Questions tagged [security]

This tag should be used for questions regarding security issues with the design or implementation of Bitcoin and related cryptocurrencies.

41 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
1answer
80 views

How the Bitcoin community will handle attacks on a Client's code?

I have some thoughts about the following scenario. The brightest future. The Bitcoin becomes a very popular and liquid currency all over the world. Some serious financial or political parties may ...
2
votes
0answers
34 views

Bitcoin over Tor and man in the middle attack: risks mitigated yet?

This paper explains how combining Bitcoin and Tor creates an attack vector. A man in the middle can control the information flow between all users who connect over Tor. This paper is from 2014. Has ...
2
votes
1answer
165 views

Lightning network hub security?

Reading the whitepaper, I came across a point: nodes wishing to act as effective intermediaries, 'hubs' or not, need high availability and need to operate autonomously. This means they must have ...
2
votes
0answers
107 views

Is the reference client of Bitcoin regularly audited?

I imagine that plenty of eyes have combed through the reference client's source code. But the code is still changing for a variety of reasons (features, patches, improvements, etc). I didn't find ...
2
votes
0answers
257 views

Is there a way to import a private key already protected with the passphrase?

Let's say I have a hot wallet that has passphrase encryption enabled. Then let's say a large withdrawal needs to occur but the hot wallet has insufficient funds and a transfer from cold storage is ...
2
votes
0answers
263 views

Is anyone working on / has implemented a “two-factor paper wallet”?

I just created this wiki page. I'm coining the term here, I think ... not sure what was it called when discussed on Bitcointalk. My question is: Has anyone implemented this "2 factor paper wallet"? ...
1
vote
0answers
30 views

Why bother with 'account' in derivation path?

After lots of wallet testing, I'm thinking that only account level 0 should be used. Especially, when you consider restoring a wallet from the seed phrase. m / purpose' / coin_type' / account' / ...
1
vote
0answers
100 views

How to best practice restoring a wallet in bitcoin core

I have a test wallet in bitcoin core that I want to play around with and get comfortable with before I move my btc from blockstream green wallet. I primarily use that wallet because so far it has been ...
1
vote
0answers
61 views

What is the security and trust model of an Opendime?

Opendimes use some entropy on the device in combination with some entropy added by the owner to generate private keys directly on the device. Until the device's seal is broken, it is claimed to be ...
1
vote
0answers
229 views

How prevent from hacking personal computer and using my jaxx account

It looks like anyone who can hack a computer has direct access to the jaxx wallet stored on the hard drive. Is there any way to block access like requiring a strong password to open the wallet? ...
1
vote
0answers
94 views

Is the Password stored in RAM in clear text after decrypting the MultiBit HD wallet?

After decrypting your wallet in MultiBit HD, is the clear text version of password stored in the RAM?
1
vote
0answers
214 views

Privacy risks with a hardware wallet

I'm trying to understand the privacy risks with a hardware wallet like a Trezor, Ledger, or similar. I understand the common workflow with these wallets is that you use an SPV bitcoin client which ...
1
vote
0answers
42 views

How can I find out if a mining pool has been leaking user information?

To my surprise, I have received spam to an email address which I exclusively used with a mining pool that seems to be generally considered trustworthy and reliable. The spam is bitcoin related and ...
1
vote
0answers
35 views

Ensure Wallet consistency

I have recently migrated machine. I used the Apple Migration Wizard and when it was finished my new machine's copy of Multibit appears to have my BTC within it. My next task is to wipe the old ...
1
vote
0answers
109 views

Trying to figure out the two-part authentication process. Can anyone give direct instructions?

I'm using btc-e.com verification, in the Finances section. It supplies two key codes and has a square bar code to scan. I've set up my google account for two-part verification, and google is ALSO ...
1
vote
0answers
707 views

Should I run Bitcoind / JSON RPC on a home server connecting to a VPS

I'm debating whether to run bitcoind/ JSON-RPC on a server from my house that takes requests from users on hosted VPS. While I'm not starting a bitcoin poker site, I can explain what I'm doing easier ...
1
vote
2answers
289 views

Should I be using the “encrypt wallet” feature in Bitcoin Core?

All my wallet.dats have no password. However, the internal hard disk where the "live" one is located is encrypted, and so are the offline storage devices where I have my "cold" ...
0
votes
0answers
15 views

Which app generates stronger mnemonic seed?

Mnemonic phrase, mnemonic seed, or seed phrase are defined as a secret group of words that represent a wallet. When used in sequence they allow access to the cryptocurrencies stored within. “Mnemonic” ...
0
votes
1answer
64 views

Multisig Setup - Pruned Bitcoin Core on Computer vs. Dedicated Hardware

Are there security implications of running a pruned Bitcoin Core node on a personal computer vs. a full Bitcoin Core node on a dedicated hardware device (i.e. Raspberry Pie with Umbrel, myNode, nodl, ...
0
votes
2answers
68 views

Is brute forcing a private key with unspent coins getting easier?

Is the likelihood of correctly guessing a private key with unspent coins increasing due to: More addresses being used resulting in more private keys with unspent coins (i.e. higher chance that a ...
0
votes
1answer
57 views

If Cryptocurrency offers anonymity, why is it considered by forensic professionals to be the best currency for fighting illicit transactions?

A paper by titled An Analysis of Bitcoin’s Use in Illicit Finance discusses how Cryptocurrency is considered by forensic professionals to be the best currency for fighting illicit transactions. In ...
0
votes
0answers
46 views

How many hops does Coinbase and other exchanges track your movement of BTC when it leaves their exchanges?

I've read reports of Coinbase users getting an email stating that they detected their Bitcoins being moved to an unapproved exchange or site after removing their bitcoins off of the exchange. What is ...
0
votes
0answers
49 views

Bitcoin Core Security

Is there any site or resource where I can learn how to do security transactions while trading on bitcoin testnet
0
votes
0answers
34 views

Are there any privacy benefits in using a separate wallet in Bitcoin Core to “separate” myself from my service?

I currently run Bitcoin Core with the following wallets loaded in: hot.dat. Contains the smallest possible sum of Bitcoin. Unencrypted and used by myself for various personal Bitcoin purchases, and I ...
0
votes
1answer
69 views

Wallet suddenly shows transactions from someone else

I restored a wallet recently that I have not used in years. Back then, it was only Bitcoin, but at some point Ethereum was added. So now I see all my Bitcoin tx, but on top of that the Ethereum part ...
0
votes
1answer
36 views

bitcoin address after transaction security questions

I found an old paper wallet on an old computer of mine which is offline (I can count the number of coins with my fingers). I would like to distribute these coins now among 6-9 wallets (I want to give ...
0
votes
1answer
55 views

How to verify Wrapped Bitcoin (WBTC) issuance

I'm trying to understand how Wrapped Bitcoin (WBTC) issuance can be verified. The WBTC custodian, BitGo, published the following material: https://wbtc.network/dashboard/audit This is a list of ...
0
votes
1answer
171 views

Doesn't storing the “recovery seed phrase” for a wallet defy all logic?

I've heard many times that you are supposed to write down a "recovery seed phrase" (a series of English dictionary words) on a piece of paper and store that securely so that you can recover ...
0
votes
0answers
44 views

What should i do with my used antminer? How should i set it up?

ive just purchased a 2nd hand s9i antminer, got it for £200, a great deal i thought, what tasks should i perform before installing? i was thinking of opening it up and looking inside, just to see what ...
0
votes
1answer
40 views

is wallet vulnerable when unlocked for transactions?

is wallet vulnerable when unlocked for transactions?.I recovered a wallet some time ago and all is good.passphrase key all looks good.But a question came to my mind about the moment we make a ...
0
votes
0answers
53 views

Can you think of a safe way to safely keep my “spendable” Bitcoin in my situation?

I have my "cold stash" wallet.dat on multiple fully offline, encrypted hard disks/sticks inside a fireproof safe. I never seriously considered printing them onto paper because that would be ...
0
votes
0answers
54 views

When a BIP44 XPUB and one of its descendant keys get leaked, what's the worst that can happen?

I understand that BIP44 has one edge case vulnerability where if a hacker gets his hands on an Xpub and a private key from its descendants, he can compute the Xprv pair of the original Xpub and ...
0
votes
0answers
18 views

Can one consider that the interest of other actors/stakeholders would change something about the concept of “blockchain”?

I am new to the Bitcoin world and am trying to get an overview within a research project. I see that Bitcoin was born out of a certain motivation to decentralize money and that decentralization, open ...
0
votes
0answers
40 views

similar seed words minor sequence difference

I created a wallet weeks back and seemingly restored the seed onto my other 2 devices. Recently I got to notice that I had mistakenly logged into another wallet with identical seed words but I ...
0
votes
0answers
88 views

How could PSBT deal with data capacity limit of QR code?

QR code has very limited data capacity. (According to Wikipedia) one single QR code can only carry <3KB of binary data. It's not rare for a PSBT to hit this 3KB limit, especially for ones which ...
0
votes
0answers
54 views

How may bitcoins hash algorithm be secured in the future from quantum computing brute forcing?

Other threads already answer very clearly that quantum comps could easily "break" /attack bitcoins chain. Now: Are there any ideas among the bitcoin devs circulating out there, how to save bitcoin ...
0
votes
1answer
256 views

A few security-related questions: how do I automate a web service as much as possible without storing private keys on server?

I'm learning how to use bitcoind, and want to set up a side project that uses bitcoin to learn along the way. I'll be using the json-rpc with PHP on my server. I want to create a service that will ...
0
votes
1answer
181 views

Is there a tutorial on how to set up a secure enviroment and use Electrum?

Which OS to use? How to verify that the OS is secure? How to download and install Electrum securely? There are many methods - binaries, git, homebrew, Ubuntu package, building from source. Is there ...
-1
votes
1answer
49 views

How Spectre tolerates spam transactions?

Spectre is a DAG based (directed acyclic graph) distributed ledger (a structure as an alternative to blockchain based distributed ledger). Is there any mechanism in Spectre to prevent sending spam ...
-1
votes
1answer
5k views

How can I cancel a pending transaction

https://blockchain.info/tx/d2aa8e971dd26a4f4598f57b55e921a62fa376dad1cf25e426b6ba7d79052466?show_adv=true. This transaction was made by some fraudsters on my wallet. I later recovered my wallet. How ...
-1
votes
1answer
41 views

What arguments would one pose to shows Bitcoin is an enabler of crime and not an enabler of crime?

What arguments could be made for Bitcoin being an enabler of criminal activity? For example: Could Bitcoin be used as the backbone of Ponzi Schemes? Are there any consequences for Bitcoin miners who ...