Questions tagged [security]

This tag should be used for questions regarding security issues with the design or implementation of Bitcoin and related cryptocurrencies.

31 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4
votes
5answers
384 views

Store Bitcoins offline

I have some bitcoins and ether at Blockchain.info and I am really scared of losing them. How do I best secure them? Right now I have a paper with the code to restore my wallet, but my coins are still ...
3
votes
1answer
78 views

How the Bitcoin community will handle attacks on a Client's code?

I have some thoughts about the following scenario. The brightest future. The Bitcoin becomes a very popular and liquid currency all over the world. Some serious financial or political parties may ...
2
votes
1answer
47 views

What information can an attacker gain from watching the users behavior in block chain?

Given the blockchain is a public ledger, if user chooses not not change their public key (address) every time they make a transaction, what information can an attacker gain from watching the users ...
2
votes
1answer
149 views

Lightning network hub security?

Reading the whitepaper, I came across a point: nodes wishing to act as effective intermediaries, 'hubs' or not, need high availability and need to operate autonomously. This means they must have ...
2
votes
0answers
102 views

Is the reference client of Bitcoin regularly audited?

I imagine that plenty of eyes have combed through the reference client's source code. But the code is still changing for a variety of reasons (features, patches, improvements, etc). I didn't find ...
2
votes
0answers
249 views

Is there a way to import a private key already protected with the passphrase?

Let's say I have a hot wallet that has passphrase encryption enabled. Then let's say a large withdrawal needs to occur but the hot wallet has insufficient funds and a transfer from cold storage is ...
2
votes
0answers
262 views

Is anyone working on / has implemented a “two-factor paper wallet”?

I just created this wiki page. I'm coining the term here, I think ... not sure what was it called when discussed on Bitcointalk. My question is: Has anyone implemented this "2 factor paper wallet"? ...
1
vote
0answers
37 views

How to best practice restoring a wallet in bitcoin core

I have a test wallet in bitcoin core that I want to play around with and get comfortable with before I move my btc from blockstream green wallet. I primarily use that wallet because so far it has been ...
1
vote
1answer
110 views

My Bitcoin Core Sent Bitcoins Without My Authorisation

I am running Bitcoin Core version v0.19.0.1 (64-bit) on Windows 7, and on 27 February I noticed that it sent 0.0045 bitcoins on its own. The wallet is encrypted at all times and I enter the ...
1
vote
1answer
65 views

Is it possible to separate blockchain and wallet functions?

I'm looking for a way to use bitcoin-core in monero-way (It uses separate blockchain daemon and wallet daemon). I'd like to run bitcoin-qt interface on my laptop and connect to external node with ...
1
vote
0answers
54 views

What is the security and trust model of an Opendime?

Opendimes use some entropy on the device in combination with some entropy added by the owner to generate private keys directly on the device. Until the device's seal is broken, it is claimed to be ...
1
vote
0answers
227 views

How prevent from hacking personal computer and using my jaxx account

It looks like anyone who can hack a computer has direct access to the jaxx wallet stored on the hard drive. Is there any way to block access like requiring a strong password to open the wallet? ...
1
vote
0answers
91 views

Is the Password stored in RAM in clear text after decrypting the MultiBit HD wallet?

After decrypting your wallet in MultiBit HD, is the clear text version of password stored in the RAM?
1
vote
0answers
1k views

How can bitcoins be stolen?

I read about Mt. Gox and how 850,000 bitcoins has been "stolen" from it. I do not understand how someone can steal bitcoins: if MtGox has bitcoins, and MrThief wants to use this bitcoins, then MrThief ...
1
vote
0answers
208 views

Privacy risks with a hardware wallet

I'm trying to understand the privacy risks with a hardware wallet like a Trezor, Ledger, or similar. I understand the common workflow with these wallets is that you use an SPV bitcoin client which ...
1
vote
0answers
41 views

How can I find out if a mining pool has been leaking user information?

To my surprise, I have received spam to an email address which I exclusively used with a mining pool that seems to be generally considered trustworthy and reliable. The spam is bitcoin related and ...
1
vote
0answers
34 views

Ensure Wallet consistency

I have recently migrated machine. I used the Apple Migration Wizard and when it was finished my new machine's copy of Multibit appears to have my BTC within it. My next task is to wipe the old ...
1
vote
0answers
109 views

Trying to figure out the two-part authentication process. Can anyone give direct instructions?

I'm using btc-e.com verification, in the Finances section. It supplies two key codes and has a square bar code to scan. I've set up my google account for two-part verification, and google is ALSO ...
1
vote
0answers
706 views

Should I run Bitcoind / JSON RPC on a home server connecting to a VPS

I'm debating whether to run bitcoind/ JSON-RPC on a server from my house that takes requests from users on hosted VPS. While I'm not starting a bitcoin poker site, I can explain what I'm doing easier ...
0
votes
0answers
16 views

Can one consider that the interest of other actors/stakeholders would change something about the concept of “blockchain”?

I am new to the Bitcoin world and am trying to get an overview within a research project. I see that Bitcoin was born out of a certain motivation to decentralize money and that decentralization, open ...
0
votes
0answers
38 views

similar seed words minor sequence difference

I created a wallet weeks back and seemingly restored the seed onto my other 2 devices. Recently I got to notice that I had mistakenly logged into another wallet with identical seed words but I ...
0
votes
0answers
51 views

How could PSBT deal with data capacity limit of QR code?

QR code has very limited data capacity. (According to Wikipedia) one single QR code can only carry <3KB of binary data. It's not rare for a PSBT to hit this 3KB limit, especially for ones which ...
0
votes
0answers
51 views

BIP32 HD Wallet vs HMAC vs Hashing

I've been working on a website which will be caring out various cryptographic operations. On the website users can post Ads. Each Ad has a monotonically increasing unique ID. For each Ad, I would like ...
0
votes
0answers
50 views

How may bitcoins hash algorithm be secured in the future from quantum computing brute forcing?

Other threads already answer very clearly that quantum comps could easily "break" /attack bitcoins chain. Now: Are there any ideas among the bitcoin devs circulating out there, how to save bitcoin ...
0
votes
1answer
3k views

Private key to mnemonic words, is it safe?

Is it safe to do the following? Suppose I do not want the HD wallet, but I do want the convenience of using mnemonic words to remember the private key. I know I can convert the private key's hex ...
0
votes
1answer
250 views

A few security-related questions: how do I automate a web service as much as possible without storing private keys on server?

I'm learning how to use bitcoind, and want to set up a side project that uses bitcoin to learn along the way. I'll be using the json-rpc with PHP on my server. I want to create a service that will ...
0
votes
2answers
328 views

Are DAG-based crypto currencies as secure as proof-of-work based blockchains?

A key feature of blockchain based cryptocurrencies is that they provide inherently secure systems that don't rely on third parties. The newer DAG-based cryptos like Byteball are being touted as ...
0
votes
1answer
177 views

Is there a tutorial on how to set up a secure enviroment and use Electrum?

Which OS to use? How to verify that the OS is secure? How to download and install Electrum securely? There are many methods - binaries, git, homebrew, Ubuntu package, building from source. Is there ...
-1
votes
1answer
49 views

How Spectre tolerates spam transactions?

Spectre is a DAG based (directed acyclic graph) distributed ledger (a structure as an alternative to blockchain based distributed ledger). Is there any mechanism in Spectre to prevent sending spam ...
-1
votes
1answer
3k views

How can I cancel a pending transaction

https://blockchain.info/tx/d2aa8e971dd26a4f4598f57b55e921a62fa376dad1cf25e426b6ba7d79052466?show_adv=true. This transaction was made by some fraudsters on my wallet. I later recovered my wallet. How ...
-1
votes
1answer
41 views

What arguments would one pose to shows Bitcoin is an enabler of crime and not an enabler of crime?

What arguments could be made for Bitcoin being an enabler of criminal activity? For example: Could Bitcoin be used as the backbone of Ponzi Schemes? Are there any consequences for Bitcoin miners who ...