Questions tagged [security]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
2answers
242 views

Is there a way to know if your wallet was restored (accessed) without a transaction being made?

In most cases, I would assume that if your wallet is compromised, your funds are going to be stolen and that is how you are going to know it is compromised. However, let's assume a hypothetical threat ...
1
vote
3answers
105 views

What Utility Do Third-Party Services Provide with Undisclosed Slot Lottery Information?

Small Sample of Concerns Belonging to Larger Family of Unknown Real or Figurative Concerns I would like to send my predetermined Slot Leader reports to PoolTool, yet I only use the API key they ...
1
vote
1answer
33 views

What are some ways a SPO can attack the network and what mechanisms exist to discourage or mitigate such attacks?

What are some ways a SPO can attack the Cardano blockchain? E.g. in Bitcoin, a miner could intentionally exclude certain transactions to the extend that the miner's hash power allows. Is something ...
3
votes
1answer
38 views

Can you run a stake pool pseudonymously?

To be a stake pool operator and run a stake pool, can you do this pseudonymously? If so, What are the pro/cons to this? Would this be preferred to prevent hacks, enhance DevSecOp, and potentially ...
2
votes
0answers
19 views

Design considerations when automatically signing and submitting Cardano transactions

Automating transactions (eg an Oracle that regularly publishes meta data to the blockchain) require that we balance the necessity to sign each transaction using a signing key with the security of the ...
4
votes
1answer
173 views

Can I avoid using a public IP on Block-Producer (BP) node?

My BP and relays are on the same local subnet, I would prefer to give them the private IP address in the topology files. However, all of the guides I've come across explicitly state using public IPs. ...
1
vote
1answer
32 views

is it possible to execute an undecidable off-chain loop, and attack the network in this way?

is it possible to execute an undecidable off-chain loop, and attack the network in this way? taking into account that the off-chain code is flat Haskell code is also complete turing.
0
votes
2answers
69 views

Can I Share Daedalus Public Key?

I am trying to add my accounts to a coin baalance tracker, but am having a hard time with Daedalus. The only option that seems to make any sense is sharing the public key with the tracker apps. Is ...
4
votes
1answer
100 views

What security exists in Daedalus for protecting the private key

If the wallet private key is in \AppData\Roaming\Daedalus\Secrets-1.0 what security exists from physical access to this file? Per this https://forum.cardano.org/t/where-are-the-public-and-private-keys-...
4
votes
1answer
80 views

Canonical example of Smart Contract Verification?

Given that the chief benefit of Cardano Smart Contracts over Ethereum Smart Contracts is formal verification (and thus its implied validity, security, and robustness), is there a non-trivial example ...
4
votes
4answers
66 views

Spare computer with Yoroi or Daedalus as pseudo cold wallet v. Ledger

Am running through my mind the pros and cons of storing Ada on a spare computer disconnected from the network, not happy with being connected to the Internet 24/7 despite being behind firewall. Apart ...
3
votes
1answer
52 views

Unable to view images from ipfs.blockfrost.dev

I am unable to view images on ipfs.blockfrost.dev on my Mac. However, I can view them on my iPhone. I have tried Brave, Chrome, and Safari browsers. Here is the error message I get when I click '...
1
vote
2answers
58 views

Official Cardona Telegram Channel? [closed]

Is this an official Cardano Telegram channel? https://t.me/Cardonacommunitychat
2
votes
2answers
75 views

hardware wallet

With all the hacking of personal computers, ledger, and t-mobile; what is the safest way to store ADA? I have been hacked through ledger live through a google add-on. Is Yori with ledger safe? thanks, ...
4
votes
1answer
69 views

Airgapping Concerns for Block Producer Secrets

I am trying to understand the extreme caution about creating secrets for the BP node. Is the concern about not knowing what one might lease in the cloud, or how security is in such a company, or their ...
7
votes
3answers
317 views

What prevents flash loans attacks from occurring on the Cardano network?

Flash loans attacks are current in DeFi space and we saw several ones these last weeks on the Binance smart chain. (Pancake Bunny and Burger swaps) Mr. Hoskinson said numerous times that if it took ...
5
votes
2answers
804 views

Signs for the trustworthiness of the SundaeSwap project? [closed]

I would like to know, what are known signs about the trustworthiness of the project SudaeSwap? What could be technically achievable black swan scenarios? Is it a project that is connected with Cardano?...
12
votes
1answer
58 views

What decisions are left to the slot leader?

Is the order of transactions deterministic, or is it decided by the slot leader when creating the block? Are DEX front-running attacks a possibility? Can the slot leader censor specific transactions ...
15
votes
3answers
173 views

Are there safeguards preventing big centralised exchanges like Binance and Kraken from having too much power in projects like Catalyst?

Kraken recently announced it would let its users stake Ada on their account. However, since Kraken owns this ADA, I understand this means it could have the voting power of all its users combined on ...
9
votes
2answers
142 views

How would a 51% Attack on the Cardano blockchain be started and overcome?

What exactly is the 51% Attack? How hard would it be to accomplish this attack? How easy is it to overcome the attack should it actually occur?
6
votes
2answers
382 views

Can two-factor authentication (2FA) be added to the Daedalus and Yoroi wallets?

I would like to ask if it is possible to implement 2FA at the wallets of cardano for increased security. As I see it we like to attract people from developing world they don't have access to hardware ...
5
votes
2answers
1k views

Is Yoroi secure as a primary wallet?

I received an IOHK support ticket response this week that recommended I install the Yoroi wallet: The Daedalus wallet is a full-node wallet, so it can take time to install and can be difficult to use ...
0
votes
1answer
45 views

Staying secure for every day users: What recommendations do security experts have for wallet management, safety, maintenance? [closed]

What's the safest way to store BIP39 seed words? What hardware wallet backup options exist? How can I share details on wallet maintenance with family?
3
votes
3answers
89 views

How much entropy does BIP39 have?

How much entropy does BIP39 have? How long would brute forcing take? Can a 2nd factor be included on a wallet, to lock, unlock it?
12
votes
3answers
148 views

What are the security risks of storing an encrypted wallet seed in a password manager?

We've all seen the recommendation against storing our wallet seed phrases digitally. And while I understand the sentiment and reasoning, in reality, for many it could be even less secure to store a ...