15
votes
Are there safeguards preventing big centralised exchanges like Binance and Kraken from having too much power in projects like Catalyst?
The current voting process is anonymous. It will be impossible to prevent any major ADA holders from influencing voting to favor a particular project proposal and take money from Treasury. However, ...
- 1,834
9
votes
Accepted
How would a 51% Attack on the Cardano blockchain be started and overcome?
The 51% attack is used by an attacker to take over the blockchain. Usually, the community of a blockchain has to reach consensus, which means that once someone mints a new block, other nodes validate ...
- 373
7
votes
Is Yoroi secure as a primary wallet?
I would argue the Yoroi browser extension is much safer than the iOS application.
Browser extensions provides double-sandboxing and is considered safer than most of the desktop applications. The ...
- 7,249
6
votes
Can two-factor authentication (2FA) be added to the Daedalus and Yoroi wallets?
2FA (in the traditional sense) relies on a shared secret. By design, this can only work in a centralized environment like an exchange or an online wallet, not with a wallet that interacts directly ...
- 1,092
5
votes
Signs for the trustworthiness of the SundaeSwap project?
As much as I'm voting to close this question as it is opinion based, I'm going to provide my insight as it can save people money.
For me, they are not trustworthy because:
The initial team and most ...
- 7,249
5
votes
What are the security risks of storing an encrypted wallet seed in a password manager?
One of the biggest security threats right now is malware and key loggers.
That is why offline backup and hardware wallets are so important, as you try to shield your signing keys from your day to day ...
- 7,249
5
votes
What decisions are left to the slot leader?
The Haskell reference implementation of the Cardano node, leaves no such decisions to the slot leader, and most (if not all) are using that node implementation.
As far as the Cardano protocol is ...
- 1,806
4
votes
How would a 51% Attack on the Cardano blockchain be started and overcome?
The 51% number would imply the attacker controlled 51% of the STAKED ADA. Not necessarily 51% of all ADA. Of course the closer we get to 100% of all ADA staked the closer those two numbers get to ...
4
votes
Official Cardona Telegram Channel?
No that is a scam! No one is ever going to "return ada to your wallet". There will never be an ada giveaway from IOG or Charles Hoskinson.
- 126
3
votes
Are there safeguards preventing big centralised exchanges like Binance and Kraken from having too much power in projects like Catalyst?
Not at the moment, as the fund rounds are still small.
But in the very near future, in order to vote in Catalyst, you would have to freeze your funds for the period of voting. This will prevent larger ...
- 7,249
3
votes
Accepted
Airgapping Concerns for Block Producer Secrets
The pool keys control the pool and can never be changed. If your pool keys are exposed, then you have lost control of your pool (this doesn't necessarily mean your pledge, but control of the fees, ...
3
votes
What prevents flash loans attacks from occurring on the Cardano network?
While flash loans will exist on Cardano, flash loan attacks will not.
To understand why, let's examine that PancakeBunny attack, https://www.coindesk.com/markets/2021/05/20/flash-loan-attack-causes-...
- 361
3
votes
What are the security risks of storing an encrypted wallet seed in a password manager?
The risk is the same as storing the encrypted login details of your bank account in a password manager.
However, the bank may have their own controls that limit withdrawal amounts, monitor/block ...
- 1,945
3
votes
Accepted
Can I avoid using a public IP on Block-Producer (BP) node?
Each of your Cardano nodes needs a static IP address to communicate between each other. You can use IP or domain names.
Block Producer (BP) node
For better security, you can choose to set a private IP ...
- 589
3
votes
Can you run a stake pool pseudonymously?
Can you run a stake pool pseudonymously?
Yes you can. The only things I can think of that could be used to identify you would be your public IP address or, DNS records (at least at a public knowledge ...
2
votes
Is Yoroi secure as a primary wallet?
Keep in mind that in the future IOG is planning to have lightweight version of Daedalus. For now Yoroi is very convinient and in terms of security is in the same level as Daedalus.
In fact Charles ...
- 949
2
votes
Accepted
Staying secure for every day users: What recommendations do security experts have for wallet management, safety, maintenance?
Some specific answers to your questions.
I don't know that there is a great answer to this. Your options range from putting it on paper and in a safe deposit box in a bank, to storing it one word at ...
- 1,742
2
votes
Accepted
How much entropy does BIP39 have?
I'd take a look at this answer
It seems a very well resourced attacker would be able to find a used private key for 128bit seed.
This would be an attack on all keys in the network, not yours ...
- 201
2
votes
How much entropy does BIP39 have?
128 bit for 11 seed word and 256 for 27 seed word
for 128 bit 1.02 x 10^18 years.
- 79
2
votes
Are there safeguards preventing big centralised exchanges like Binance and Kraken from having too much power in projects like Catalyst?
I found another answer in this article about Cardano (from 2019).
This paragraph in particular:
In Cardano, exchanges will get special enterprise exchange addresses that cannot participate in network ...
- 443
2
votes
hardware wallet
Ledger live doesn't have a google add-on, you were only scammed. There isn't a way to get hacked with ledger live unless you accept a transaction. I've been using Ledger since 2017 it works as long ...
- 784
2
votes
What security exists in Daedalus for protecting the private key
About password and physical access
First of all, your wallet must be password-protected and then, as you already said, it will be encrypted. You also need a strong OS password to protect your computer ...
- 1,767
2
votes
Official Cardona Telegram Channel?
I have reported this Telegram Channel. This was an important security question in my opinion
- 31
2
votes
Accepted
Is there a way to know if your wallet was restored (accessed) without a transaction being made?
Cardano uses the Hierarchical Deterministic key generation scheme (specifically that of BIP44-ed25519), which is an offline process that can be done without an internet connection. As such, there is ...
- 3,599
2
votes
Accepted
How Do I Deploy a Wallet Connector to the Website in a Safe Way
Here is an example using Nami and blockfrost for you to review:
https://github.com/dendorferpatrick/nami-wallet-examples
Another smaller example:
https://www.npmjs.com/package/nami-wallet-api/v/1.1.9
...
2
votes
Accepted
What is the best (and most secure) way to store private keys in an Express server?
See this post, Best setup of your air-gapped offline machine (cold environment)?.
Also consider the following https://cosd.com/frankenwallet.
- 1,852
1
vote
Can I Share Daedalus Public Key?
Cryptography is the science of secret writing with the intention of keeping the data secret. Cryptography is classified into symmetric cryptography, asymmetric cryptography and hashing.
Private Key:
...
1
vote
Can I Share Daedalus Public Key?
for the sake of potential loss of your balance i wold say dont untill your absolutely sure but you would assume yes seeing as its called a public key meaning its publicly visible
1
vote
Canonical example of Smart Contract Verification?
I tried to start a conversation about this here, remains to be seen whether I'll be successful in generating dialogue. But outside of Cardano internals like Ouroboros or the plutus metatheory, the ...
1
vote
Spare computer with Yoroi or Daedalus as pseudo cold wallet v. Ledger
I built a fully offline Raspberry Pi solution on another coin years ago using QR codes, and cameras as readers.
Cardano is similar in the fact that you 1. build a transaction, 2. sign a transaction ...
- 327
Only top scored, non community-wiki answers of a minimum length are eligible