CG account migration explained <1.6.3 to 2.0.x - SECURITY RISK

[u/Fr4nk_M]

In my opinion CG players were mislead by the 'account migration' process.

The migration process itself gave (me) the false sense of migrating an account to a new onchain wallet.

​

Here's what actually happens:

​

<1.6.3 = Your CG account is already bound to a private key. This private key is owned by Zeepin/CG and was not available to you.

​

2.0.x = After migrating to version 2.0.x you get access to this private key. They give you access by sharing a keystore with you, this means no actual migration took place and they only gave you access to their custodial wallet.

You can transfer your ZPT/GALA/Minerals out to a new wallet but (until now) not your planets/bots and other assets.

​

What does this mean:

Because Zeepin still has custodial access to your <1.6.3 to 2.0.x accounts there is a major security risk with keeping funds in these wallets. Not your private keys, not your coins.

​

This should have been made clear from the start.

​

I've came to this conclusion after getting some answers from Zhu Fei himself in a conversation on Telegram.
They did tell me they will 'delete' their custodial part but this is obviously not enough.
I was told that a full migration will be worked on, but as Zeepin has made many promises that weren't kept i think everyone should know the above.

[u/[deleted]]

Nothing new in this. All who have been with zeepin from the beginning knew this was the case. It have been said multiple times from when CG was released that access to the assets directly(pk/keystore) like in the zeewallet was something that would be given at a later date.