hard) Forks – In Light of the Upcoming BCH Hard Fork

Bitcoin Cash fork

Bitcoin Cash fork

In light of the upcoming Bitcoin Cash (BCH) hard fork on November 15th, we want to share how we handle forks at Decentral, and our plan around the decision to suspend transactions for the BCH wallets in Jaxx Legacy and Jaxx Liberty on the day of the fork.

Before we get into how we deal with hard forks, let’s first understand what a hard fork is.

What Is A Hard Fork

A Hard Fork is a blockchain software update (new rules) that, when applied, will override all blockchain activity initiated by earlier versions of said blockchain software.

Blockchain activity on the Bitcoin Cash network mainly consists in mining transactions and all miners handling the transaction data and packing it into blocks run the blockchain software. A hard fork is mainly an update to the software miners run on their computers (e.g. nodes).

There are two types of forks:

  1. Consensual – also known as soft forks, where the update is assumed to be applied by all nodes on the network – e.g. consensus is achieved over the fork
  2. Contentious – also known as a hard fork, where the update has not achieved consensus within the community and the expected consequence will be resulting in two blockchains or more, each following their own rules.

Bitcoin Cash fork

Confusion appears when consensus is not achieved over a fork as this may have some unexpected results. The risks with hard forks may be:

  • Multiple blockchains: Causes confusion for holders of the main coin and raises questions of how to manage the mirrored (forked) coins
  • Replay attacks: Since the software base is the same for any duplicated chains, a malicious party may copy a transaction code from the main chain and send it (re-play it) on a mirrored chain, thus creating unwanted results for the owner
  • Temporary transaction suspension: As a best practice, many exchanges and wallet providers will be stopping the users’ ability to transact a certain coin until the fork is applied and the resulted blockchain(s) are working safely. This is one of the best measures to stop replay attacks.

How We’re Handling Forks

A look at the details of the fork to understand the impact it will have on our users:

  • On November 15th, a contentious Hard fork will occur.
  • There are currently three major implementation proposals for the Bitcoin Cash network: Bitcoin ABC, Bitcoin Unlimited, and Bitcoin SV
    1. Bitcoin ABC will add new features such as smart contract abilities, oracle services, and scaling improvements to the Bitcoin Cash network;
    2. Bitcoin Unlimited will implement both changes of Bitcoin ABC and Bitcoin SV enabling miners to vote for the features they want;
    3. Bitcoin SV will replace Bitcoin ABC’s scripts with its own and expand Bitcoin Cash’s block size from its current 32MB to a maximum size of 128MB.

Actions We Will Take

  • Stop Jaxx users ability to transact Bitcoin Cash through the Jaxx wallet for approximately 24h around the fork. The timeframe may change depending on the outcome of the fork.
  • We will start this a few hours before the expected time, until the dust settles, so we can plan the next action. All users digital assets are safe during this process. 
  • Issue warnings to our users via our communication channels (blog, Social media, in-app bulletins)
  • Enable the Bitcoin Cash service when we believe it is safe for our users. We plan to support the chain that has the most hashpower following the fork. At this time, we do not plan to support any of the additional chains.
  • Ensure our servers and apps are updated with the needed upgrades to support the fork
  • If major backend updates are required, transacting Bitcoin Cash following this fork may not be available in Jaxx Legacy and only be available in the new Jaxx Liberty. At that point we may ask all our Jaxx Legacy users to migrate over to the new Jaxx Liberty, a process that takes less than two minutes.

Alternative Options

With Jaxx Legacy and Jaxx Liberty, we strive to empower our users to have full control of their digital life. This means that there are options available for all our users in case they don’t agree with the actions we will take during the Bitcoin Cash fork or any other future forks.

  • You can send all your Bitcoin Cash out of Jaxx Legacy and Jaxx Liberty wallet before the fork happens.
  • Since we follow a standard protocol in the industry for the security information (BIP 39), any of our users can choose to import their wallet into any other third party wallet that supports the fork.
  • At all times you have full access to your wallet security information: wallet seed  (Jaxx Legacy and Jaxx Liberty) and private keys (Legacy and Jaxx Liberty)

Remain vigilant! There will be many attempts online trying to persuade Jaxx Legacy and Jaxx Liberty users into claiming their forked coins and asking for the wallet backup phrase or the private keys of your Bitcoin Cash address. DO NOT share any of your wallet’s security information with anyone unless you want them to have full access to your digital assets on all blockchains.

Typosquatting, Angler Phishing, and Immutable Theft

The Internet changed  our world. Blockchain is changing it even more, moving things to new terrain all over again. That new terrain has amazing possibilities for decentralizing power and empowering the masses. But it also has dangers. This blog post is about one kind of online danger: phishing and mistaken-identity attacks.

It’s Not Just You

Feel like there are more of those attacks than ever? It’s not just you. And, really, it’s not too surprising. Digital asset transactions on the blockchain are more private, and more permanent, than real-life transactions. Assets are transferred with minimal personal information — and there’s no easy way to take them back. That keeps things simple and portable. But it ups the rewards for anyone who can get assets transferred to them through fraud.

Anyone who’s spent time on public-facing social media like Twitter, Instagram, or the open Web knows how that happens.  “Typo-squatting”, also known as “angler phishing”, is a fraud tactic fuelled by small typographical errors in an account or domain name. Think in-thread replies by a deceptively-similar account on Twitter. Or pro-active Instagram follows by a handle whose image is familiar — maybe the phisher has “borrowed” a brand icon — but whose name is just a bit off.  Or a surprisingly friendly “help desk” reaching out on Telegram to solve all your problems.

An example is included below. Note how the user copies our logo, handle, and cover image, yet the account name is not ours.

Expecting one website, and landing on another one just waiting for that typo, is irritating. But typo-squatting becomes more than just irritating when applied to blockchain assets. Once you’ve been taken in by a scammer’s fake use of a brand logo, slightly misspelled handle, or in-thread reply, it can be impossible to walk the mistake back.

The Trend Hasn’t Exactly Gone Unnoticed

Every social media landscape is now cluttered with fake accounts built from real people’s profile pictures, recognizable brand logos, and nearly-familiar names or handles.  More and more “blue checkmark” personalities add phrases like “doesn’t give away cryptocurrency” to their account names, to set themselves apart from scammers piggybacking on their identities. Last March, Twitter told online publication The Verge it would begin preventing accounts “from engaging with others in a deceptive manner.” Last August, security researchers at Duo Labs published a “case study detailing a large botnet of at least 15,000 bots spreading a cryptocurrency scam”, showing how to identify the scheme.

Three Tips to Help Identify and Avoid These Situations
  1. We never ask for your secret identifiers like your private keys or personal information.  If someone is asking for such things pretending to be us, call them on it. It’s not us.
  2. Our official brand accounts are: @jaxx_io, @jaxx_support, and @DecentralCA, and our Web sites are at and — spelled with just those letters.  All of our accounts are verified, so look for the blue checkmark next to our account names. Check the source, and make sure the Twitter handle or domain name has the correct spelling.
  3. When a phisher solicits you to respond in private — don’t respond. Do report.

We see phishing posts and imposter accounts frequently. We flag them and ask that they be taken down. It can take a few days before these fake accounts are removed, though.  If there are doubts, please don’t engage. If you see a tweet, or profile you know is a scam — consider reporting it and letting us know, too: [email protected] .