Questions tagged [security]

This tag should be used for questions regarding security issues with the design or implementation of Bitcoin and related cryptocurrencies.

Filter by
Sorted by
Tagged with
0
votes
1answer
59 views

How to derive the Private key when the two the nonces are k and k*2

Is the same private key using k and k*2 respectively in two different signatures vulnerable? If yes How to calculate the key in this case Here is an example, Both signatures are valid and the nonce of ...
-1
votes
0answers
27 views

White Paper for STO [closed]

As a freelancer how much would you guys ask to develop a white paper for a STO? Do you guys know any company that does this service? Thanks!
0
votes
0answers
27 views

There is a problem with file SHA256SUMS.asc [duplicate]

There is a problem with a file SHA256SUMS.asc in https://bitcoin.org/en/download It consists a lot of strange signatures and no sha256sum strings and no signatures of Wladimir J. van der Laan’s ...
1
vote
2answers
59 views

If you wanted to privately receive bitcoin from someone, how would you do that?

I do not like to be tracked when receiving or sending bitcoins. How do you make a secure wallet? If you wanted to privately get bitcoin from someone, how do you get it? How do you get the address to ...
0
votes
0answers
38 views

Help Unlock Bitcoin Wallet [duplicate]

I have a lot of BTC in my wallet, but a virus infected my old computer. I remember the login, but there is no password and mail (((Is it possible to do something ???
0
votes
0answers
18 views

Is this a good recommendation as secure way to generate paper wallet via iOS app for non-technical user?

I have suggested to a non-technical friend to use this as a way to generate a paper wallet using an iphone. I'm trying to see if there are any pitfalls. I have used the air-gapped PC method for myself ...
0
votes
1answer
33 views

Reusing same address potential security vunerability?

I was watching Andreas Antonopoulos talk about security on youtube. I heard him say something about using the same public address multiple times could increase risk of your private key being cracked ...
0
votes
1answer
39 views

What is to prevent someone from giving an old school DDOS attack?

So I'm not talking about on-chain dos attack via means of penny flooding and whatnot. But what happens if the actual nodes are taken offline by an old school distributed denial of service attack via a ...
0
votes
2answers
32 views

How many characters of an address do I actually need to verify?

Let's assume I want to verify the receive address on the phone. The recipient confirms the first M and last N characters of the address. How big is the computational effort for an attacker to create a ...
0
votes
1answer
40 views

bitcoincore with linux (tgz) or arm linux

I am running a node on a raspberry pi 4 model B 8gb with linux as os, should I update bitcoincore with linux (tgz) or arm linux.
0
votes
1answer
46 views

Why does the locking script for MultSig contain PubKeys instead of PubKeyHash?

I am reading "Mastering Bitcoin" by Andreas Antonopoulos. In the transactions section, the locking script for normal account(single address) is OP_DUP OP_HASH160 <Cafe Public Key Hash> ...
0
votes
1answer
35 views

Why is signature S value is unnecessarily high not safe?

I get frequent warning when sending RawTX to PushTX message (Non-canonical signature: S value is unnecessarily high) Why is signature S with a large value dangerous (that is, when the first HEX ...
0
votes
1answer
59 views

How can I contact Bitcoin.org

I need to contact with some support from "bitcoin.org". Ive tried to found some email adress or contact with them with their web, but its simply impossible. Somebody know how can i contact ...
0
votes
1answer
36 views

Best security practices accessing/trading crypto on computer/mobile

I’ve read online with regards to crypto that, as hardware wallet users, we should treat all devices, computer, mobile phone, software, exchanges/wallets, etc. as compromised. That being said, I have ...
0
votes
1answer
35 views

What’s the safest long-term hardware wallet solution?

Looking for safest hardware wallet solution, for long time storage. Thanks!
1
vote
4answers
93 views

If the nodes are what keep Bitcoin decentralized, what if some big internet company spun up 60%+ majority nodes?

If the nodes are what keep Bitcoin decentralized, what if some big internet company spun up 60%+ majority nodes? What’s stopping them from manipulating the blockchain to change transactions?
9
votes
4answers
6k views

How can Bitcoin.org be hacked?

Suddenly: The Bitcoin Foundation is giving back to the community! We want to support our users who have helped us along the years. Send Bitcoin to this address, and we will send double the amount in ...
1
vote
0answers
45 views

What do people mean when they say that Bitcoin are "unconfiscateable"? [duplicate]

So all my Bitcoin are on an encrypted wallet.dat inside a VeraCrypted USB memstick inside a fireproof safe. While this might stop random a burglar, how does it stop the government from confiscating ...
3
votes
1answer
323 views

Why does the TXID have 256 bits when Bitcoin's address security is 160-bit?

Commonly used Bitcoin addresses have the security of 2160 (due to the RIPEMD-160 hash). This means that Bitcoin is based on the fact that 160-bit security is good enough. If someone breaks 160-bit ...
0
votes
2answers
116 views

What do they mean by "12/24 words" or "seed words"?

Having read thousands of Bitcoin threads/questions on Reddit, there's constant references to "your 12/24 words" or "seed words". They never once refer to wallet.dat. I have used ...
2
votes
1answer
37 views

Can everyone see "message signatures" I create & verify?

I need to sign and verify messages on a couple of addresses, and I need to write my full name and address as message. Is there any concern that anyone can read the message(name and address) other than ...
0
votes
2answers
53 views

How do I get my bitcoin from exchange and put it on the bitcoin network (blockchain)? and how do i do something similar with ethereum?

Currently my bitcoin is store in Exchange. I wonder if I should simply generate bitcoin address and private key in BitAddress and send to this address and safely store the keys that was generated. But ...
0
votes
2answers
90 views

Why bitcoins storing on a smartphone are considered vulnerable?

Let's suppose, someone stores all their bitcoins in an Android or iOS wallet. he/she never stores a seed on the phone he/she uses different addresses for change wallet and gadget are password ...
0
votes
1answer
39 views

Does Bitcoin network require at least one third honest nodes to be secure?

In byzantine generals problem, it is proved that one third or more generals should be loyal, or the problem is unsolvable from a mathematical standpoint. Does Bitcoin network follow the same rule? How ...
3
votes
0answers
25 views

Keys Security Best practices in a Lightning company

"What are some key security practices for running a company that works on Lightning? Risk of someone running away with the funds Alternatives to multi-sig for lightning Resources in the space ...
0
votes
1answer
39 views

Is it possible that most validating nodes are dishonest nodes?

I know that if mining nodes are dishonest, they try to double spend. Then if there are many dishonest validator nodes(not mining, but only validating transactions and blocks) on the blockchain network,...
0
votes
0answers
36 views

My bitcoin was approved but not spent [duplicate]

So i found out that my transaction was deemed suspicions for money laundering I guess. lol... of course it wasn't. I opened an account with bitcoin exchange and when i went to blockchain.com to send ...
0
votes
1answer
54 views

Considering the potential upcoming legislation in the U.S., what moves can someone make before it goes into effect to protect themselves?

The upcoming infrastructure bill includes some crypto provisions, and it's getting a lot of attention. There are varying opinions on just how bad these provisions are, but regardless of severity they ...
0
votes
1answer
17 views

Integrity of Bitcoin transaction outputs

I am a noob. Currently, I am reading Mastering Bitcoin book. If I understand correctly, output of a bitcoin transaction is just a locking script with this format: scriptPubKey: "OP_DUP OP_HASH160 ...
0
votes
1answer
45 views

Fuzzing descriptor wallet RPCs

Is SQL injection a possibility while using JSON-RPC and Descriptor wallet RPCs? Consider one parameter in some descriptor wallet RPC is vulnerable and returns some data with SQL queries that shouldn't ...
2
votes
2answers
526 views

Incoming transaction has been marked as pending since 2013. How can I retrieve it?

I requested BTC from someone back in 2013. Its been in pending status ever since. It has nearly 500,000 confirmations. The value of transaction when initiated was only $200 or so. Now the value is ...
1
vote
1answer
55 views

Crossing borders: security scheme ideas

More and more airports force you to decrypt your data, they will also dump your stuff keeping a backup. This could happen in just about any border you try to cross. It is only safe to expect this to ...
1
vote
1answer
72 views

What is the electrum bitcoin wallet password encryption method?

What method does Electrum bitcoin wallet use for password encryption? I want to check to see if the file encrypted with the password is secure. And what are the ways around to decrypt it outside the ...
0
votes
1answer
88 views

What is threat model for Bitcoin?

Bitcoin is secure when 51% of the miners are honest. We also need every node to have at least one honest peer to avoid eclipse attacks. Are these the only assumptions based on which Bitcoin is secure? ...
0
votes
0answers
28 views

Can dishonest miners spam fake blocks? [duplicate]

How, if at all, does bitcoin disincentivize spam blocks by adversarial/dishonest miners? As I understand it, blocks are propagated throughout the network using a gossip protocol. If that's true, I ...
0
votes
1answer
32 views

Trezor Security

I'm not completely sure this is on topic. I apologize if it's not. I have a 24-word seed stored (etched on metal) in my house. I continue to worry (just a little) that the metal might either fail to ...
0
votes
1answer
73 views

Are Satoshi's satoshis less secure than they should be?

So, Satoshi mined a bunch of BTC early on (but not in a "pre-mine" way), and has not moved them ever since. Doesn't that mean that his coins thus uses the very earliest "format", ...
2
votes
1answer
129 views

CVE-2018-20586 and RPC AUTH

I was reading about CVE-2018-20586 which allowed injection of arbitrary data into the debug log via an RPC in https://medium.com/@lukedashjr/cve-2018-20586-disclosure-ff3e1ab9a21f One thing that I ...
3
votes
1answer
76 views

Why is transaction pinning more of a concern at the commitment level rather than the HTLC level of Lightning?

In this week's IRC workshop on L2 onchain support t-bast and ariard agreed that transaction pinning is more of a concern at the commitment level (e.g. delaying the parent of a child CLTV transaction) ...
1
vote
1answer
66 views

Will the Bitcoin Network Security decrease after the last Bitcoin was mined? [duplicate]

As far as I understand Bitcoin mining the block reward consists of newly emitted and transaction fees. However, this new emission will disappear in the future and there will be only be the transaction ...
2
votes
2answers
127 views

Can ACINQ (Phoenix wallet peer) steal my funds during a recovery?

Phoenix wallet is a unique Lightning wallet in that, among other things, it allows the user to restore channels by simply entering their seed. According to ACINQ's blogpost, this is how they achieve ...
0
votes
1answer
66 views

Process to get started with bitcoin for beginners [duplicate]

I'm new to all the crypto stuff, and I spent some time reading about it to get familiar with it, and now I'd like to start the experience, though I'd first like to have some feedback about whether I ...
0
votes
0answers
49 views

Which app generates stronger mnemonic seed?

Mnemonic phrase, mnemonic seed, or seed phrase are defined as a secret group of words that represent a wallet. When used in sequence they allow access to the cryptocurrencies stored within. “Mnemonic” ...
5
votes
2answers
899 views

What exactly is "privatekeys.pw"?

Today, I stumbled upon this bizarre website: https://privatekeys.pw/ Bitcoin Private Keys Directory The FAQ makes no sense at all and doesn't explain what it is about whatsoever. What could they be ...
0
votes
0answers
27 views

How can I be sure that anyone (i.e miner) will not change outputs from transaction? [duplicate]

I am wondering if ie. miner cannot change outputs from transaction. We have example of transaction: { "version": 1, "locktime": 0, "vin": [ { "txid": &...
0
votes
1answer
142 views

Can an attacker flood the Bitcoin network with fake transactions?

We are in 2050. People show an ever-growing distrust in the global banking system and start transitioning to only using Bitcoin: most companies accept it as a form of payment, and people settle their ...
17
votes
7answers
8k views

How can government "seize" bitcoins?

Last year the U.S. Department of Justice posted this press release claiming U.S. "law enforcement seized several thousand Bitcoins on November 3, 2020." How is it possible for anyone to &...
-1
votes
1answer
66 views

Orderly Transition Away from ECC? Or Bitcoin to zero?

Let's say asymmetric public key cryptography is wide open, and can be broken using a public key or the signature. Namely, that I can determine the private key using the information revealed in a ...
0
votes
1answer
34 views

Did pools verify constantly the ouput of createrawtransaction when they build their coinbase transaction?

Pools creates their own coinbase transaction to pay their selves, and they begin the PoW by hashing different Headers, what prevent a hacker from changing the createrawtransaction with different ...
4
votes
1answer
129 views

When you make a Bitcoin transaction, can the receiving person (and the world?) really see how much coins you have in the entire wallet?

I really hope that I've got this horribly wrong, but I have to ask... I have this idea, which I base on comments and explanations I've heard over the years, that when you make a Bitcoin transaction, ...

1
2 3 4 5
18