Shield Bitcoin Wallets From Theft Via Time Delay (#GotBitcoin?)
What if there were a mechanism that placed a time delay whenever someone spent bitcoin? Shield Bitcoin Wallets From Theft Via Time Delay (#GotBitcoin?)
The idea has been around for a few years now, and for good reason, it’s believed it could make it much harder for bad actors to steal funds from bitcoin users.
Basically, someone holding bitcoin primarily as a store of value could put it in cold storage, or hold it offline, with code that says it can be spent, but not immediately. The owner could set some pre-determined time delay on any attempt to move the coins. The fact that it has a built-in delay would give a true owner time to reverse a transaction if their private information had been compromised and someone tried to steal their crypto.
Malte Möser, Ittay Eyal, and Emin Gün Sirer proposed this feature, known as “vaults,” as a way to better secure bitcoin in 2016, but their proposal required a fork of the protocol codebase. That fork never happened.
But on Wednesday, Bitcoin Core contributor and crypto consultant Bryan Bishop sent out a design to developers to accomplish the same thing using existing code.
In an email titled, “Practical bitcoin vaults with theft-recovery/clawback mechanisms,” Bishop writes:
“Vaults are particularly interesting as a bitcoin cold storage security mechanism because they enable a publicly observable delay period during which time a user could be alerted by a “watchtower” that a thief might be in the process of stealing their coins.”
Kill Switch key
Under Bishop’s proposal, if an “unlock period” were initiated, an owner could choose to react or not react.
If the proper owner had initiated the transaction, he or she would do nothing because they actually did want to move the bitcoin to a less-secure “hot” wallet for use. But if it was a malicious transaction, the rightful owner could use another pre-determined transaction to force the bitcoin back into the cold wallet, under the same time delay.
In His Email, Bishop Writes:
“The idea is to have a sequence of pre-generated pre-signed transactions that are generated in a certain way. The basic components are a vaulting transaction that locks coins into a vault, a delayed-spend transaction which is the only way to spend from a vault, and a re-vaulting transaction which can recover/clawback coins from the delayed-spend transaction.”
Bishop’s proposal also has a number of options to address other scenarios, for more-sophisticated users.
He Told CoinDesk:
“The way I’m looking at this is there are a lot of people and a lot of exchanges that clearly cannot secure their keys. We’ve seen theft after theft. Having the ability to revoke or undo a transaction, even in this constrained environment, could be quite valuable.”
Indeed, this year has seen hacks at Bitpoint, Bitrue and Binance, among others.
“I don’t know if I’m willing to say it solves theft,” Bishop added. “That’s a strong statement, but it’s a very important tool in the toolbox.”
No Fork Required
Bishop said that his proposal would not require any kind of fork as the prior proposal did. It relies on existing time lock functions that are already built into bitcoin code.
That said, the software is not written yet. Before he makes this code available to the public, he needs to get feedback from fellow developers, write it and then test it thoroughly. So it will be a while before it’s available.
During that give and take with fellow developers, questions about making security more complex are likely to be revisted. When the prior proposal came up in 2016, one developer noted that such a proposal gives a bitcoin user more pieces of data that they have to secure.
On the other hand, since the approach requires no changes at the protocol level, it will be entirely up to the user to take advantage of it or not.
And Bishop is aware that his strategy imposes new responsibilities on users. If it gets built, his concept will also need to be delivered, he said, with a certain amount of public education material, about protecting these new tools, security practices and so on.
Once it is ready, though, the developer said he will make it freely available to any bitcoin holder who wants to use it.
Bishop said he is likely to secure much of his own bitcoin this way, once the software is ready.
Wallet Provider Blockchain.com Sees A String of Exec Departures
United Kingdom-based cryptocurrency data and wallet provider Blockchain.com has come under the spotlight after a string of exits by company employees.
Citing sources familiar with the matter, an article published by The Information on Oct. 2 claims that Blockchain’s longest-serving senior executives — COO Liana Douillet Guzmán and Chris Lavery, executive vice president of finance — are both expected to leave.
Their departures, if accurately reported, would be just the latest in a steady stream of team members calling it quits on the startup, The Information alleges.
A Series Of Swift Executive Departures
According to the report, several executives have previously left Blockchain within just 12 months of hiring. They include the firm’s head of institutional sales and strategy, its global head of institutional markets, the general manager of its flagship wallet product, global head of security and global head of policy.
In the wake of this apparent exodus, one of the Information’s sources revealed that Blockchain.com’s board had looked into what triggered the departures.
It reportedly concluded that some of the new hires — a number of whom hailed from the traditional financial sector — were a poor fit for the crypto startup’s culture. The board recommended changes to the firm’s hiring process and drawing on a wider pool of talent.
Others have claimed that despite Blockchain’s veteran position within the industry, employees perceive there to be a lack of growth opportunities and harbor doubts about the company’s business strategy.
Back on track for profitability, company says
Founded in 2011, Blockchain.com offers a free cryptocurrency wallet with a reported 40 million registered users. 14 million of these wallets have recently been active, according to a July 2019 Fortune interview with CEO Peter Smith. Yet the report alleges that raising revenue sustainably from this user base has posed something of a conundrum for the firm.
Insiders claim that initiatives such as Blockchain’s fall 2018 Stellar (XLM) airdrop and the launch of a new hardware product were both viewed within the firm as failures. A Blockchain spokesperson has firmly denied these claims.
A Difficult Work Environment
Several former employees moreover alleged that as CEO, Smith had created a difficult work environment — a claim that was again categorically refuted by both the company’s spokesperson and board member Jeremy Liew.
Two of Blockchain’s recent moves — the launch of a crypto-crypto trading product dubbed Swap, as well as the launch of its own crypto exchange, The Pit — are both now expected to put the company back on track for profitability by 2020, the firm’s spokesperson has claimed.
Formerly known as Blockchain.info, Blockchain.com is backed by notable investors such as Roger Ver, Barry Silbert’s Digital Currency Group, Lakestar, and Google Ventures, among others.
Back in fall 2018, Cointelegraph reported that Blockchain had been ranked within the top ten most “sought-after” U.K. startup employers in LinkedIn’s listings.
On Oct. 1, it is also become known that BlackRock and Goldman Sachs veteran Howard Surloff has joined Blockchain.com as general counsel.