i have a question: in the web wallets(hosted wallets)when user want to make a transaction and send the information to the wallet server , can a one change the information(man in the middle attack)?


This is maybe not the correct place for such security questions but I'll try to answer.

It depends on the connection between you and the web wallet server. If the connection is secured (https) then there shouldn't be a possibility for a MITM attack unless the certificate is compromised as the data is encrypted end-to-end. If the connection is not secured (http) then MITM is possible - but in any case you should never use a non-secured wallet.

| improve this answer | |
  • With https there can still be MITM though, e.g. when the certificate is compromised (or legitimate scenarios like cooperate equipments) – Linmao Song Feb 20 at 8:02
  • Thanks, added info about certificate compromised – Lauri Peltonen Feb 20 at 8:03
  • In the case of non-custodial wallets where a user signs a transaction before sending it to a server, it's not possible to change the transaction. Even with a MITM attack. – Morten Feb 20 at 9:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.