New answers tagged

1

Real randomness doesn't exist in the regular computers (not talking here about quantum based randomness). It's always pseudo random as if you know all the parameters you can reproduce the outcome. Mouse and time based random generators are not real random but pseudo random as if you set your clock to the exact time and do the exact same mouse moves and have ...


0

There is a clear front-running issue with the claimTokens function. Let's say that user A sends a claimTokens transaction with a signed message as the sig parameter. User B (evil) sees the transaction in the mempool. To claim the tokens that belong to A, all B has to do is copy the parameters of A's transaction, including sig, and send its own claimTokens ...


2

In general there is no issue in using ecrecover the most important part is how you create the hash that you sign (e.g. include the contract address and chain id into the hash to prevent replay attacks) Most wallets don't let you sign data that could potentially be a raw transaction. Therefore you have a couple standards for signing. The most notable ones are ...


0

There's an even simpler implementation called Burner Wallets for Ethereum that doesn't even store a password hash: see https://burnerwallet.co/ -- it seems so far that there haven't been any attacks. I wouldn't use just password hashes, as then you are vulnerable to a rainbow attack if localstorage is compromised (and that seems like the whole point of your ...


1

2021-12 FYI for Googlers, you can inspect the UTC keystore file with the ethkey cli tool that comes with geth with the --private flag to show the private key ethkey inspect --private test_chain/keystore/UTC--<file name output Address: 0x... Public key: ... Private key: ...


0

This is the correct answer. You have to use const wallet = Wallet['default'].fromPrivateKey(privateKeyBuffer); Generating an Ethereum wallet with an existing private key


0

With the seed phrase and the derivation path m/44'/60'/0'/0/0 is enough to calculate the private key associated with the address. Currently for metamask private keys are 64 hex characters. Other wallet may accept other formats like bip32 extended private keys.


Top 50 recent answers are included