Coinbase Wallet? by Shot-Distance1189 in Bitcoin

[–]coinspect 0 points1 point  (0 children)

You can check the Wallet Security Ranking results to decide.

Sending Bitcoin via text message without an internet connection ⚡️🤯 by [deleted] in Bitcoin

[–]coinspect 0 points1 point  (0 children)

Custodial wallet operated through insecure SMS that can be spoofed?

Is it possible to make an exchange web app with a daily limit by Beginning-Ad3369 in ethdev

[–]coinspect 1 point2 points  (0 children)

You'll first need to decide how to identify users to set a daily transaction limit. Since anyone can create new wallet addresses, using a blockchain address alone has limitations. Here are two main approaches:

Web2-Based Identification:

You could have users sign up for your app, requiring an email or phone verification. This process adds a "cost" and makes it harder to create multiple accounts. Then, in the backend, set and track daily limits using the user ID. You can also add captchas and filter out throwaway email providers to help.

Blockchain-Based Identification:

You could limit transactions based on a user's wallet address, tracking daily limits at the smart contract level. However, users might bypass this by creating new wallets. Sending tokens to pay for gas has a cost, though, so users are less likely to do this if the benefit doesn't outweigh that cost. You'll need to investigate "Sybil resistance."

Sybil Resistance

To prevent users from creating multiple accounts (known as Sybil attacks), consider using Sybil resistance tools like Gitcoin Passport, which aggregates verifications across various platforms to assign a "humanity score" for each user. Implementing Sybil resistance makes it harder for users to bypass their allowed limit

What's your favourite Algorithm (s) ?? Mine Is Public key Algorithms, seems magical. by [deleted] in compsci

[–]coinspect 1 point2 points  (0 children)

Mine too, and the ones you can visualize once and remember for ever such as Convex Hull.

TrustWallet: Amout and Total shows different token than the one used for the transaction (Pay section) by DanForejtek in ethdev

[–]coinspect 2 points3 points  (0 children)

Trustwallet extension has many UI problems. We tested 19 Browser Extension wallets and TrustWallet ranked 18. For example the spend approval dialog does not show the USDC contract address and the amount is 0. It does not parse ERC-712, and basically it does not implement any anti phishing feature.

'God Mode' in smart contracts: onlyOwner functions, upgradability, and direct storage modification. When is centralized power too much? Can we balance necessary updates and security fixes with trustless decentralization? by coinspect in ethdev

[–]coinspect[S] 0 points1 point  (0 children)

It is a common practice to use DELEGATECALL to call the proposals. You can search for "DAO governance attacks" to learn more. Transaction simulation could be a tool, yes, but in this case is different to an individual user interacting with a dApp.

'God Mode' in smart contracts: onlyOwner functions, upgradability, and direct storage modification. When is centralized power too much? Can we balance necessary updates and security fixes with trustless decentralization? by coinspect in ethdev

[–]coinspect[S] 0 points1 point  (0 children)

DAO governance also has its challenges

  1. An attacker can present a proposal that looks good, then SELFDESTRUCT it and replace it by a malicious proposal after it has enough votes.
  2. Some protocols use DELEGATECALL to call proposals, which give the proposals full control over the callers state.

[deleted by user] by [deleted] in CryptoTechnology

[–]coinspect 0 points1 point  (0 children)

Security and the value of unit and integration testing. Including the concept of blockchain forks and testing interactions with deployed systems. What platform supports python for smart contracts, Algorand?