Questions tagged [security]
This tag should be used for questions regarding security issues with the design or implementation of Bitcoin and related cryptocurrencies.
694
questions
2
votes
1answer
23 views
Is it possible to brute force the Secure Element of Ledger Nano S?
Only things I could find about this subject always tell that Ledger has a secure element like SIM cards and credit cards have. Also something about another OS running near the main application. But ...
5
votes
2answers
173 views
Can signature be re-used to cash out everything in the address?
I Know for the P2PK locking script it was like this
[pubkey] <OP_CHECKSIG>
and then an unlocking script is provided as simple as this:
[sig]
But if it works like this, others can simply grab ...
1
vote
1answer
24 views
How to add a second user with SSH access to my Ubuntu PC running Bitcoin Core?
I have a friend who is interested in learning Bitcoin CLI, and I told him I would look into giving him access to my node - in a non-destructive way - perhaps testnet only ?
Totally trust this person, ...
0
votes
2answers
32 views
What are some potential scenarios that a state actor can harm bitcoin if they control more than 51% of the hashing power?
As reported recently, China controls more than 51% of the hashing power and just in one province in China controls 54%. Assuming China has bad intentions and forces all these mining operators to ...
3
votes
1answer
43 views
Why is a 20 byte hash acceptable in p2wpkh but p2wsh needs 32 bytes?
Why is it acceptable to use a 20 byte hash to represent single-sig witness programs whereas a 32 byte hash is used for pay to witness script hash?
5
votes
1answer
106 views
How do I securely update Bitcoin Core?
I am currently running a Bitcoin Core wallet 0.18.1.
What do I need to do to update it to 0.19.0.1 version?
Would be very grateful for instructions as I am relatively new to this.
0
votes
1answer
39 views
Bitcoin wallets- question about control and centralization
Community,
Just a quick simple question very important for me to understand about the security of wallet types.
Are there bitcoin wallets which can shut down and block/freeze/control your bitcoin ...
0
votes
1answer
51 views
How long would it take for all the Bitcoin Key pairs to be calculated?
Is this even something one should be worried about?
1
vote
1answer
51 views
Why one miner can dig out many blocks continually in one moment?
I am new to bitcoin and blockchain, I browed the website just now. There is a question confusing me, I find that one miner dig out blocks many times even in one hour. For example, this miner dig out ...
0
votes
0answers
34 views
How could PSBT deal with data capacity limit of QR code?
QR code has very limited data capacity. (According to Wikipedia) one single QR code can only carry <3KB of binary data.
It's not rare for a PSBT to hit this 3KB limit, especially for ones which ...
2
votes
1answer
43 views
Address Reuse issue
I dont understand how security works with multiple address using. I am trying to guess how security works here but need some feedback, so here are a few questions, and my own guesses.
If I have total ...
2
votes
1answer
29 views
Race attack with transaction fees
let's say I run a simple race attack (say in a restaurant). I transfer BTC to the restaurant but seconds before (or after) I send the very same coins to myself. To make this deal more likely for ...
3
votes
1answer
52 views
Why can't a longer key combat quantum computers?
Google's new quantum computer performed a calculation in 3.5 minutes that would have taken 10,000 years on a normal computer (so they claim: https://www.space.com/quantum-computer-milestone-supremacy....
2
votes
2answers
195 views
How can someone lose funds in Lightning Network?
In Bitcoin once you own a private key associated with an address that had bitcoins on it, your funds are theoretically safe for ever. But on the Lightning Network, I see that once you send bitcoin to ...
5
votes
1answer
108 views
How can I protect my funds in the event a quantum computer breaks the ECDLP that Bitcoin relies on?
An interesting question was posted recently, discussing the idea of hashed addresses being (not meaningfully) quantum resistant.
As Andrew's answer on that question points out, paying to a hashed ...
1
vote
1answer
63 views
Whose to stop the coinbase devs from just draining all accounts and running of with the money?
I have been wondering, what would happen if the coinbase developers agree to drain all the funds of all their accounts and run off into hiding?
Its not like anybody will be able stop them or return ...
1
vote
2answers
96 views
Can a blockchain's transactions be reversed?
Blockchains are often described as 'immutable' (meaning the history cannot be rewritten after the fact), but is this really true? How easy is it to change the history?
I have read about the Etheruem ...
0
votes
1answer
45 views
Can two bitcoin transactions from a Segwit address (p2sh-p2wpkh) have a reused R value?
Good day.
I'd found these two transactions:
https://www.blockchain.com/es/btc/tx/2b08d658045724aba40b58690ad84ec2af1f01ab58df37387dadd2b27789f44c
and
https://www.blockchain.com/es/btc/tx/...
3
votes
1answer
37 views
Could a malicious attacker subvert the Bitcoin network by failing to create a block?
I know its astronomically improbable, but say a malicious node "wins" the proof of work inherent to the Bitcoin protocol. If a malicious node simply waited indefinitely, or maliciously disconnected ...
0
votes
2answers
83 views
Is the 51% attack the only technical reason no country will adopt Bitcoin as a state currency?
Is the 51% attack the only technical reason no country will adopt Bitcoin as a state currency?
Lets suppose a country with GDP size less than 300 Billion USD adopt the Bitcoin as an official currency. ...
0
votes
4answers
86 views
How the blockchain knows that its been tampered with?
I know that the transactions stay in the block and hashed alongside few other things and that hash is stored in the next block. And I understand that if you try to tamper with one of the transactions, ...
0
votes
1answer
31 views
Beneficial proofs of work [duplicate]
I'm new to this community and a Bitcoin novice.
I believe to have understood the concept and purpose of proof of work but also, that the high energy consumption of proofs of work is a major problem ...
0
votes
0answers
38 views
BIP32 HD Wallet vs HMAC vs Hashing
I've been working on a website which will be caring out various cryptographic operations. On the website users can post Ads. Each Ad has a monotonically increasing unique ID. For each Ad, I would like ...
3
votes
2answers
93 views
Why is no security lost by using 32-byte public keys in Schnorr signatures instead of 33?
There is currently a discussion on the mailing list about truncating the 33rd byte from public keys when used in bip-schnorr.
Public keys are (x, y) coordinates and compressed public keys simply ...
2
votes
1answer
49 views
Why doesn't the Bitcoin-qt client ask for the Wallet passphrase upon startup?
I've just encrypted my wallet.dat file using the "Settings -> Encrypt Wallet" menu option.
I then closed the client and re-opened it.
I was expecting to be prompted to put in the wallet password ...
1
vote
2answers
23 views
Organization to keep track of wrongfully obtained bitcoins
I am curious whether there are any organizations that are actively trying to monitor bitcoins from illegal sources.
I understand that 'when done properly' you can make bitcoins practically ...
1
vote
1answer
69 views
Prove that xpub matches xprv?
I'm researching a paper wallet system where I generate an HD xpub/xprv
using an offline laptop. I write down the xprv by hand. I capture the
xpub via QR code using my phone, to transfer to an online ...
0
votes
0answers
32 views
Wallet recovery from seed phrase [duplicate]
How does a wallet become recovered based on a seed phrase? From what I understand, the seed phrase is another way of representing the private/public keys. Since address reuse is frowned upon, and we ...
3
votes
1answer
91 views
What are the potential security issues when running a Lightning Node on my home network?
If I was to run a lightning node on my home network (and for example, not running the node through TOR), what should I worry about?
Furthermore, what OS, settings and software should I use to ...
1
vote
1answer
38 views
What makes Bitcoin transaction secure against attackers/hackers?
Wanted to know what is it that makes bitcoin transaction secure and make it less vulnerable to attackers and hackers
3
votes
2answers
304 views
To what extent does asymmetric cryptography secure bitcoin transactions?
Is there a specific attack or bug which asymmetric cryptography prevents during bitcoin transactions?
0
votes
1answer
55 views
Possibility of a DDoS attack
Theoretically. This is not a mechanism of any kind of attack, but It's about the "lost" coins. May be. It is just for an educational experiment.
What if someone has the ability to send transactions ...
0
votes
2answers
52 views
How do I find out where a bitcoin address is from?
I am not looking necessarily a name but more like is it an offline, coinbase, blockchain.com, etc...
I had $80 sent from my account yesterday and it says it went to ...
2
votes
1answer
100 views
Does assumevalid lower the security of Bitcoin?
Bitcoin's assumption was to download the blocks and verify it in order to prevent getting fooled.
But by default, the assumevalid option is enabled in the software, which, as I understand it, makes ...
2
votes
1answer
85 views
Is this a collision attack or a 2nd-preimage attack?
This question revolves around Bitcoin Optech newsletter #51 (1) and an email thread from the bitcoin-dev mailing list (2). I asked the same question in a reply-email of the newsletter and the response ...
10
votes
2answers
2k views
Long term BTC investing
my question is, what is the safest way of buying and holding bitcoin for the long term?
And I mean 10-20 years, either a lump sum or through dollar cost averaging, is a paper wallet the answer? Or ...
3
votes
1answer
51 views
How many nodes is too many?
Has anyone done the math on this?
For example, if we had 10’s of millions of nodes all connecting to 8 peers would there be some latency issues in propagating blocks across the network in the 10 ...
1
vote
1answer
55 views
Is it possible to separate blockchain and wallet functions?
I'm looking for a way to use bitcoin-core in monero-way (It uses separate blockchain daemon and wallet daemon).
I'd like to run bitcoin-qt interface on my laptop and connect to external node with ...
19
votes
6answers
7k views
51% attack - apparently very easy? refering to CZ's “rollback btc chain” - How to make sure such corruptible scenario can never happen so easily?
I was shocked to see binance CZ comment to literally "roll back" the bitcoin chain by just "calling" in some favors from "friendly" Asian miners .
This ONE person could effectively do it??? I mean ...
2
votes
1answer
77 views
How much of the Bitcoin Source code is untouchable? [CVE-2018–17144]
My understanding is that CVE-2018–17144 (inflation bug introduced in 0.15) was partially a result of how convoluted the original code is.
Regardless of the specific CVE-2018–17144 example, are there ...
1
vote
3answers
143 views
Is it safe to create a Bitcoin account for another party? Is this a scam?
A guy I have been talking to says he is having trouble accessing his account and asked me to make a wallet in blockchain and then wants my login, password, and wallet id so he can use it in another ...
1
vote
2answers
108 views
What’s the purpose of checking for input overflow?
Everyone knows this famous fix for block 74638 which still exists in other files. But there’s something I can’t understand, why check for inputs overflow since it’s not possible to have enough utxo ...
1
vote
0answers
11 views
Does Bitcoin security rely on the assumption of nearly continuous transactions? [duplicate]
So for an attacker not to overcome good nodes, I believe we rely on the fact that blocks are always being produced, making the attacker essentially outpaced. But in the extreme and ridiculously ...
0
votes
1answer
44 views
Automatically close the bitcoin-qt when enable SSL for RPC
I Just try to enable SSL for bitcoin-qt RPC call. I follow the SSL on RPC
link to archive my target. But I am getting the following error and close the bitcoin-qt automatically.
I am using the ...
0
votes
1answer
35 views
How does the Blockchain detect a cheater, who manipulates the blockchain?
Let's assume we have 100 blocks. One miner x has the intention to manipulate block 90. So he has to recalculate the hash for block 90. Following he also has to recalculate the hashes for block 91-100. ...
3
votes
1answer
71 views
Malicious full nodes causing denial of service attacks
To control >51% of the mining power in bitcoin is impractical due to the immense investment that will be required. Also, The Bitcoin Core client has DoS protection against malicious nodes forwarding a ...
0
votes
0answers
40 views
secure Multi-Party Computation (sMPC) in Enigma?
In Enigma whitepaper (>> Link to the Enigma paper <<), in section 5.1 "Overview of secure multi-party computation", page 4, explains how to divide a secret s into multiple shares, using ...
0
votes
1answer
75 views
Private key generation doubt
I read that the private key pk has to be any number between 1 and n, where n is almost 10^77.
Since pk' s function is practically to be used as a scalar for multiplying the generator point G, why does ...
0
votes
1answer
57 views
Are transactions with the same ScriptSig a security problem?
For instance while looking at the transaction stack of my address, tracing it to exchanges I use, I came across this:
https://www.blockchain.com/btc/tx/...
2
votes
1answer
405 views
Are lightweight LN wallets vulnerable to transaction withholding?
As far as I know, LN requires the user to watch the blockchain in order to perform penalty in time. However, running full node is probably a heavy burden to some users, especially to mobile phones. I ...
