Questions tagged [security]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
1answer
25 views

Design an oracle that provides random values to a contract

This answer mentions an improved way for an oracle to provide random numbers to a contract. use commitments, i.e. the oracle would push a hash in the contract before the game, and send the random ...
2
votes
1answer
34 views

Tezos baker port to open for mainnet for good security

Hello Tezos community, I read about Tezos public port to open for mainnet, and try to achieve a good security. I understand the default port to open is 9732. Is it a good practice to open this port ...
0
votes
0answers
25 views

Baking on VPS in cloud with ledger nano?

Hello Tezos community, I read the documentation on ledger setup on tezos doc and ledger obsidiansystems app. I understand now how to create a secure account on my laptop with ledger Nano, and delegate ...
1
vote
2answers
32 views

Is it possible to reverse engineer private key? [closed]

Is it possible to discover the private key for a public address given one possesses the public key and the encryption passphrase?
0
votes
0answers
18 views

Setting up a Backup Baking Node

I want to create a backup laptop for my baker (with Ledger). Am I correct in that all I need to do is to register my Ledger (or a copy of it using the same seed words) on a second laptop with Tezos ...
1
vote
1answer
45 views

eztz paper wallet

I'm totally new to Tezos but I'd like to have a paper wallet. Apparently eztz by Stephen Andrews offers this service but I'd like to know how it works. With BTC you have your private key, your ...
6
votes
1answer
184 views

What are the best cold-storage methods available for XTZ?

Is using the CLI command gen keys new to generate a cryptographically secure key-pair the most secure method for cold storage eg. paper wallet? Which signature algorithm (ed25519, secp256k1, p256) ...
2
votes
1answer
117 views

Why is bip25519 better than ed25519?

I read the article by Obsidian Systems and the linked post on recovery attack. I am not an expert, so I am asking to provide some details on why new accounts should use bip25519 derivation scheme and ...
1
vote
1answer
108 views

How to verify the manager.tz script code?

Since the protocol update to Babylon all KT1 accounts were replaced with smart contracts which contain the manager.tz script. Code: parameter (or (lambda %do unit (list operation)) (unit ...
0
votes
1answer
105 views

How to sign transaction from tz2 address?

Can i sign my transaction if i use secp256k1? And how it do? If i'm using sign function from eztz lib, i takes TypeError: invalid privateKey length Private key coded using secp256k1 curve.
1
vote
0answers
45 views

Can i create HD wallets?

Can I generate extended (master) public key and derive child keys from it? Can you show example how to create extended public key and then import this key for deriving childs.
4
votes
1answer
34 views

Is delegating insecure?

I'm new to Tezos. I don't understand this phrase: The rub for investors is that generally speaking, validators running proof-of-stake nodes (known as “bakers” on Tezos) must have some funds online ...
14
votes
2answers
517 views

How to make an offline transaction?

How do I create an offline transaction on an air-gapped device and broadcast it to the network?
13
votes
2answers
322 views

Formal verification of Tezos smart contracts

What are the analyses of Tezos smart contracts that could benefit dapps writers the most? Just to be clear, by “analysis” here I mean “static program analysis”. See for instance here. Basically the ...
8
votes
1answer
269 views

How to run tezos node in private mode using docker images?

I already have my node up and running using docker images with default configuration, so how can i change it to run in private node so that I can run few sentry nodes connected to public network and ...
-3
votes
1answer
77 views

How does the tezos blockchain security model works?

Suppose a baker has the highest staking balance, and has a few delegations from his own network and now when it comes to bake, he does something against the protocol or edits a transaction to profit ...
6
votes
1answer
221 views

Is a 51% attack possible in Tezos?

I was reading there was a recent 51% attack to Ethereum. Basically, hackers rented enough computer power to get 51% of the mining power, and insert false transactions into the blockchain. I wonder ...
8
votes
2answers
762 views

How do I know my password or backup information is not being shared when creating a new wallet?

Several services offer to create a new tezos wallet/account/key (tz1...). For example, consider Galleon Wallet. By entering a password, it produces a new wallet: You then need to choose a set of 12 ...
5
votes
2answers
97 views

Is a VPS with DDOS protection sufficient security for a Tezos bakery?

I was thinking about using Virmach $5.00 Windows server 2012 plan with the following specs: for example SSD1G 1GB DEDICATED RAM // 1 vCORE // 25GB+ SSD (HW RAID 10) // DDoS Protection Available // ...
10
votes
2answers
126 views

Where precisely lies the trust in a snapshot?

Nomadic Labs recently introduced the concept of snapshot as a way to speed-up the syncing of new tezos nodes. It is mentionned several times that there exists a certain minimal amount of trust that ...
11
votes
2answers
150 views

Reentrancy attack vector on tezos smart contracts?

I heard that Michelson helps with avoiding re-entrancy bug. Why is that? Is there some feature in the language that prevent it?
5
votes
1answer
56 views

Malicious third-party dependency vulnerability possible in Tezos?

Lately there was a compromised npm package, which was used as a dependency in various projects. The code allowed the attacker to steal funds if certain conditions were met. Could Tezos become a ...
3
votes
0answers
57 views

Interoperational Dangerous? [closed]

Can interoperational Chains like Cosmos be dangerous for the Tezos Network itself? Do such Chains "act" on our Tezos network? Or is it a complete own Space? Could such interoperational functions open ...