Questions tagged [security]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
1answer
26 views

How to verify the manager.tz script code?

Since the protocol update to Babylon all KT1 accounts were replaced with smart contracts which contain the manager.tz script. Code: parameter (or (lambda %do unit (list operation)) (unit ...
0
votes
1answer
26 views

How to sign transaction from tz2 address?

Can i sign my transaction if i use secp256k1? And how it do? If i'm using sign function from eztz lib, i takes TypeError: invalid privateKey length Private key coded using secp256k1 curve.
1
vote
0answers
23 views

Can i create HD wallets?

Can I generate extended (master) public key and derive child keys from it? Can you show example how to create extended public key and then import this key for deriving childs.
4
votes
1answer
31 views

Is delegating insecure?

I'm new to Tezos. I don't understand this phrase: The rub for investors is that generally speaking, validators running proof-of-stake nodes (known as “bakers” on Tezos) must have some funds online ...
6
votes
1answer
115 views

Is a 51% attack possible in Tezos?

I was reading there was a recent 51% attack to Ethereum. Basically, hackers rented enough computer power to get 51% of the mining power, and insert false transactions into the blockchain. I wonder ...
7
votes
2answers
710 views

How do I know my password or backup information is not being shared when creating a new wallet?

Several services offer to create a new tezos wallet/account/key (tz1...). For example, consider Galleon Wallet. By entering a password, it produces a new wallet: You then need to choose a set of 12 ...
4
votes
2answers
64 views

Is a VPS with DDOS protection sufficient security for a Tezos bakery?

I was thinking about using Virmach $5.00 Windows server 2012 plan with the following specs: for example SSD1G 1GB DEDICATED RAM // 1 vCORE // 25GB+ SSD (HW RAID 10) // DDoS Protection Available // ...
-3
votes
1answer
71 views

How does the tezos blockchain security model works?

Suppose a baker has the highest staking balance, and has a few delegations from his own network and now when it comes to bake, he does something against the protocol or edits a transaction to profit ...
11
votes
2answers
108 views

Where precisely lies the trust in a snapshot?

Nomadic Labs recently introduced the concept of snapshot as a way to speed-up the syncing of new tezos nodes. It is mentionned several times that there exists a certain minimal amount of trust that ...
9
votes
1answer
217 views

How to run tezos node in private mode using docker images?

I already have my node up and running using docker images with default configuration, so how can i change it to run in private node so that I can run few sentry nodes connected to public network and ...
3
votes
0answers
54 views

Interoperational Dangerous? [closed]

Can interoperational Chains like Cosmos be dangerous for the Tezos Network itself? Do such Chains "act" on our Tezos network? Or is it a complete own Space? Could such interoperational functions open ...
5
votes
1answer
52 views

Malicious third-party dependency vulnerability possible in Tezos?

Lately there was a compromised npm package, which was used as a dependency in various projects. The code allowed the attacker to steal funds if certain conditions were met. Could Tezos become a ...
5
votes
1answer
99 views

What are the best cold-storage methods available for XTZ?

Is using the CLI command gen keys new to generate a cryptographically secure key-pair the most secure method for cold storage eg. paper wallet? Which signature algorithm (ed25519, secp256k1, p256) ...
11
votes
2answers
101 views

Reentrancy attack vector on tezos smart contracts?

I heard that Michelson helps with avoiding re-entrancy bug. Why is that? Is there some feature in the language that prevent it?
13
votes
2answers
160 views

Formal verification of Tezos smart contracts

What are the analyses of Tezos smart contracts that could benefit dapps writers the most? Just to be clear, by “analysis” here I mean “static program analysis”. See for instance here. Basically the ...
13
votes
2answers
239 views

How to make an offline transaction?

How do I create an offline transaction on an air-gapped device and broadcast it to the network?