Skip to main content

Questions tagged [security]

Security issues with the design or implementation of Bitcoin.

45 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6 votes
0 answers
98 views

Bitcoin over Tor and man in the middle attack: risks mitigated yet?

This paper explains how combining Bitcoin and Tor creates an attack vector. A man in the middle can control the information flow between all users who connect over Tor. This paper is from 2014. Has ...
user270124's user avatar
3 votes
1 answer
117 views

Application security of Bitcoin Core

Is there any information about how Bitcoin Core has applied secure development or application security in the past and currently? For example, the inclusion of third-party dependencies must be checked ...
Niklas Rosencrantz's user avatar
3 votes
0 answers
127 views

How much mining activity is needed for Bitcoin to remain secure?

I'm not looking for a number, but rather for a way to make an estimate taking things like market capitalization and the fact that mining uses ASICs into account. (I assume ASICs are relevant since ...
meribold's user avatar
3 votes
0 answers
32 views

Keys Security Best practices in a Lightning company

"What are some key security practices for running a company that works on Lightning? Risk of someone running away with the funds Alternatives to multi-sig for lightning Resources in the space ...
mick's user avatar
  • 51
3 votes
1 answer
101 views

How the Bitcoin community will handle attacks on a Client's code?

I have some thoughts about the following scenario. The brightest future. The Bitcoin becomes a very popular and liquid currency all over the world. Some serious financial or political parties may ...
abyss.7's user avatar
  • 153
2 votes
0 answers
121 views

Is the reference client of Bitcoin regularly audited?

I imagine that plenty of eyes have combed through the reference client's source code. But the code is still changing for a variety of reasons (features, patches, improvements, etc). I didn't find ...
Daniel's user avatar
  • 267
2 votes
0 answers
288 views

Is there a way to import a private key already protected with the passphrase?

Let's say I have a hot wallet that has passphrase encryption enabled. Then let's say a large withdrawal needs to occur but the hot wallet has insufficient funds and a transfer from cold storage is ...
Stephen Gornick's user avatar
2 votes
0 answers
269 views

Is anyone working on / has implemented a "two-factor paper wallet"?

I just created this wiki page. I'm coining the term here, I think ... not sure what was it called when discussed on Bitcointalk. My question is: Has anyone implemented this "2 factor paper wallet"? ...
ripper234's user avatar
  • 26.6k
1 vote
2 answers
39 views

Do nodes periodically check block hashes?

I am aware that, in Bitcoin, blocks are immutable because of the Merkle tree structure, which ensures that every block contains the (Merkle root) hash of the previous block. Thanks to the properties ...
A. Darwin's user avatar
  • 111
1 vote
0 answers
24 views

Can Pending HTLC's drop my balance?

I just noticed that 2 million sat's disappeared from my balance in thunderhub. No payments or transactions have been made. Can pending HTLC's effect my balance? If Not what else could drop my balance ...
Ryan's user avatar
  • 11
1 vote
0 answers
99 views

Is it safe to install Bitcoin Core using a package manager?

For example, on macOS: brew install --cask bitcoin-core Or on Ubuntu: snap install bitcoin-core Etc. In particular, what attack vectors might I be exposing myself to if I choose to install Bitcoin ...
Jonathan Wheeler's user avatar
1 vote
0 answers
382 views

Exporting Bitcoin settings to bitcoin.conf?

How do I Export/dump the settings of bitcoin into a .conf file? I know I can review some of them via bitcoin-qt GUI. I'm not interested in the GUI settings like font, etc. I'm interested in exporting ...
JDOaktown's user avatar
  • 206
1 vote
0 answers
145 views

multisig vs singlesig

Due to the Ledger debacle I have purchased a Coldcard hardware wallet. I made this decision partly based on watching the Antonopoulos live stream last week. Until now I have backed up my bitcoin on a ...
Sam's user avatar
  • 11
1 vote
0 answers
740 views

How to recover from forgotten password for Bitcoin Wallet for Android backup?

Back in 2016, I had a Bitcoin wallet with a couple of euros worth of Bitcoin. I used the Android app "bitcoin wallet" to backup my wallet but I had to use a password. This week, I found the ...
levio's user avatar
  • 11
1 vote
0 answers
557 views

How many words are enough to confirm user backed up all words for seed phrase?

If there are 12 words in the seed phrase, is confirming random 3 words enough to ensure user has backed up all words? Or is it necessary to confirm all words and in the correct order? If I create a ...
user avatar
1 vote
0 answers
246 views

Why bother with 'account' in derivation path?

After lots of wallet testing, I'm thinking that only account level 0 should be used. Especially, when you consider restoring a wallet from the seed phrase. m / purpose' / coin_type' / account' / ...
Donn Lee's user avatar
  • 143
1 vote
0 answers
153 views

How to best practice restoring a wallet in bitcoin core

I have a test wallet in bitcoin core that I want to play around with and get comfortable with before I move my btc from blockstream green wallet. I primarily use that wallet because so far it has been ...
Anders Kitson's user avatar
1 vote
0 answers
75 views

What is the security and trust model of an Opendime?

Opendimes use some entropy on the device in combination with some entropy added by the owner to generate private keys directly on the device. Until the device's seal is broken, it is claimed to be ...
Murch's user avatar
  • 75.9k
1 vote
0 answers
233 views

How prevent from hacking personal computer and using my jaxx account

It looks like anyone who can hack a computer has direct access to the jaxx wallet stored on the hard drive. Is there any way to block access like requiring a strong password to open the wallet? ...
jat's user avatar
  • 11
1 vote
0 answers
102 views

Is the Password stored in RAM in clear text after decrypting the MultiBit HD wallet?

After decrypting your wallet in MultiBit HD, is the clear text version of password stored in the RAM?
Homeland S's user avatar
1 vote
0 answers
247 views

Privacy risks with a hardware wallet

I'm trying to understand the privacy risks with a hardware wallet like a Trezor, Ledger, or similar. I understand the common workflow with these wallets is that you use an SPV bitcoin client which ...
kbyrd's user avatar
  • 123
1 vote
0 answers
46 views

How can I find out if a mining pool has been leaking user information?

To my surprise, I have received spam to an email address which I exclusively used with a mining pool that seems to be generally considered trustworthy and reliable. The spam is bitcoin related and ...
mafu's user avatar
  • 113
1 vote
0 answers
39 views

Ensure Wallet consistency

I have recently migrated machine. I used the Apple Migration Wizard and when it was finished my new machine's copy of Multibit appears to have my BTC within it. My next task is to wipe the old ...
Mild Fuzz's user avatar
  • 111
1 vote
0 answers
115 views

Trying to figure out the two-part authentication process. Can anyone give direct instructions?

I'm using btc-e.com verification, in the Finances section. It supplies two key codes and has a square bar code to scan. I've set up my google account for two-part verification, and google is ALSO ...
user9169's user avatar
1 vote
0 answers
718 views

Should I run Bitcoind / JSON RPC on a home server connecting to a VPS

I'm debating whether to run bitcoind/ JSON-RPC on a server from my house that takes requests from users on hosted VPS. While I'm not starting a bitcoin poker site, I can explain what I'm doing easier ...
community22's user avatar
0 votes
0 answers
82 views

Is it safe to share half of the private key in WIF format?

Assuming I would generate my keys on https://www.bitaddress.org. Is it safe to share the following four pieces of data? One half of the private key. The public key. An SHA512 hash of the private key. ...
Ohumeronen's user avatar
0 votes
0 answers
76 views

Is it recommended not to take hardware wallets through international airport security scanners?

I suspect this won't get an answer as it is highly speculative (on the scanning technology in airports) but does anyone have any information or informed views on whether you can take hardware wallets/...
Michael Folkson's user avatar
0 votes
0 answers
204 views

In what ways does BGP hijacking affect Bitcoin?

Based on this answer from 2014, bitcoin nodes are vulnerable to BGP hijacking although I am looking for more details about how BGP hijacking attack could affect Bitcoin p2p network. What could be ...
user avatar
0 votes
0 answers
52 views

How secure are the decentralized nodes?

I colloquially understand the inherent security provided by the decentralized distribution of the nodes that host the bitcoin network. However, is the distribution of the devices which run the nodes ...
Runeaway3's user avatar
  • 329
0 votes
1 answer
748 views

What is the electrum bitcoin wallet password encryption method?

What method does Electrum bitcoin wallet use for password encryption? I want to check to see if the file encrypted with the password is secure. And what are the ways around to decrypt it outside the ...
Monero's user avatar
  • 9
0 votes
0 answers
182 views

Which app generates stronger mnemonic seed?

Mnemonic phrase, mnemonic seed, or seed phrase are defined as a secret group of words that represent a wallet. When used in sequence they allow access to the cryptocurrencies stored within. “Mnemonic” ...
AirGap's user avatar
  • 25
0 votes
0 answers
64 views

Bitcoin Core Security

Is there any site or resource where I can learn how to do security transactions while trading on bitcoin testnet
user15320943's user avatar
0 votes
0 answers
67 views

Can you think of a safe way to safely keep my "spendable" Bitcoin in my situation?

I have my "cold stash" wallet.dat on multiple fully offline, encrypted hard disks/sticks inside a fireproof safe. I never seriously considered printing them onto paper because that would be ...
D. Retelle's user avatar
0 votes
0 answers
138 views

When a BIP44 XPUB and one of its descendant keys get leaked, what's the worst that can happen?

I understand that BIP44 has one edge case vulnerability where if a hacker gets his hands on an Xpub and a private key from its descendants, he can compute the Xprv pair of the original Xpub and ...
Vlad's user avatar
  • 277
0 votes
0 answers
23 views

Can one consider that the interest of other actors/stakeholders would change something about the concept of "blockchain"?

I am new to the Bitcoin world and am trying to get an overview within a research project. I see that Bitcoin was born out of a certain motivation to decentralize money and that decentralization, open ...
pauladobi's user avatar
0 votes
0 answers
48 views

similar seed words minor sequence difference

I created a wallet weeks back and seemingly restored the seed onto my other 2 devices. Recently I got to notice that I had mistakenly logged into another wallet with identical seed words but I ...
martin odum's user avatar
0 votes
0 answers
162 views

How could PSBT deal with data capacity limit of QR code?

QR code has very limited data capacity. (According to Wikipedia) one single QR code can only carry <3KB of binary data. It's not rare for a PSBT to hit this 3KB limit, especially for ones which ...
Chris Chen's user avatar
0 votes
1 answer
82 views

Has money ever been stolen in bitcoin due to a design flaw in the protocol?

Is there an example of a single historical case of theft of bitcoin due to a flaw in the design of the bitcoin protocol? When googling "is bitcoin secure?" it's easy to get confused because ...
Michael Altfield's user avatar
0 votes
1 answer
269 views

A few security-related questions: how do I automate a web service as much as possible without storing private keys on server?

I'm learning how to use bitcoind, and want to set up a side project that uses bitcoin to learn along the way. I'll be using the json-rpc with PHP on my server. I want to create a service that will ...
timetofly's user avatar
  • 201
0 votes
1 answer
194 views

Is there a tutorial on how to set up a secure enviroment and use Electrum?

Which OS to use? How to verify that the OS is secure? How to download and install Electrum securely? There are many methods - binaries, git, homebrew, Ubuntu package, building from source. Is there ...
bitcoinz's user avatar
-1 votes
2 answers
60 views

Block Transaction if it is over a certain amount

Is there a way to block a transaction if the transaction exceeds a certain amount of BTC. I am running bitcoind.
D0n's user avatar
  • 1
-1 votes
1 answer
416 views

Which offers more privacy, coinjoin-whirlpool or non-KYC online exchanges?

After buying crypto with fiat on a KYC exchange, instead of just moving the crypto to a wallet, I understand that I should get more anonymity from tracking by putting the coin through coinjoin or ...
Joshitmmajeedm's user avatar
-1 votes
1 answer
57 views

How Spectre tolerates spam transactions?

Spectre is a DAG based (directed acyclic graph) distributed ledger (a structure as an alternative to blockchain based distributed ledger). Is there any mechanism in Spectre to prevent sending spam ...
Questioner's user avatar
  • 1,151
-1 votes
1 answer
6k views

How can I cancel a pending transaction

https://blockchain.info/tx/d2aa8e971dd26a4f4598f57b55e921a62fa376dad1cf25e426b6ba7d79052466?show_adv=true. This transaction was made by some fraudsters on my wallet. I later recovered my wallet. How ...
Cassandra Banks's user avatar
-1 votes
1 answer
48 views

What arguments would one pose to shows Bitcoin is an enabler of crime and not an enabler of crime?

What arguments could be made for Bitcoin being an enabler of criminal activity? For example: Could Bitcoin be used as the backbone of Ponzi Schemes? Are there any consequences for Bitcoin miners who ...
Doug Kimzey's user avatar