Bitcoin

Questions tagged [security]

Ask Question

This tag should be used for questions regarding security issues with the design or implementation of Bitcoin and related cryptocurrencies.

841 questions
Newest
Active
Bountied
Unanswered
Filter by
Sorted by
Tagged with
1
vote
1answer
120 views

Why TXID has 256 bits when Bitcoin's address security is 160-bit anyway?

Commonly used Bitcoin addresses have the security of 2160 (due to the RIPEMD-160 hash). This means that Bitcoin is based on the fact that 160-bit security is good enough. If someone breaks 160-bit ...
0
votes
0answers
34 views

How to restore a ripple wallet, having not the security key? [closed]

I have a problem. First of all, I forgot to save the security key when I registered for Ripple in 2013. I only have the Ripple account number, password and email address, but I cannot recover the ...
0
votes
2answers
60 views

What do they mean by "12/24 words" or "seed words"?

Having read thousands of Bitcoin threads/questions on Reddit, there's constant references to "your 12/24 words" or "seed words". They never once refer to wallet.dat. I have used ...
2
votes
1answer
33 views

Can everyone see "message signatures" I create & verify?

I need to sign and verify messages on a couple of addresses, and I need to write my full name and address as message. Is there any concern that anyone can read the message(name and address) other than ...
1
vote
0answers
40 views

Dormant & Abandaoned Accounts? [closed]

I run a Bitcoin service where some accounts with balance might remain dormant for years or even decades. In most cases, the owners either passed away or moved onto other ventures and have no plans of ...
0
votes
2answers
51 views

How do I get my bitcoin from exchange and put it on the bitcoin network (blockchain)? and how do i do something similar with ethereum?

Currently my bitcoin is store in Exchange. I wonder if I should simply generate bitcoin address and private key in BitAddress and send to this address and safely store the keys that was generated. But ...
0
votes
2answers
82 views

Why bitcoins storing on a smartphone are considered vulnerable?

Let's suppose, someone stores all their bitcoins in an Android or iOS wallet. he/she never stores a seed on the phone he/she uses different addresses for change wallet and gadget are password ...
1
vote
1answer
25 views

Does Bitcoin network require at least one third honest nodes to be secure?

In byzantine generals problem, it is proved that one third or more generals should be loyal, or the problem is unsolvable from a mathematical standpoint. Does Bitcoin network follow the same rule? How ...
3
votes
0answers
24 views

Keys Security Best practices in a Lightning company

"What are some key security practices for running a company that works on Lightning? Risk of someone running away with the funds Alternatives to multi-sig for lightning Resources in the space ...
0
votes
1answer
33 views

Is it possible that most validating nodes are dishonest nodes?

I know that if mining nodes are dishonest, they try to double spend. Then if there are many dishonest validator nodes(not mining, but only validating transactions and blocks) on the blockchain network,...
1
vote
0answers
34 views

My bitcoin was approved but not spent [duplicate]

So i found out that my transaction was deemed suspicions for money laundering I guess. lol... of course it wasn't. I opened an account with bitcoin exchange and when i went to blockchain.com to send ...
0
votes
1answer
53 views

Considering the potential upcoming legislation in the U.S., what moves can someone make before it goes into effect to protect themselves?

The upcoming infrastructure bill includes some crypto provisions, and it's getting a lot of attention. There are varying opinions on just how bad these provisions are, but regardless of severity they ...
0
votes
1answer
17 views

Integrity of Bitcoin transaction outputs

I am a noob. Currently, I am reading Mastering Bitcoin book. If I understand correctly, output of a bitcoin transaction is just a locking script with this format: scriptPubKey: "OP_DUP OP_HASH160 ...
0
votes
1answer
29 views

Fuzzing descriptor wallet RPCs

Is SQL injection a possibility while using JSON-RPC and Descriptor wallet RPCs? Consider one parameter in some descriptor wallet RPC is vulnerable and returns some data with SQL queries that shouldn't ...
3
votes
2answers
501 views

Incoming transaction has been marked as pending since 2013. How can I retrieve it?

I requested BTC from someone back in 2013. Its been in pending status ever since. It has nearly 500,000 confirmations. The value of transaction when initiated was only $200 or so. Now the value is ...
1
vote
1answer
49 views

Crossing borders: security scheme ideas

More and more airports force you to decrypt your data, they will also dump your stuff keeping a backup. This could happen in just about any border you try to cross. It is only safe to expect this to ...
2
votes
1answer
53 views

What is the electrum bitcoin wallet password encryption method?

What method does Electrum bitcoin wallet use for password encryption? I want to check to see if the file encrypted with the password is secure. And what are the ways around to decrypt it outside the ...
1
vote
1answer
82 views

What is threat model for Bitcoin?

Bitcoin is secure when 51% of the miners are honest. We also need every node to have at least one honest peer to avoid eclipse attacks. Are these the only assumptions based on which Bitcoin is secure? ...
0
votes
0answers
27 views

Can dishonest miners spam fake blocks? [duplicate]

How, if at all, does bitcoin disincentivize spam blocks by adversarial/dishonest miners? As I understand it, blocks are propagated throughout the network using a gossip protocol. If that's true, I ...
0
votes
1answer
27 views

Trezor Security

I'm not completely sure this is on topic. I apologize if it's not. I have a 24-word seed stored (etched on metal) in my house. I continue to worry (just a little) that the metal might either fail to ...
0
votes
1answer
69 views

Are Satoshi's satoshis less secure than they should be?

So, Satoshi mined a bunch of BTC early on (but not in a "pre-mine" way), and has not moved them ever since. Doesn't that mean that his coins thus uses the very earliest "format", ...
2
votes
1answer
126 views

CVE-2018-20586 and RPC AUTH

I was reading about CVE-2018-20586 which allowed injection of arbitrary data into the debug log via an RPC in https://medium.com/@lukedashjr/cve-2018-20586-disclosure-ff3e1ab9a21f One thing that I ...
4
votes
1answer
71 views

Why is transaction pinning more of a concern at the commitment level rather than the HTLC level of Lightning?

In this week's IRC workshop on L2 onchain support t-bast and ariard agreed that transaction pinning is more of a concern at the commitment level (e.g. delaying the parent of a child CLTV transaction) ...
1
vote
1answer
64 views

Will the Bitcoin Network Security decrease after the last Bitcoin was mined? [duplicate]

As far as I understand Bitcoin mining the block reward consists of newly emitted and transaction fees. However, this new emission will disappear in the future and there will be only be the transaction ...
3
votes
2answers
104 views

Can ACINQ (Phoenix wallet peer) steal my funds during a recovery?

Phoenix wallet is a unique Lightning wallet in that, among other things, it allows the user to restore channels by simply entering their seed. According to ACINQ's blogpost, this is how they achieve ...
0
votes
1answer
61 views

Process to get started with bitcoin for beginners [duplicate]

I'm new to all the crypto stuff, and I spent some time reading about it to get familiar with it, and now I'd like to start the experience, though I'd first like to have some feedback about whether I ...
0
votes
0answers
36 views

Which app generates stronger mnemonic seed?

Mnemonic phrase, mnemonic seed, or seed phrase are defined as a secret group of words that represent a wallet. When used in sequence they allow access to the cryptocurrencies stored within. “Mnemonic” ...
5
votes
2answers
661 views

What exactly is "privatekeys.pw"?

Today, I stumbled upon this bizarre website: https://privatekeys.pw/ Bitcoin Private Keys Directory The FAQ makes no sense at all and doesn't explain what it is about whatsoever. What could they be ...
0
votes
0answers
27 views

How can I be sure that anyone (i.e miner) will not change outputs from transaction? [duplicate]

I am wondering if ie. miner cannot change outputs from transaction. We have example of transaction: { "version": 1, "locktime": 0, "vin": [ { "txid": &...
0
votes
1answer
120 views

Can an attacker flood the Bitcoin network with fake transactions?

We are in 2050. People show an ever-growing distrust in the global banking system and start transitioning to only using Bitcoin: most companies accept it as a form of payment, and people settle their ...
18
votes
7answers
7k views

How can government "seize" bitcoins?

Last year the U.S. Department of Justice posted this press release claiming U.S. "law enforcement seized several thousand Bitcoins on November 3, 2020." How is it possible for anyone to &...
0
votes
1answer
65 views

Orderly Transition Away from ECC? Or Bitcoin to zero?

Let's say asymmetric public key cryptography is wide open, and can be broken using a public key or the signature. Namely, that I can determine the private key using the information revealed in a ...
0
votes
1answer
33 views

Did pools verify constantly the ouput of createrawtransaction when they build their coinbase transaction?

Pools creates their own coinbase transaction to pay their selves, and they begin the PoW by hashing different Headers, what prevent a hacker from changing the createrawtransaction with different ...
4
votes
1answer
122 views

When you make a Bitcoin transaction, can the receiving person (and the world?) really see how much coins you have in the entire wallet?

I really hope that I've got this horribly wrong, but I have to ask... I have this idea, which I base on comments and explanations I've heard over the years, that when you make a Bitcoin transaction, ...
7
votes
1answer
2k views

Should I be worried that bitcoincore.org now suddenly only provides an "unsigned" Bitcoin Core installer?

My security script for downloading and verifying new versions of Bitcoin Core barked at me the other day, when the new v0.21.1 was released. (Which still is nowhere to be found on bitcoin.org, BTW.) ...
0
votes
1answer
39 views

Newbie question about the security of mixing

If I am running my own node, and using a mixer to anonymize my BTC, will it not be connected anyway because the transactions are to/from my own node? I mean I am sending the BTC to the mixer from my ...
0
votes
1answer
75 views

Multisig Setup - Pruned Bitcoin Core on Computer vs. Dedicated Hardware

Are there security implications of running a pruned Bitcoin Core node on a personal computer vs. a full Bitcoin Core node on a dedicated hardware device (i.e. Raspberry Pie with Umbrel, myNode, nodl, ...
-2
votes
1answer
44 views

Multisig Wallet Setup - Security Tradeoffs With Pruned Bitcoin Core Node?

What are the security tradeoffs of running a pruned Bitcoin Core node for a multisig wallet, such as Specter? It seems that using a multisig wallet with a pruned Bitcoin Core node could be a good ...
0
votes
0answers
51 views

Secure Bitcoin Core [duplicate]

For example, take two PC (online, offline) with the last Bitcoin Core. Online PC has only public keys and the updated blockchain. It will use to watching for balance and create and send transactions. ...
0
votes
1answer
60 views

How do nodes contribute to security when the power comes from mining and what is the chain of transaction validation?

Blockchain security comes from the decentralisation of hashing power by miners. They append transactions to a block, perform PoW and add them to the blockchain when that validate blocks. How do nodes ...
0
votes
1answer
95 views

Why do people claim that governments cannot confiscate Bitcoins?

Let's say that I practice impeccable data security processes using dedicated devices, encryption, and no clear-text backups. Even if they cannot find all of my backups, this doesn't protect me from ...
0
votes
2answers
103 views

Is brute forcing a private key with unspent coins getting easier?

Is the likelihood of correctly guessing a private key with unspent coins increasing due to: More addresses being used resulting in more private keys with unspent coins (i.e. higher chance that a ...
1
vote
0answers
38 views

Why bother with 'account' in derivation path?

After lots of wallet testing, I'm thinking that only account level 0 should be used. Especially, when you consider restoring a wallet from the seed phrase. m / purpose' / coin_type' / account' / ...
0
votes
1answer
105 views

If Cryptocurrency offers anonymity, why is it considered by forensic professionals to be the best currency for fighting illicit transactions?

A paper by titled An Analysis of Bitcoin’s Use in Illicit Finance discusses how Cryptocurrency is considered by forensic professionals to be the best currency for fighting illicit transactions. In ...
0
votes
2answers
48 views

Storing private keys in cloud providers enviroment variables

Is it ok to store private keys in cloud provider (such as AWS, Firebase) secrets (enviroment variables) in cloud functions (such as lambdas or firebase cloud functions)? I understand I would be ...
0
votes
0answers
60 views

How many hops does Coinbase and other exchanges track your movement of BTC when it leaves their exchanges?

I've read reports of Coinbase users getting an email stating that they detected their Bitcoins being moved to an unapproved exchange or site after removing their bitcoins off of the exchange. What is ...
-1
votes
1answer
50 views

BTC on blockchain

I see my Wallet address on the Blockchain but it says spent and what does that mean? It did not arrive to the wallet i sent it too! I need it to be located and returned or sent to the wallet i gave.
1
vote
1answer
71 views

Is it actually possible to secure your coins while also allowing access to "near and dear" when you die?

I have my wallet.dat files encrypted, stored on a computer which in turn is encrypted. All storage devices where the files are backed up to are also encrypted. I strongly doubt that any human could ...
0
votes
1answer
127 views

Address reuse, cold storage and private keys [duplicate]

I was going through some old posts regarding address reuse and came across a few remarks I wasn't aware of, and want to make sure I understood correctly. I knew address reuse wasn't the best for ...
2
votes
3answers
211 views

Energy cost of bitcoin vs physical currency?

The bitcoin mining infrastructure uses a certain amount of energy and processing power to operate. The resource usage is often cited as part of arguments critical of bitcoin. But relatively speaking ...

1
2 3 4 5
…
17

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.