Questions tagged [security]

For questions regarding security within the Stellar Network.

Filter by
Sorted by
Tagged with
0
votes
1answer
99 views

Change Network Passphrase - Quickstart - Persistent - Docker

I am trying to change the network passphrase for stellar. I am using the quickstart docker image and launching in standalone mode. command: docker run --rm -it -p "8000:8000" -v "E:\...
0
votes
1answer
27 views

Stolen Stellar Recovery

I am doing some research, and would like to know: If had XLM stolen in a hack, is there a way to recover or trace it? Thanks, any help is appreciated.
0
votes
1answer
51 views

I got scammed with an email phishing scam [duplicate]

Any suggestions on how to report this and recover my lumens?
1
vote
1answer
972 views

Anchorusd trustworthy?

I recently decided to cash in my free lumens from last year on keybase So I looked into it and transferred my lumens to an anchorusd account using the anchorusd android app Keep in mind I have never ...
2
votes
1answer
25 views

Best Practices for Securing Secret Keys in a Tier-3 DLT App Built on Stellar

I'm working on a Stellar-based app. Part of our protocol requires us to submit transactions from users accounts. We'd prefer to have users enter their secret keys when their accounts need to submit ...
0
votes
1answer
21 views

How can I preg_match a Stellar public address in PHP?

Just wondering if anyone can help me preg_match a Stellar public address in PHP?
1
vote
0answers
18 views

Lobstr wallet security

I am checking the best Stellar wallet to save my assets. I have setup the account on LOBSTR. I'm interested most in the security. Looks like the transaction is not signed on client but on server side....
0
votes
0answers
34 views

Stellar Account Viewer not allowing access

I use Stellar Account Viewer for its ease of use and had no problems until now. Today though it is refusing to recognize my Private key (which is double, treble backed up). Has there been a recent ...
1
vote
1answer
31 views

What tool is used for browser interactivity?

The use-case is I would like someone to buy an asset directly on a website, by clicking GUI-buttons and preferring client-side code, rather than asking them to write code or give a server their keys. ...
2
votes
1answer
148 views

Secured ways to check if a node is up working?

To monitor nodes' healthiness, there are tools for Bitcoin and Ethereum (e.g. https://github.com/cubedro/eth-net-intelligence-api). Some of them are tools that sends heartbeats representing an ...
1
vote
1answer
47 views

Do sequential secret seeds create a security risk?

In developing a hierarchical deterministic wallet, want to generate one random secret seed and declare it as the Master Secret Seed. Then, add a sequential index (1, 2, 3,... n) to the Master Secret ...
2
votes
1answer
124 views

Can the Horizon Server be hacked?

What is the guarantee that the Horizon Server which I am interacting is actually fetching (correct) data from ledger SQL database of Stellar Core?
4
votes
1answer
168 views

Why does the high level threshold level for quorum have to be above 66%?

What is reason that the threshold of consensus bearing nodes must be above 66% for the network to operate successfully? This is straight from the docs of the stellar-core_example.cfg file. ...
4
votes
2answers
346 views

What is asymptotic security and why does Stellar, but not POW exhibit this?

One of the benefits mentioned of SCP in comparison to POW is 'asymptotic security' https://www.stellar.org/blog/stellar-consensus-protocol-proof-code/. What does this form of security mean in practice ...
9
votes
1answer
479 views

Securing Stellar node

I would like to know how I can secure the Stellar node from unauthorized access. I run a Stellar node (still learning) as a Full validator with the following services on the default port. Stellar ...
2
votes
1answer
126 views

How does the Stellar Network prevent an actor with small quorum intersection from halting the network

I am thinking through some of the edge cases of adversaries attempting to compromise the Stellar Network. Let's say an adversary creates four consensus bearing Stellar-core nodes and runs all four of ...
8
votes
3answers
414 views

Storing Secret Key for Smart Contracts

I'm currently working on a project that will implement multi-signature smart contracts to process our transactions. I have a quick question and am looking for input on how best to do this. My team ...
4
votes
1answer
77 views

Formal Verification of Smart Contract in Stellar

Are there any tool to verify the smart contract in Stellar ? From the tutorial, "Code can contain bugs or may not perform as intended. Be sure to analyze and agree upon all possible edge cases when ...
3
votes
1answer
169 views

How is Stellar network protected against spam? Are there scalability solutions?

After todays meeting with Stellar dev in Kraków some issues have raised in my mind that I couldn't easily find the answer to: From what I've heard, Stellar is capable of handling like 1000tx/s. With ...
4
votes
2answers
612 views

How many public addresses can be generated for a stellar public key?

What's the limit? And what is the chance of someone guessing your keys?
5
votes
1answer
109 views

Is it possible to run Stellar over Tor?

As a comparison, it's not currently possible to run an Ethereum node on the Tor network, because Ethereum runs its peer discovery protocol over UDP, and Tor is TCP-only. Does the same hold true for ...
5
votes
1answer
281 views

How do 2 people sign a transaction from different clients?

In the multisig example located in the developer documents everything is listed in sequence in a single client "session" so to speak. https://www.stellar.org/developers/js-stellar-base/reference/base-...
9
votes
2answers
162 views

What is the Safest Way for Users to Sign Transactions Over the Web?

I'd like to build a web wallet that let's people make transactions. I'm best at python so right now I ask for the secret key in a form with the other transaction information, send it to my server, ...
8
votes
2answers
476 views

How do I use the flag: authorization revocable

If I issued a coin what steps would I take to have the issuing account revoke its credit held by other accounts?
2
votes
1answer
33 views

Inflation pool ledger protocol

When signing up for an inflation pool the hash on my Ledger and what was being displayed on the Stellar Laboratory did not match. I know that I am signing with my Ledger but is there any way for ...
11
votes
1answer
290 views

Why is Stellar on HTTP and not HTTPS?

On the Stellar website: "API: Horizon Most applications interact with the Stellar network through Horizon, a RESTful HTTP API server. Horizon gives you a straightforward way to submit transactions, ...
4
votes
2answers
181 views

Can an inflation pool be hacked to send all weekly lumens to 1 address? [third-party]

Obviously a website can be hacked, but is there anything that prevents the hacker from changing the redistribution target inflation addresses of all accounts to one address? What is stopping me from ...
8
votes
1answer
531 views

How to find the public key given only the seed?

If I have only the seed to an account, how can I find the public key?
14
votes
2answers
440 views

How does Stellar solve the problem of “double-spending”?

Every digital currency has to solve the problem of double-spending somehow. What is Stellar's approach to keeping me from spending my money twice at the same time?
2
votes
1answer
83 views

Web Wallet requirements

I thinking about make a web wallet. I want to know what requirements it has to pass to be considered as a safe and trust by the community. I thought about adding code integrity checks to compare ...
22
votes
2answers
808 views

Are there any known weaknesses in the Stellar Consensus Protocol?

Are there any known situations, although infrequent or difficult to meet, where the Stellar Consensus protocol could not work well or where the network can be attacked by malicious nodes?
3
votes
1answer
88 views

How to find a secure wallet

Just recently a major hack lifted lumens worth $400k from the digital wallet provider BlackWallet. What are the most important security considerations when picking a Stellar wallet? How can I verify ...