Supabase Launches NFT Marketplace

Summary

Non-fungible tokens frequently suffer from the copy-paste problem, where public URLs allow unauthorized users to download underlying media directly from web hosts or IPFS. To address this issue, BuyMeth proposes combining public blurhash thumbnails with full image files encrypted under the active owner's cryptographic key and hosted on IPFS. Completed sales trigger Metamask to re-encrypt the file with the buyer's public key, followed by a one-week escrow challenge window where automated verification matches decrypted image hashes against public thumbnails. Ongoing royalty distributions to previous owners provide a financial mechanism to disincentivize leaking unencrypted original image files. The announced platform serves as an April Fools joke rather than an active Supabase product release.

Context

Standard NFTs contain public URLs to images hosted on web servers or IPFS, allowing non-owners to download original media directly without possessing token ownership.

Approach / What changed

BuyMeth pairs an on-token blurhash with an IPFS link to an image encrypted by the current owner's key. Upon sale, Metamask re-encrypts the asset with the buyer's public key, updating the token URL. An escrow contract retains funds across a one-week challenge period while the buyer decrypts the file and verifies it against the blurhash, backed by resale royalties to deter past owners from leaking original media.

Takeaways

• Standard NFT architectures expose media assets to non-owners through openly accessible web or IPFS URLs.
• The BuyMeth design pairs public blurhash metadata with owner-encrypted IPFS payloads that are re-encrypted with the buyer's public key during sales.
• Transaction security relies on a one-week escrow window allowing buyers to submit cryptographic proof if decrypted files fail automated blurhash checks.

Related reading

• Supabase · Apr 6, 2021

  Supabase Beta March 2021

  Supabase announced a series of platform updates for March 2021, headlined by the launch of Supabase Storage and new local development capabilities. The new storage offering integrates an open-source Fastify and TypeScript API backed by S3, while direct database connections now bundle PgBouncer for connection pooling. Developers can run the platform locally via the Supabase CLI, utilize Docker tooling for self-hosting, and access the open-sourced Supabase UI component library. Community contributions brought OAuth scopes to Supabase Auth for requesting elevated third-party provider permissions, alongside newly published free and pro pricing tiers. In addition, development is underway on an Elixir-based workflow engine compatible with the Amazon States Language for automated event handling.

  Paul Copplestone

• Supabase · Apr 2, 2021

  Supabase Dot Com

  Supabase announced a migration of its primary website from supabase.io to supabase.com over the upcoming week. User API endpoints will remain unchanged on supabase.co, requiring no configuration adjustments for active applications. The company originally selected supabase.io as a meme-inspired placeholder after releasing a Postgres Realtime engine on GitHub in 2019 and failing to find an available dot com name. Following advice from Y Combinator to secure a dot com address, the founders bypassed domain brokers charging percentage fees and negotiated directly with the domain owner, whose business address was located one hundred meters from the founder's home. The migration updates public website destinations while preserving existing developer infrastructure unaffected.