According to official news, recently, the Bybit exchange was stolen 1.50 billion US dollars, and the security issues of the Web3 industry have once again attracted attention. For example, there are a lot of phishing and account theft in Telegram, resulting in the loss of a large number of users' assets. The recently released distributed social platform Luffa aims to build the most secure decentralized encrypted communication platform. Luffa can avoid the above-mentioned risks of centralized servers being breached and personal information leaking. Luffa is a decentralized social application built on the Endless protocol. It uses end-to-end encryption technology and centralized data backup. Even if the customer breaches the Luffa server, they cannot obtain the user's chat information. At the same time, using mnemonic login, there is no personal information leakage and SMS verification code hijacking.