π [Project Title]¶
- π€ Author: 20250017 / κ°μ¬ν
- π Presentation Date: [2025-07-30]
1. Overview¶
- Human Passport:
- Category: Decentralized identity protocol
- Key Technologies / Platforms: WorldCoin, BrightID, Proof of Humanity
- Official Links:
- Website
- Foundation
- Contract Address
- Whitepaper
- Docs
- GitHub
- X
- Discord: N/A
π Summary¶
Human Passport is a Web3-based system that allows individuals to own and control their digital identity using blockchain technology. Instead of relying on governments or centralized entities, users manage their identity and selectively prove it when needed. Itβs not a passport for international travel β the Human Passport is simply a way to prove that you are a real human.
2. Background & Problem Statement¶
Currently, how do websites trust my identity?¶
- Most digital identity systems today are controlled by centralized platforms such as Google, Facebook, or Apple.
- Many websites rely on these services for authentication through options like βSign in with Googleβ or βContinue with Facebook.β
- In this model, users donβt own their identityβthey depend on third-party providers to vouch for them.
Can we trust companies to handle our identity data?¶
- Users have no control over how their identity is stored, used, or revoked.
- Centralized identity systems require us to fully trust corporations to manage our personal information.
- These companies may sell user data for advertising or share it with third parties without transparency.
- If a central server is hacked or compromised, millions of user identities can be leaked.
Centralized systems cannot tell if we are human or AI.¶
- These systems typically verify accounts, not people.
- Fake email addresses, phone numbers, or social media profiles can be generated in bulk by bots or malicious actors.
- AI agents can now bypass CAPTCHAs and simulate human-like behavior, making it harder than ever to distinguish real users from artificial ones.
- As a result, centralized systems offer poor bot resistance and lack a reliable mechanism for proof of personhood.
Added by Jason¶
π§ What Problem Did Human Passport Aim to Solve?¶
Human Passport originated as Gitcoin Passport, created to solve a critical problem in the Gitcoin Grants ecosystem: preventing Sybil attacks and ensuring that only real humans participate in Web3 incentives and governance.
πΈ What Is Quadratic Funding (QF)?¶
Quadratic Funding (QF) is a funding mechanism that optimizes matching grants based on the number of individual contributors, not just the amount donated. It is designed to favor projects with broad community support over those with only a few wealthy backers.
Matching formula (simplified):
Total Match = (ββindividual contributions)Β²
This means: - A project with 1,000 people donating $1 each will receive more matched funds than a project with 1 person donating $1,000.
π Why QF Is Vulnerable to Sybil Attacks¶
Since QF rewards breadth of support, attackers can create fake (Sybil) identities to simulate many small contributions and unfairly maximize matching funds.
π Example Attack:¶
- An attacker creates 100 fake wallets.
- Each fake wallet donates $1 to their own project.
- The system calculates this as high community support and allocates disproportionate matching funds.
This defeats the purpose of QF, which is to reflect genuine public interest.
π Gitcoin Passport: The First Solution¶
Gitcoin Passport was introduced to assign "Proof-of-Humanity" scores to users using trust signals (called stamps) like:
- Web2: Google, Twitter, Facebook
- Web3: ENS domain ownership, wallet activity
- Identity protocols: BrightID, Proof of Humanity
Users with more credible stamps received a higher Trust Bonus, making their donations more influential in QF calculations.
π Evolution into Human Passport¶
Gitcoin Passport eventually evolved into Human Passport, following a trajectory:
- Gitcoin Passport β Anti-Sybil tool for Gitcoin Grants
- Passport.xyz β Expanded as a general Web3 identity layer
- Human Passport β After acquisition by Holonym, it aims to become the worldβs largest privacy-focused Proof-of-Humanity protocol
π₯ Conclusion: Human Passport solves a foundational Web3 problem β how to verify real humans without compromising privacy β and strengthens the fairness and sustainability of decentralized public goods funding like QF.
3. How It Works¶
π 3.1 Project Approach¶
- Core Idea: Create a decentralized identity system that allows individuals to prove they are real humans using Web3 technologies.
- Users maintain ownership over their identity and verification data, which is cryptographically secured.
- Once verified, users receive a non-transferable "Human Passport" that proves their humanness on-chain.
- This can be used across Web3 platforms to enable human-gated access, reputation systems, and secure AI interactions.
ποΈ 3.2 Architecture¶
- Provide a high-level overview of the system architecture.
- Include a diagram or describe the components and how they are connected.
- Focus on how data flows between users, models, smart contracts, etc.
π― 3.3 Core Components¶
Stakeholder | How They Use / Earn the Token |
---|---|
Web3 | Builds applications that require human verification. Pays HUMN tokens to access verified data or human-passport services. |
Verifier / Node | Validates whether a user is a real human. |
π 3.4 Workflow Overview¶
Collecting Stamps & HUMN tokens¶
- User should collect "stamps" to build their own "identity"
- Once we collect our stamps enough (20 points), we get token [HUMN]
- Users use HUMN when proving themselves in Web3
Validation¶
- Client requests access to Web3
- Web3 requests jobs to validate whether it is human or not
- Validator detects jobs and send validation results
- By results, validator could get results / slashing
¶
4. Token Economy¶
Human Passport has Human Token [HUMN]
Token Mehanism¶
Mechanism | How does it work |
---|---|
Mint/Burn | HUMN tokens are minted as rewards for verified contributions (e.g., validators, data providers). |
Staking / Slashing | Verifiers need to stake HUMN tokens to participate. If Validator results wrong answer, validators gets slashing (token loss) |
5. Project Status & Plan¶
Current Development Stage¶
The project is currently in the beta phase, with core features implemented and undergoing community testing. The team has released a public testnet and is inviting users to try out the identity verification flow using mock data or limited biometric inputs. A mainnet launch is planned for Q4 2025, pending results from the beta phase and audit feedback.
Adoption¶
Several Web3 DApps (including governance DAOs and reputation systems) are experimenting with Human Passport integration for bot-resistant access. Adoption is still early, but several open-source contributors are involved in building wallet integration tools and ZK verification modules.
6. User Experience & Hands-on Review¶
Collecting Stamps¶
I wanted to make myself approved. I tried Physical Verification.
I tried "Phone Verification"
Using API¶
We can use stamp API, which provides us users' stamps info.
7. Why Blockchain¶
- Self-sovereign identity: Users own and control their credentials via their wallets. No third party can modify or revoke them.
- Immutable proofs: Once a Human Passport is issued on-chain, it cannot be forged or altered.
- Interoperability: Verified identity can be reused across multiple decentralized applications (DAOs, social networks, on-chain voting, etc.)
- Transparent verification logic: Smart contracts handle the issuance and validation of credentials transparently, with no hidden rules or bias.
- Bot resistance: On-chain uniqueness (e.g. 1 passport = 1 verified human) can help mitigate Sybil attacks without sacrificing user privacy.
8. Insights & Limitations¶
β Key Takeaways¶
- It can proove one's identity by various methods: "Web2 authentication", "Governance Id"
- This tool has evolved from gitcoin to larger scale to proove one's humanity identity.
β Limitations / Open Questions¶
- Currently we can just proove ourself only by sign-in, but would people like the method paying tokens?
-
People are not familiar with "crypto payment" yet.
-
How can we make people to use this service? (To get used to)
9. Reflections & Discussion¶
π‘ Personal Reflections¶
- I have found out that I have to use enough money (0.25 ETH) to prove myself as ethereum. Also, we need ethereum coins to prove some identities (stamps). I wondered would this be because we don't need to pay any money to prove ourselves currently.
β Discussion Questions¶
- Is it fair to require users to spend money to prove their humanity in Web3?
10. Insight from others¶
-
11. References¶
Appendix¶
π§Ύ DID & VC: A Simple Overview¶
β 1. What is DID (Decentralized Identifier)?¶
- A decentralized, user-controlled digital identifier.
- Not issued or managed by a central authority.
- Example:
did:example:123456abcdef
β 2. What is VC (Verifiable Credential)?¶
- A digitally signed certificate that proves claims like diplomas, licenses, memberships, etc.
- Based on DID and cryptographically verifiable.
- Cannot be easily forged or tampered with.
π Key Roles in the DID-VC Ecosystem¶
Role | Description |
---|---|
Issuer | Issues credentials (e.g., university, bank, gov) |
Holder | Receives and stores credentials (e.g., user) |
Verifier | Verifies the credential (e.g., employer, website) |
π DID-VC Workflow Diagram¶
This diagram shows the basic flow of how Verifiable Credentials work using DIDs.
Step 1: Credential Issuance
Step 2: Presentation & Verification
+----------------+
| Issuer |
| (e.g. University, Bank)
+----------------+
|
| Issues Verifiable Credential (VC)
v
+----------------+
| Holder |
| (e.g. User Wallet/App)
+----------------+
|
| Presents VC upon request
v
+----------------+
| Verifier |
| (e.g. Employer, Platform)
+----------------+
π Key Features of DID-VC Systems¶
Feature | Description |
---|---|
Privacy-Preserving | Users can share only the minimum necessary data |
Tamper-Proof | Credentials are digitally signed, making forgery nearly impossible |
Cryptographically Verifiable | Verifiers can verify the credential without contacting the issuer |
User-Owned Identity | Users manage their own DIDs and credentials using personal wallets/apps |
π Example Scenario: University Diploma¶
- Issuer: A university issues a digital diploma as a VC, signed using its DID.
- Holder: The student stores the diploma in their digital wallet.
- Verifier: A company requests proof of the student's graduation.
- Verification: The student shares the VC, and the company verifies it using the universityβs DID signature.
DID-VC Demo¶
β Conclusion¶
DID and VC systems allow individuals to:
- Control their own identity data
- Share verifiable proof without revealing unnecessary details
- Build trust in decentralized and privacy-respecting ways
Together, they form a foundational layer for Web3 identity, decentralized reputation, and secure digital interactions.