15 votes

Are there safeguards preventing big centralised exchanges like Binance and Kraken from having too much power in projects like Catalyst?

The current voting process is anonymous. It will be impossible to prevent any major ADA holders from influencing voting to favor a particular project proposal and take money from Treasury. However, ...
user avatar
  • 1,794
9 votes
Accepted

How would a 51% Attack on the Cardano blockchain be started and overcome?

The 51% attack is used by an attacker to take over the blockchain. Usually, the community of a blockchain has to reach consensus, which means that once someone mints a new block, other nodes validate ...
user avatar
  • 373
7 votes

Is Yoroi secure as a primary wallet?

I would argue the Yoroi browser extension is much safer than the iOS application. Browser extensions provides double-sandboxing and is considered safer than most of the desktop applications. The ...
user avatar
6 votes

Can two-factor authentication (2FA) be added to the Daedalus and Yoroi wallets?

2FA (in the traditional sense) relies on a shared secret. By design, this can only work in a centralized environment like an exchange or an online wallet, not with a wallet that interacts directly ...
user avatar
  • 1,072
5 votes

Signs for the trustworthiness of the SundaeSwap project?

As much as I'm voting to close this question as it is opinion based, I'm going to provide my insight as it can save people money. For me, they are not trustworthy because: The initial team and most ...
user avatar
5 votes

What are the security risks of storing an encrypted wallet seed in a password manager?

One of the biggest security threats right now is malware and key loggers. That is why offline backup and hardware wallets are so important, as you try to shield your signing keys from your day to day ...
user avatar
5 votes

What decisions are left to the slot leader?

The Haskell reference implementation of the Cardano node, leaves no such decisions to the slot leader, and most (if not all) are using that node implementation. As far as the Cardano protocol is ...
user avatar
4 votes

How would a 51% Attack on the Cardano blockchain be started and overcome?

The 51% number would imply the attacker controlled 51% of the STAKED ADA. Not necessarily 51% of all ADA. Of course the closer we get to 100% of all ADA staked the closer those two numbers get to ...
user avatar
4 votes

Official Cardona Telegram Channel?

No that is a scam! No one is ever going to "return ada to your wallet". There will never be an ada giveaway from IOG or Charles Hoskinson.
user avatar
  • 116
3 votes

Are there safeguards preventing big centralised exchanges like Binance and Kraken from having too much power in projects like Catalyst?

Not at the moment, as the fund rounds are still small. But in the very near future, in order to vote in Catalyst, you would have to freeze your funds for the period of voting. This will prevent larger ...
user avatar
3 votes
Accepted

Airgapping Concerns for Block Producer Secrets

The pool keys control the pool and can never be changed. If your pool keys are exposed, then you have lost control of your pool (this doesn't necessarily mean your pledge, but control of the fees, ...
user avatar
3 votes

What prevents flash loans attacks from occurring on the Cardano network?

While flash loans will exist on Cardano, flash loan attacks will not. To understand why, let's examine that PancakeBunny attack, https://www.coindesk.com/markets/2021/05/20/flash-loan-attack-causes-...
user avatar
  • 351
3 votes

What are the security risks of storing an encrypted wallet seed in a password manager?

The risk is the same as storing the encrypted login details of your bank account in a password manager. However, the bank may have their own controls that limit withdrawal amounts, monitor/block ...
user avatar
  • 1,927
3 votes
Accepted

Can I avoid using a public IP on Block-Producer (BP) node?

Each of your Cardano nodes needs a static IP address to communicate between each other. You can use IP or domain names. Block Producer (BP) node For better security, you can choose to set a private IP ...
user avatar
3 votes

Can you run a stake pool pseudonymously?

Can you run a stake pool pseudonymously? Yes you can. The only things I can think of that could be used to identify you would be your public IP address or, DNS records (at least at a public knowledge ...
user avatar
2 votes

Is Yoroi secure as a primary wallet?

Keep in mind that in the future IOG is planning to have lightweight version of Daedalus. For now Yoroi is very convinient and in terms of security is in the same level as Daedalus. In fact Charles ...
user avatar
2 votes
Accepted

Staying secure for every day users: What recommendations do security experts have for wallet management, safety, maintenance?

Some specific answers to your questions. I don't know that there is a great answer to this. Your options range from putting it on paper and in a safe deposit box in a bank, to storing it one word at ...
user avatar
  • 1,692
2 votes
Accepted

How much entropy does BIP39 have?

I'd take a look at this answer It seems a very well resourced attacker would be able to find a used private key for 128bit seed. This would be an attack on all keys in the network, not yours ...
user avatar
  • 191
2 votes

How much entropy does BIP39 have?

128 bit for 11 seed word and 256 for 27 seed word for 128 bit 1.02 x 10^18 years.
user avatar
2 votes

Are there safeguards preventing big centralised exchanges like Binance and Kraken from having too much power in projects like Catalyst?

I found another answer in this article about Cardano (from 2019). This paragraph in particular: In Cardano, exchanges will get special enterprise exchange addresses that cannot participate in network ...
user avatar
  • 433
2 votes

hardware wallet

Ledger live doesn't have a google add-on, you were only scammed. There isn't a way to get hacked with ledger live unless you accept a transaction. I've been using Ledger since 2017 it works as long ...
user avatar
2 votes

What security exists in Daedalus for protecting the private key

About password and physical access First of all, your wallet must be password-protected and then, as you already said, it will be encrypted. You also need a strong OS password to protect your computer ...
user avatar
  • 1,617
2 votes

Official Cardona Telegram Channel?

I have reported this Telegram Channel. This was an important security question in my opinion
user avatar
  • 31
2 votes
Accepted

Is there a way to know if your wallet was restored (accessed) without a transaction being made?

Cardano uses the Hierarchical Deterministic key generation scheme (specifically that of BIP44-ed25519), which is an offline process that can be done without an internet connection. As such, there is ...
user avatar
  • 3,111
2 votes
Accepted

How Do I Deploy a Wallet Connector to the Website in a Safe Way

Here is an example using Nami and blockfrost for you to review: https://github.com/dendorferpatrick/nami-wallet-examples Another smaller example: https://www.npmjs.com/package/nami-wallet-api/v/1.1.9 ...
user avatar
1 vote

Can I Share Daedalus Public Key?

Cryptography is the science of secret writing with the intention of keeping the data secret. Cryptography is classified into symmetric cryptography, asymmetric cryptography and hashing. Private Key: ...
user avatar
1 vote

Can I Share Daedalus Public Key?

for the sake of potential loss of your balance i wold say dont untill your absolutely sure but you would assume yes seeing as its called a public key meaning its publicly visible
user avatar
1 vote

Canonical example of Smart Contract Verification?

I tried to start a conversation about this here, remains to be seen whether I'll be successful in generating dialogue. But outside of Cardano internals like Ouroboros or the plutus metatheory, the ...
user avatar
1 vote

Spare computer with Yoroi or Daedalus as pseudo cold wallet v. Ledger

I built a fully offline Raspberry Pi solution on another coin years ago using QR codes, and cameras as readers. Cardano is similar in the fact that you 1. build a transaction, 2. sign a transaction ...
user avatar
1 vote

Spare computer with Yoroi or Daedalus as pseudo cold wallet v. Ledger

I've done something similar on a Virtual Machine. I have a Linux based operating system for additional security. Doing as you propose is basically the same as using a Ledger/Trezor. The additional ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible