Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

For questions regarding security within the Stellar Network.

2
votes
1answer
33 views

Secured ways to check if a node is up working?

To monitor nodes' healthiness, there are tools for Bitcoin and Ethereum (e.g. https://github.com/cubedro/eth-net-intelligence-api). Some of them are tools that sends heartbeats representing an ...
1
vote
1answer
28 views

Do sequential secret seeds create a security risk?

In developing a hierarchical deterministic wallet, want to generate one random secret seed and declare it as the Master Secret Seed. Then, add a sequential index (1, 2, 3,... n) to the Master Secret ...
2
votes
1answer
91 views

Can the Horizon Server be hacked?

What is the guarantee that the Horizon Server which I am interacting is actually fetching (correct) data from ledger SQL database of Stellar Core?
5
votes
1answer
91 views

Why does the high level threshold level for quorum have to be above 66%?

What is reason that the threshold of consensus bearing nodes must be above 66% for the network to operate successfully? This is straight from the docs of the stellar-core_example.cfg file. ...
3
votes
2answers
132 views

What is asymptotic security and why does Stellar, but not POW exhibit this?

One of the benefits mentioned of SCP in comparison to POW is 'asymptotic security' https://www.stellar.org/blog/stellar-consensus-protocol-proof-code/. What does this form of security mean in practice ...
7
votes
1answer
207 views

Securing Stellar node

I would like to know how I can secure the Stellar node from unauthorized access. I run a Stellar node (still learning) as a Full validator with the following services on the default port. Stellar ...
2
votes
1answer
67 views

How does the Stellar Network prevent an actor with small quorum intersection from halting the network

I am thinking through some of the edge cases of adversaries attempting to compromise the Stellar Network. Let's say an adversary creates four consensus bearing Stellar-core nodes and runs all four of ...
7
votes
3answers
282 views

Storing Secret Key for Smart Contracts

I'm currently working on a project that will implement multi-signature smart contracts to process our transactions. I have a quick question and am looking for input on how best to do this. My team ...
4
votes
1answer
55 views

Formal Verification of Smart Contract in Stellar

Are there any tool to verify the smart contract in Stellar ? From the tutorial, "Code can contain bugs or may not perform as intended. Be sure to analyze and agree upon all possible edge cases when ...
3
votes
1answer
128 views

How is Stellar network protected against spam? Are there scalability solutions?

After todays meeting with Stellar dev in Kraków some issues have raised in my mind that I couldn't easily find the answer to: From what I've heard, Stellar is capable of handling like 1000tx/s. With ...
4
votes
2answers
378 views

How many public addresses can be generated for a stellar public key?

What's the limit? And what is the chance of someone guessing your keys?
5
votes
1answer
91 views

Is it possible to run Stellar over Tor?

As a comparison, it's not currently possible to run an Ethereum node on the Tor network, because Ethereum runs its peer discovery protocol over UDP, and Tor is TCP-only. Does the same hold true for ...
5
votes
1answer
179 views

How do 2 people sign a transaction from different clients?

In the multisig example located in the developer documents everything is listed in sequence in a single client "session" so to speak. https://www.stellar.org/developers/js-stellar-base/reference/base-...
9
votes
2answers
120 views

What is the Safest Way for Users to Sign Transactions Over the Web?

I'd like to build a web wallet that let's people make transactions. I'm best at python so right now I ask for the secret key in a form with the other transaction information, send it to my server, ...
7
votes
2answers
218 views

How do I use the flag: authorization revocable

If I issued a coin what steps would I take to have the issuing account revoke its credit held by other accounts?
2
votes
1answer
30 views

Inflation pool ledger protocol

When signing up for an inflation pool the hash on my Ledger and what was being displayed on the Stellar Laboratory did not match. I know that I am signing with my Ledger but is there any way for ...
11
votes
1answer
211 views

Why is Stellar on HTTP and not HTTPS?

On the Stellar website: "API: Horizon Most applications interact with the Stellar network through Horizon, a RESTful HTTP API server. Horizon gives you a straightforward way to submit transactions, ...
2
votes
2answers
136 views

Can an inflation pool be hacked to send all weekly lumens to 1 address? [third-party]

Obviously a website can be hacked, but is there anything that prevents the hacker from changing the redistribution target inflation addresses of all accounts to one address? What is stopping me from ...
7
votes
1answer
211 views

How to find the public key given only the seed?

If I have only the seed to an account, how can I find the public key?
11
votes
2answers
275 views

How does Stellar solve the problem of “double-spending”?

Every digital currency has to solve the problem of double-spending somehow. What is Stellar's approach to keeping me from spending my money twice at the same time?
1
vote
1answer
52 views

Web Wallet requirments

I thinking about make a web wallet. I want to know your opinion what requirements it has to pass to be considered as a safe and trust by the community. I thought about adding code integrity checks to ...
-2
votes
4answers
92 views

Are there any additional security improvement for Stellar accounts in the future? [closed]

Reflecting on the "Blackwallet" disaster, all Stellarians are wondering how their Lumens assets could be more secure? Is it possible to add extra security features like a 2-step-verification to a ...
19
votes
1answer
376 views

Are there any known weaknesses in the Stellar Consensus Protocol?

While SCP is superior to POW and POS in many ways, are there any known situations, although infrequent or difficult to meet, where the protocol could not work well or where the network can be attacked ...
3
votes
1answer
75 views

How to find a secure wallet

Just recently a major hack lifted lumens worth $400k from the digital wallet provider BlackWallet. What are the most important security considerations when picking a Stellar wallet? How can I verify ...
3
votes
2answers
103 views

How is a private key more secure than the account / password authentication? [closed]

At the beginning of Stellar, we used a Account / Password authentication to access our Stellar balance. Why has this been changed and what are the Pros to now use a private key instead of Account / ...