Questions tagged [security]

This tag should be used for questions regarding security issues with the design or implementation of Bitcoin and related cryptocurrencies.

43 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
0answers
24 views

Keys Security Best practices in a Lightning company

"What are some key security practices for running a company that works on Lightning? Risk of someone running away with the funds Alternatives to multi-sig for lightning Resources in the space ...
3
votes
1answer
81 views

How the Bitcoin community will handle attacks on a Client's code?

I have some thoughts about the following scenario. The brightest future. The Bitcoin becomes a very popular and liquid currency all over the world. Some serious financial or political parties may ...
2
votes
0answers
36 views

Bitcoin over Tor and man in the middle attack: risks mitigated yet?

This paper explains how combining Bitcoin and Tor creates an attack vector. A man in the middle can control the information flow between all users who connect over Tor. This paper is from 2014. Has ...
2
votes
1answer
167 views

Lightning network hub security?

Reading the whitepaper, I came across a point: nodes wishing to act as effective intermediaries, 'hubs' or not, need high availability and need to operate autonomously. This means they must have ...
2
votes
0answers
110 views

Is the reference client of Bitcoin regularly audited?

I imagine that plenty of eyes have combed through the reference client's source code. But the code is still changing for a variety of reasons (features, patches, improvements, etc). I didn't find ...
2
votes
0answers
222 views

Privacy risks with a hardware wallet

I'm trying to understand the privacy risks with a hardware wallet like a Trezor, Ledger, or similar. I understand the common workflow with these wallets is that you use an SPV bitcoin client which ...
2
votes
0answers
259 views

Is there a way to import a private key already protected with the passphrase?

Let's say I have a hot wallet that has passphrase encryption enabled. Then let's say a large withdrawal needs to occur but the hot wallet has insufficient funds and a transfer from cold storage is ...
2
votes
0answers
263 views

Is anyone working on / has implemented a "two-factor paper wallet"?

I just created this wiki page. I'm coining the term here, I think ... not sure what was it called when discussed on Bitcointalk. My question is: Has anyone implemented this "2 factor paper wallet"? ...
1
vote
1answer
54 views

Crossing borders: security scheme ideas

More and more airports force you to decrypt your data, they will also dump your stuff keeping a backup. This could happen in just about any border you try to cross. It is only safe to expect this to ...
1
vote
1answer
61 views

What is the electrum bitcoin wallet password encryption method?

What method does Electrum bitcoin wallet use for password encryption? I want to check to see if the file encrypted with the password is secure. And what are the ways around to decrypt it outside the ...
1
vote
0answers
58 views

Why bother with 'account' in derivation path?

After lots of wallet testing, I'm thinking that only account level 0 should be used. Especially, when you consider restoring a wallet from the seed phrase. m / purpose' / coin_type' / account' / ...
1
vote
0answers
108 views

How to best practice restoring a wallet in bitcoin core

I have a test wallet in bitcoin core that I want to play around with and get comfortable with before I move my btc from blockstream green wallet. I primarily use that wallet because so far it has been ...
1
vote
0answers
62 views

What is the security and trust model of an Opendime?

Opendimes use some entropy on the device in combination with some entropy added by the owner to generate private keys directly on the device. Until the device's seal is broken, it is claimed to be ...
1
vote
0answers
229 views

How prevent from hacking personal computer and using my jaxx account

It looks like anyone who can hack a computer has direct access to the jaxx wallet stored on the hard drive. Is there any way to block access like requiring a strong password to open the wallet? ...
1
vote
0answers
94 views

Is the Password stored in RAM in clear text after decrypting the MultiBit HD wallet?

After decrypting your wallet in MultiBit HD, is the clear text version of password stored in the RAM?
1
vote
0answers
42 views

How can I find out if a mining pool has been leaking user information?

To my surprise, I have received spam to an email address which I exclusively used with a mining pool that seems to be generally considered trustworthy and reliable. The spam is bitcoin related and ...
1
vote
0answers
35 views

Ensure Wallet consistency

I have recently migrated machine. I used the Apple Migration Wizard and when it was finished my new machine's copy of Multibit appears to have my BTC within it. My next task is to wipe the old ...
1
vote
0answers
109 views

Trying to figure out the two-part authentication process. Can anyone give direct instructions?

I'm using btc-e.com verification, in the Finances section. It supplies two key codes and has a square bar code to scan. I've set up my google account for two-part verification, and google is ALSO ...
1
vote
0answers
708 views

Should I run Bitcoind / JSON RPC on a home server connecting to a VPS

I'm debating whether to run bitcoind/ JSON-RPC on a server from my house that takes requests from users on hosted VPS. While I'm not starting a bitcoin poker site, I can explain what I'm doing easier ...
0
votes
0answers
15 views

Reusing same address potential security vunerability?

I was watching Andreas Antonopoulos talk about security on youtube. I heard him say something about using the same public address multiple times could increase risk of your private key being cracked ...
0
votes
1answer
38 views

Does Bitcoin network require at least one third honest nodes to be secure?

In byzantine generals problem, it is proved that one third or more generals should be loyal, or the problem is unsolvable from a mathematical standpoint. Does Bitcoin network follow the same rule? How ...
0
votes
0answers
40 views

Which app generates stronger mnemonic seed?

Mnemonic phrase, mnemonic seed, or seed phrase are defined as a secret group of words that represent a wallet. When used in sequence they allow access to the cryptocurrencies stored within. “Mnemonic” ...
0
votes
1answer
80 views

Multisig Setup - Pruned Bitcoin Core on Computer vs. Dedicated Hardware

Are there security implications of running a pruned Bitcoin Core node on a personal computer vs. a full Bitcoin Core node on a dedicated hardware device (i.e. Raspberry Pie with Umbrel, myNode, nodl, ...
0
votes
1answer
108 views

If Cryptocurrency offers anonymity, why is it considered by forensic professionals to be the best currency for fighting illicit transactions?

A paper by titled An Analysis of Bitcoin’s Use in Illicit Finance discusses how Cryptocurrency is considered by forensic professionals to be the best currency for fighting illicit transactions. In ...
0
votes
0answers
64 views

How many hops does Coinbase and other exchanges track your movement of BTC when it leaves their exchanges?

I've read reports of Coinbase users getting an email stating that they detected their Bitcoins being moved to an unapproved exchange or site after removing their bitcoins off of the exchange. What is ...
0
votes
0answers
50 views

Bitcoin Core Security

Is there any site or resource where I can learn how to do security transactions while trading on bitcoin testnet
0
votes
0answers
34 views

Are there any privacy benefits in using a separate wallet in Bitcoin Core to "separate" myself from my service?

I currently run Bitcoin Core with the following wallets loaded in: hot.dat. Contains the smallest possible sum of Bitcoin. Unencrypted and used by myself for various personal Bitcoin purchases, and I ...
0
votes
1answer
82 views

Wallet suddenly shows transactions from someone else

I restored a wallet recently that I have not used in years. Back then, it was only Bitcoin, but at some point Ethereum was added. So now I see all my Bitcoin tx, but on top of that the Ethereum part ...
0
votes
1answer
75 views

How to verify Wrapped Bitcoin (WBTC) issuance

I'm trying to understand how Wrapped Bitcoin (WBTC) issuance can be verified. The WBTC custodian, BitGo, published the following material: https://wbtc.network/dashboard/audit This is a list of ...
0
votes
0answers
50 views

What should i do with my used antminer? How should i set it up?

ive just purchased a 2nd hand s9i antminer, got it for £200, a great deal i thought, what tasks should i perform before installing? i was thinking of opening it up and looking inside, just to see what ...
0
votes
1answer
51 views

is wallet vulnerable when unlocked for transactions?

is wallet vulnerable when unlocked for transactions?.I recovered a wallet some time ago and all is good.passphrase key all looks good.But a question came to my mind about the moment we make a ...
0
votes
0answers
56 views

Can you think of a safe way to safely keep my "spendable" Bitcoin in my situation?

I have my "cold stash" wallet.dat on multiple fully offline, encrypted hard disks/sticks inside a fireproof safe. I never seriously considered printing them onto paper because that would be ...
0
votes
0answers
59 views

When a BIP44 XPUB and one of its descendant keys get leaked, what's the worst that can happen?

I understand that BIP44 has one edge case vulnerability where if a hacker gets his hands on an Xpub and a private key from its descendants, he can compute the Xprv pair of the original Xpub and ...
0
votes
0answers
18 views

Can one consider that the interest of other actors/stakeholders would change something about the concept of "blockchain"?

I am new to the Bitcoin world and am trying to get an overview within a research project. I see that Bitcoin was born out of a certain motivation to decentralize money and that decentralization, open ...
0
votes
0answers
40 views

similar seed words minor sequence difference

I created a wallet weeks back and seemingly restored the seed onto my other 2 devices. Recently I got to notice that I had mistakenly logged into another wallet with identical seed words but I ...
0
votes
0answers
105 views

How could PSBT deal with data capacity limit of QR code?

QR code has very limited data capacity. (According to Wikipedia) one single QR code can only carry <3KB of binary data. It's not rare for a PSBT to hit this 3KB limit, especially for ones which ...
0
votes
0answers
54 views

How may bitcoins hash algorithm be secured in the future from quantum computing brute forcing?

Other threads already answer very clearly that quantum comps could easily "break" /attack bitcoins chain. Now: Are there any ideas among the bitcoin devs circulating out there, how to save bitcoin ...
0
votes
1answer
56 views

How can I contact Bitcoin.org

I need to contact with some support from "bitcoin.org". Ive tried to found some email adress or contact with them with their web, but its simply impossible. Somebody know how can i contact ...
0
votes
1answer
257 views

A few security-related questions: how do I automate a web service as much as possible without storing private keys on server?

I'm learning how to use bitcoind, and want to set up a side project that uses bitcoin to learn along the way. I'll be using the json-rpc with PHP on my server. I want to create a service that will ...
0
votes
1answer
183 views

Is there a tutorial on how to set up a secure enviroment and use Electrum?

Which OS to use? How to verify that the OS is secure? How to download and install Electrum securely? There are many methods - binaries, git, homebrew, Ubuntu package, building from source. Is there ...
-1
votes
1answer
50 views

How Spectre tolerates spam transactions?

Spectre is a DAG based (directed acyclic graph) distributed ledger (a structure as an alternative to blockchain based distributed ledger). Is there any mechanism in Spectre to prevent sending spam ...
-1
votes
1answer
5k views

How can I cancel a pending transaction

https://blockchain.info/tx/d2aa8e971dd26a4f4598f57b55e921a62fa376dad1cf25e426b6ba7d79052466?show_adv=true. This transaction was made by some fraudsters on my wallet. I later recovered my wallet. How ...
-1
votes
1answer
41 views

What arguments would one pose to shows Bitcoin is an enabler of crime and not an enabler of crime?

What arguments could be made for Bitcoin being an enabler of criminal activity? For example: Could Bitcoin be used as the backbone of Ponzi Schemes? Are there any consequences for Bitcoin miners who ...