Questions tagged [security]
This tag should be used for questions regarding security issues with the design or implementation of Bitcoin and related cryptocurrencies.
811
questions
0
votes
1answer
24 views
Did pools verify constantly the ouput of createrawtransaction when they build their coinbase transaction?
Pools creates their own coinbase transaction to pay their selves, and they begin the PoW by hashing different Headers, what prevent a hacker from changing the createrawtransaction with different ...
0
votes
0answers
16 views
Password has not changed, it's correct yet not accepted! [closed]
I sign in using either face ID with the app or autofill on my Mac, my password has never changed. All of a sudden, I can't sign in & apparently there's nothing I can do?!! I really don't ...
0
votes
0answers
22 views
In God We Trust and Faith in Cryptocurrency [closed]
Currency currently has "In God We Trust" written on it.
Has faith in God been replaced with faith in Cryptocurrency?
Or more directly, faith in the cryptographic primitives used to "...
3
votes
1answer
67 views
When you make a Bitcoin transaction, can the receiving person (and the world?) really see how much coins you have in the entire wallet?
I really hope that I've got this horribly wrong, but I have to ask...
I have this idea, which I base on comments and explanations I've heard over the years, that when you make a Bitcoin transaction, ...
6
votes
1answer
1k views
Should I be worried that bitcoincore.org now suddenly only provides an “unsigned” Bitcoin Core installer?
My security script for downloading and verifying new versions of Bitcoin Core barked at me the other day, when the new v0.21.1 was released. (Which still is nowhere to be found on bitcoin.org, BTW.)
...
0
votes
1answer
33 views
Newbie question about the security of mixing
If I am running my own node, and using a mixer to anonymize my BTC, will it not be connected anyway because the transactions are to/from my own node?
I mean I am sending the BTC to the mixer from my ...
0
votes
1answer
51 views
Multisig Setup - Pruned Bitcoin Core on Computer vs. Dedicated Hardware
Are there security implications of running a pruned Bitcoin Core node on a personal computer vs. a full Bitcoin Core node on a dedicated hardware device (i.e. Raspberry Pie with Umbrel, myNode, nodl, ...
-2
votes
1answer
36 views
Multisig Wallet Setup - Security Tradeoffs With Pruned Bitcoin Core Node?
What are the security tradeoffs of running a pruned Bitcoin Core node for a multisig wallet, such as Specter?
It seems that using a multisig wallet with a pruned Bitcoin Core node could be a good ...
0
votes
0answers
46 views
Secure Bitcoin Core [duplicate]
For example, take two PC (online, offline) with the last Bitcoin Core.
Online PC has only public keys and the updated blockchain. It will use to watching for balance and create and send transactions.
...
0
votes
1answer
41 views
How do nodes contribute to security when the power comes from mining and what is the chain of transaction validation?
Blockchain security comes from the decentralisation of hashing power by miners. They append transactions to a block, perform PoW and add them to the blockchain when that validate blocks. How do nodes ...
0
votes
1answer
83 views
Why do people claim that governments cannot confiscate Bitcoins?
Let's say that I practice impeccable data security processes using dedicated devices, encryption, and no clear-text backups. Even if they cannot find all of my backups, this doesn't protect me from ...
0
votes
1answer
40 views
Is brute forcing a private key with unspent coins getting easier?
Is the likelihood of correctly guessing a private key with unspent coins increasing due to:
More addresses being used resulting in more private keys with unspent coins (i.e. higher chance that a ...
1
vote
0answers
27 views
Why bother with 'account' in derivation path?
After lots of wallet testing, I'm thinking that only account level 0 should be used. Especially, when you consider restoring a wallet from the seed phrase.
m / purpose' / coin_type' / account' / ...
0
votes
1answer
54 views
If Cryptocurrency offers anonymity, why is it considered by forensic professionals to be the best currency for fighting illicit transactions?
A paper by titled An Analysis of Bitcoin’s Use in Illicit Finance discusses how Cryptocurrency is considered by forensic professionals to be the best currency for fighting illicit transactions. In ...
0
votes
2answers
42 views
Storing private keys in cloud providers enviroment variables
Is it ok to store private keys in cloud provider (such as AWS, Firebase) secrets (enviroment variables) in cloud functions (such as lambdas or firebase cloud functions)?
I understand I would be ...
0
votes
0answers
45 views
How many hops does Coinbase and other exchanges track your movement of BTC when it leaves their exchanges?
I've read reports of Coinbase users getting an email stating that they detected their Bitcoins being moved to an unapproved exchange or site after removing their bitcoins off of the exchange. What is ...
-1
votes
1answer
30 views
BTC on blockchain
I see my Wallet address on the Blockchain but it says spent and what does that mean? It did not arrive to the wallet i sent it too! I need it to be located and returned or sent to the wallet i gave.
1
vote
1answer
57 views
Is it actually possible to secure your coins while also allowing access to “near and dear” when you die?
I have my wallet.dat files encrypted, stored on a computer which in turn is encrypted. All storage devices where the files are backed up to are also encrypted. I strongly doubt that any human could ...
0
votes
1answer
55 views
Address reuse, cold storage and private keys [duplicate]
I was going through some old posts regarding address reuse and came across a few remarks I wasn't aware of, and want to make sure I understood correctly.
I knew address reuse wasn't the best for ...
2
votes
3answers
159 views
Energy cost of bitcoin vs physical currency?
The bitcoin mining infrastructure uses a certain amount of energy and processing power to operate.
The resource usage is often cited as part of arguments critical of bitcoin.
But relatively speaking ...
1
vote
1answer
58 views
How are malicious forks resolved?
I understand that forks are resolved by opting in for the eventual longest chain, preferring the chain with the longest POW. But everything I read on this suggests it's just random chance or that the ...
3
votes
2answers
123 views
Why do people apparently “look up Bitcoin addresses on websites”?
I often hear things such as:
Remember, if you look up an address on Blockchain.info or something, they will have a record of your IP address being interested in that address and thus associate it ...
1
vote
2answers
49 views
What prevent someone to not use the receiver address of one transaction as the sender in another one?
Title may be confusing you, and to be honest I am also confused how things work and I am new to this crypto world so sorry in advance if I am not using the correct words.
I try to explain :
Let say ...
0
votes
0answers
47 views
Bitcoin Core Security
Is there any site or resource where I can learn how to do security transactions while trading on bitcoin testnet
1
vote
1answer
107 views
Why is it impossible to get a straight answer as to whether Bitcoin is anonymous or not?
Yesterday, I asked a question which got linked to this answer: Is it true that all the bitcoins in existence are on the blockchain (the ledge), but it just depends on who the owner (address) is?
...
1
vote
1answer
25 views
What would stop some major company from blacklisting specific Bitcoins based on the “inputs” used and their “origins”?
I remember news about some exchange actually banning users based on some kind of "reputation score" on the inputs/coin parts they controlled/used, or got Bitcoin sent to them from. So even ...
1
vote
1answer
51 views
Changing bitcoin core password
Let's say I have 5 copies of my .dat file on individual flash drives. I download the blockchain and run a full node and have the core wallet. I copy my .dat file into bitcoin core. I type in the old ...
4
votes
1answer
75 views
Are “coin mixers” actually a real thing? Can they be trusted?
Ever since I started hearing about Bitcoin, people have been mentioning "coin mixers" to me, and told me to use them. However, even early on, when they were practically throwing away ...
1
vote
1answer
29 views
Are there any privacy benefits in using a separate wallet in Bitcoin Core to separate myself from my service?
I currently run Bitcoin Core with the following wallets loaded in:
hot.dat. Contains the smallest possible sum of Bitcoin. Unencrypted and used by myself for various personal Bitcoin purchases, and I ...
0
votes
1answer
51 views
Someon offered me btc mine trough his mining device
Someone from the social network offered me a btc mine through his mining device. He asked me for an email address so he could create a mining wallet address for me. I gave it to him. I don't know what ...
0
votes
0answers
31 views
Are there any privacy benefits in using a separate wallet in Bitcoin Core to “separate” myself from my service?
I currently run Bitcoin Core with the following wallets loaded in:
hot.dat. Contains the smallest possible sum of Bitcoin. Unencrypted and used by myself for various personal Bitcoin purchases, and I ...
0
votes
1answer
47 views
Why is SHA-256 mining secure?
My understanding is the when you are mining bitcoin you are looking for a string, or maybe a binary number (a) such that if you 'add' a to the block (b) you get a number (c) whose hash begins with a ...
0
votes
1answer
64 views
Is there a way to tell that our bitcoin is safe after we put it in a hardware wallet for cold storage after 3 or 5 years?
If I consolidated 1 bitcoin into an address using a hardware wallet, and put it in cold storage. Can I know after 3 to 5 years that the bitcoin is safe?
So far the research I have is: can I go to ...
0
votes
1answer
31 views
Is our hardware wallet safe if the PC or Mac has 3rd party apps?
For example, our PC or Mac might have 3rd party apps installed, such as Pixelmator, GIMP, or VLC player. They are usually considered to be safe apps.
However, is it true that when using a hardware ...
0
votes
1answer
67 views
Wallet suddenly shows transactions from someone else
I restored a wallet recently that I have not used in years. Back then, it was only Bitcoin, but at some point Ethereum was added. So now I see all my Bitcoin tx, but on top of that the Ethereum part ...
0
votes
1answer
36 views
bitcoin address after transaction security questions
I found an old paper wallet on an old computer of mine which is offline (I can count the number of coins with my fingers). I would like to distribute these coins now among 6-9 wallets (I want to give ...
0
votes
1answer
42 views
How is bitcoin (blockchain) secure?
I see a few different levels here and I want to clarify
There's various levels where your password could be potentially exposed... at least from my mind
Storage (paper wallet, metal wallet, cold ...
1
vote
2answers
60 views
Can Phoenix wallet steal my funds?
Phoenix wallet is a great UX Lightning Wallet, and they're able to deliver that UX by making a few different tradeoffs. None of those tradeoffs involve them owning your private key, but in their 2019 ...
0
votes
1answer
51 views
How to verify Wrapped Bitcoin (WBTC) issuance
I'm trying to understand how Wrapped Bitcoin (WBTC) issuance can be verified.
The WBTC custodian, BitGo, published the following material:
https://wbtc.network/dashboard/audit
This is a list of ...
0
votes
2answers
252 views
Bitcoin disappeared from Trezor wallet
Originally I installed my Trezor wallet onto my wife's computer (since my computer doesn't have a USB 2.0 port). Later, I bought an adapter and decided to transition the Trezor wallet to my computer. ...
1
vote
1answer
37 views
Multi Party ECDSA?
Are there any alternatives to the Multi Part ECDSA implementation contributed by ZenGo?
1
vote
1answer
39 views
Transferring funds from a cold wallet to a hot wallet - on chain or off chain?
I've seen two techniques when it comes to transferring funds from a cold wallet to a hot wallet. In one technique the cold wallet signs a transaction (offline of course) and transfers funds to the ...
0
votes
1answer
63 views
“Hot”, “Cold” & “Warm” Storage Wallets? [duplicate]
I've seen a number of sites advertise they support "hot", "warm" and "cold" wallet storage solutions (the only thing I haven't seen so far are "frozen" wallets)....
1
vote
1answer
196 views
Are Hardware Wallets (i.e, Ledger Nano X) Safer than Software-Based Cold Storage Wallets?
I'm looking into purchasing Ledger Nano X as a cold storage hardware solution.
What benefits does Nano X (or other hardware wallets) provide over software based cold storage solutions? Why not install ...
4
votes
1answer
75 views
How do exchanges automate transfer of Bitcoin from a cold storage wallet?
Most exchanges use Cold Storage to store the bulk (approx. 95%) of their user assets. Only a relatively small amount (approx. 5%) of funds are held in their Hot Wallet.
My question is, what process is ...
-2
votes
1answer
182 views
Securing the “weakest link” of a chain through Sharding
In this question I discussed how sharding a private key with Shamir's Secret Sharing Scheme maybe a good alternative to MultiSig as a means of reducing excessive fees associated with MultiSig ...
0
votes
1answer
46 views
Security concerns with walletpassphrase
I have some security concerns with walletpassphrase:
If it stores the passphrase for some unit of time. ie. so you can send funds, surely if the server is compromised, within that timeframe, the ...
3
votes
1answer
202 views
Is Sharding a Good Alternative to MultiSig?
For security purposes, we require that each withdrawal be "approved" by multiple servers so that in the event a single server is compromised the attacker won't be able to siphon funds from ...
0
votes
1answer
33 views
What does it means “get a new address and then make the Bitcoin offline” and make it extremely secure?
I have been reading about Bitcoin, and one thing was about making Bitcoin extremely secure, which is to get a new address so that nobody knows, and then making it offline right away?
Is it like
0.01 ...
0
votes
1answer
21 views
Can an exchange or marketplace benefit from private key encryption?
A powerful security technique to prevent theft of Bitcoins from a user's online wallet is to encrypt the user's private key with his password without ever stroring the PK directly in the database. ...
