Skip to main content

The Daily: Privacy Coin Strength Debated, Hardware Wallet Exploit Demonstrated

In Tuesday’s edition of The Daily, we detail the theoretical vulnerability found in the Coldcard crypto wallet, coming just one month after its manufacturer ridiculed the flaw found in other hardware wallets. Sticking with vulnerabilities, we also consider the risks of leaving your funds on an exchange in the wake of Liqui’s demise and examine how private zcash transactions really are.

Also read: Italian Court Orders Bitgrail Founder to Refund $170M of ‘Missing’ Cryptocurrency

Coldcard Subjected to Proof-of-Concept Hack

Coldcard, the hardware wallet (HW) developed by Coinkite, is vulnerable to a theoretical man in the middle attack that would enable its PIN code to be tried multiple times a second. The attack would require physical access and specialist hardware to perform, but was nevertheless deemed serious enough for Coinkite to publish a blog post encouraging users to select a long PIN code. The white hat hacker who found the exploit, Lazy Ninja, shared his findings with Coinkite, along with a video demonstrating it in action.

As Coinkite explains, “His approach takes between 5 and 10 seconds per PIN attempt … Although we allow very short PIN codes—even just four digits (2+2) for development—as explained in our documentation, best practice is using an eight digit PIN code (4+4), which is what we recommend.” In December, Coinkite published a blog post titled “Some Other Wallets.fail” which poked fun at other manufacturers’ devices that were exploited by the Wallet Fail team.

Liqui Exchange Shuts Down Citing Lack of Liquidity

On Jan. 28, Liqui exchange sent an email to its users stating that: “Much to our regret … Liqui is no longer able to provide liquidity for the users left. We also do not see any economic point in providing you with our services.” It’s promised users that they will be able to withdraw their assets within 30 days of the notice. Speculation has swirled as to the reasons behind the exchange winding down.

Traders have reported withdrawal issues with Liqui for months, and were disgruntled in late December to find updated terms that deducted 3.33 percent per day after a zero-fee withdrawal period ended. Given the shadiness of the Ukraine-registered exchange, whose owners are unknown, its exit from the cryptocurrency space will not be mourned by traders who were able to withdraw all of their holdings in time.

Zcash Privacy Debated

The level of privacy provided by zcash (ZEC) has been fiercely debated this week in the wake of comments from the Winklevoss twins that regulators were more “comfortable” with the coin than monero (XMR). “In theory Zcash has better privacy than Monero. Is there something they know about ZEC that we don’t?” responded well-known cryptographer Peter Todd. He later directed his Twitter followers to a tweet highlighting a ZEC feature that enables transactions to be marked for the purposes of meeting “mandatory KYC/AML bullshit.”

In a separate Twitter debate on Jan. 28, another user ranked the privacy levels of ZEC and XMR, suggesting that the most private method was sending zcash between z-addresses, followed by using monero with lots of “churn” to further obfuscate sender and receiver. “This is quite accurate,” agreed Monero developer Riccardo Spagni.

What are your thoughts on the stories in today’s news roundup? Let us know in the comments section below.

Images courtesy of Shutterstock.

Need to calculate your bitcoin holdings? Check our tools section.

The post The Daily: Privacy Coin Strength Debated, Hardware Wallet Exploit Demonstrated appeared first on Bitcoin News.



from Bitcoin News http://bit.ly/2G05WXt
Labels:

Comments

Post a Comment

Popular posts from this blog

Mt Gox Creditors Updated, Trustee Says Rehabilitation Custodian Is ‘Currently Preparing to Make Repayments’

On August 31, 2022, the Mt Gox trustee Nobuaki Kobayashi explained in a recent letter that the rehabilitation custodian is “currently preparing to make repayments” to Mt Gox creditors. Trustee Updates Mt Gox Creditors — Repayment Date and Exchange Still Unknown Last week speculation and rumors concerning the release of 140K bitcoin ( BTC ) from Mt Gox littered social media platforms and headlines. Bitcoin.com News covered the situation six days ago as a number of people and Mt Gox creditors called the rumors “ fake news .” During that same period of time, a bitcoin whale transferred 10,000 BTC to unknown wallets, and a 2018 annotation , heuristics, and clustering methods show the funds likely originated from the June 2011 Mt Gox hacks. Following the mysterious whale transfer, last Wednesday, Mt Gox published an official update from the court trustee Nobuaki Kobayashi that explains the court is “currently preparing to make repayments” to creditors. Mt Gox creditors have been wait...
Post a Comment
Read more

Economists Discuss Russia, China Potentially Developing Gold-Backed Currency That Could Undermine US Dollar

Economists have weighed in on reports that China and Russia may be developing a new gold-backed currency that could undermine the U.S. dollar’s status as the world’s primary reserve currency. Russia and China May Be Developing Gold-Backed Currency Several experts have shared their views on Russia and China potentially creating a new gold-baked currency, Fox Business reported Saturday, emphasizing that China has been buying up huge quantities of gold while Russia was forced off the U.S. dollar due to sanctions imposed on the country following its invasion of Ukraine. The news outlet noted that some experts have cautioned that these moves, along with the closer relationship that has developed between Moscow and Beijing, point to the likelihood of China attempting to launch a gold-backed currency. However, neither Russia nor China has officially confirmed plans for such a currency. Craig Singleton, senior fellow at the Foundation for Defense of Democracies and a former U.S. diplomat,...
Post a Comment
Read more

Fidelity Discusses Bitcoin as Portfolio Insurance — Could Soon Stand in ‘Stark Contrast’ to Path Fiat Currencies Take

Fidelity Digital Assets, a subsidiary of Fidelity Investments, says that bitcoin could be considered portfolio insurance. The firm notes that the cryptocurrency “may soon stand in stark contrast to the path that the rest of the world and fiat currencies may take — namely the path of increased supply, additional currency creation, and central bank balance sheet expansion.” Fidelity Says Bitcoin Could Be Portfolio Insurance Fidelity Digital Assets, a subsidiary of Fidelity Investments, recently published a research study titled “The Rising Dollar and Bitcoin.” The research outlines “how bitcoin could be considered portfolio insurance” as the rising dollar impacts global currency markets. “The strengthening U.S. dollar is wreaking havoc among other countries and may put pressure on the Federal Reserve to soon reverse its tightening monetary actions, something that has precedent based on 1985’s Plaza Accord,” Fidelity explained. In addition, “more monetary debasement may be needed to ...
Post a Comment
Read more