SoK: Cryptocurrency Wallets -- A Security Review and Classification based on Authentication Factors

• URL: http://arxiv.org/abs/2402.17659v1
• Date: Tue, 27 Feb 2024 16:26:05 GMT
• Title: SoK: Cryptocurrency Wallets -- A Security Review and Classification based on Authentication Factors
• Abstract summary: We review existing cryptocurrency wallet solutions with regard to authentication methods and factors from the user's point of view. We define notions for $k-factor$ authentication against the blockchain and $k-factor$ authentication against the authentication factors. We extend our classification to accommodate the threshold signatures and signing transactions by centralized parties.
• Score: 1.7034813545878589
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: In this work, we review existing cryptocurrency wallet solutions with regard to authentication methods and factors from the user's point of view. In particular, we distinguish between authentication factors that are verified against the blockchain and the ones verified locally (or against a centralized party). With this in mind, we define notions for $k-factor$ authentication against the blockchain and $k-factor$ authentication against the authentication factors. Based on these notions, we propose a classification of authentication schemes. We extend our classification to accommodate the threshold signatures and signing transactions by centralized parties (such as exchanges or co-signing services). Finally, we apply our classification to existing wallet solutions, which we compare based on various security and key-management features.

Related papers

• Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions [47.65093774088672]
  This survey and tutorial article reviews the literature over the period 1980--2026 on the evolution from classical multi-agent systems to open agent networks.<n>We first review this evolution and show how the trust boundary expands from individual execution to cross-agent, cross-platform, and cross-organizational interaction.<n>We develop a five-dimensional taxonomy covering entity and capability trust, authorization and delegation trust, information and trust, coordination and group-robustness trust, and accountability and settlement trust.
  arXiv  Detail & Related papers  (2026-08-05T09:32:35Z)
• A forgery attack on the Block.co blockchain-based digital credential certification system [5.329759624351636]
  We show that Block.co has a vulnerability that allows the production of forged certificates that are recognized as valid by the system.<n>Our attack is likely to be extendable to other systems adopting the same approach.
  arXiv  Detail & Related papers  (2026-06-30T10:42:26Z)
• GoAT-X: A Graph of Auditing Thoughts for Securing Token Transactions in Cross-Chain Contracts [52.51342355102833]
  Cross-chain bridges, the critical infrastructure of the multi-chain ecosystem, have become a primary target for attackers.<n>Existing defenses, such as bytecode-level static analysis, are ill-equipped to handle the semantic complexity of cross-chain interactions.<n>We propose GoAT-X, a framework that shifts automated cross-chain smart contracts auditing from pattern matching toward systematic first-principles verification.
  arXiv  Detail & Related papers  (2026-04-27T11:34:21Z)
• Binding Agent ID: Unleashing the Power of AI Agents with accountability and credibility [46.323590135279126]
  BAID (Binding Agent ID) is a comprehensive identity infrastructure establishing verifiable user-code binding.<n>We implement and evaluate a complete prototype system, demonstrating the practical feasibility of blockchain-based identity management and zkVM-based authentication protocol.
  arXiv  Detail & Related papers  (2025-12-19T13:01:54Z)
• Towards Secure Decentralized Applications and Consensus Protocols in Blockchains (on Selfish Mining, Undercutting Attacks, DAG-Based Blockchains, E-Voting, Cryptocurrency Wallets, Secure-Logging, and CBDC) [0.5584060970507507]
  We study consensus security in single-chain Proof-of-Work blockchains, including resistance to selfish mining, undercutting, and greedy transaction selection.<n>We advance e-voting with a practical boardroom voting protocol, extend it to a scalable version for millions of participants while preserving security and privacy.<n>Finally, we improve secure logging using blockchains and trusted computing through a centralized ledger that guarantees non-equivocation, integrity, and censorship evidence.
  arXiv  Detail & Related papers  (2025-12-15T11:26:43Z)
• Blockchain Signatures to Ensure Information Integrity and Non-Repudiation in the Digital Era: A comprehensive study [0.8021197489470758]
  A key requirement is non-repudiation, which prevents denial of transaction authorship and supports integrity of recorded data.<n>This work surveys digital signature schemes used in blockchain platforms and analyzes how they deliver non-repudiation.
  arXiv  Detail & Related papers  (2025-10-26T07:39:55Z)
• VeilAudit: Breaking the Deadlock Between Privacy and Accountability Across Blockchains [2.676349883103404]
  Cross chain interoperability in blockchain systems exposes a fundamental tension between user privacy and regulatory accountability.<n>We present VeilAudit, a cross chain auditing framework that introduces Auditor Only Linkability.<n>VeilAudit achieves this with a user generated Linkable Audit Tag that embeds a zero knowledge proof to attest to its validity without exposing the user master wallet address.
  arXiv  Detail & Related papers  (2025-10-14T05:16:23Z)
• Wrangling Entropy: Next-Generation Multi-Factor Key Derivation, Credential Hashing, and Credential Generation Functions [47.715495058757824]
  We present a novel cryptanalytic technique designed to reveal pernicious leaks of entropy across multiple invocations of a cryptographic key derivation or hash function.<n>We show that it can be used to correctly identify each of the known vulnerabilities in the original MFKDF construction.<n>We propose a new construction for MFKDF2,'' a next-generation multi-factor key derivation function that can be proven to be end-to-end secure.
  arXiv  Detail & Related papers  (2025-09-07T02:01:53Z)
• Balancing Confidentiality and Transparency for Blockchain-based Process-Aware Information Systems [46.404531555921906]
  We propose an architecture for blockchain-based PAISs aimed at preserving both confidentiality and transparency. Smart contracts enact, enforce and store public interactions, while attribute-based encryption techniques are adopted to specify access grants to confidential information.
  arXiv  Detail & Related papers  (2024-12-07T20:18:36Z)
• Quantum digital signature based on single-qubit without a trusted third-party [45.41082277680607]
  We propose a novel quantum digital signature protocol without a trusted third-party. We prove that the protocol has information-theoretical unforgeability.
  arXiv  Detail & Related papers  (2024-10-17T09:49:29Z)
• BlockFound: Customized blockchain foundation model for anomaly detection [47.04595143348698]
  BlockFound is a customized foundation model for anomaly blockchain transaction detection. We introduce a series of customized designs to model the unique data structure of blockchain transactions. BlockFound is the only method that successfully detects anomalous transactions on Solana with high accuracy.
  arXiv  Detail & Related papers  (2024-10-05T05:11:34Z)
• BioZero: An Efficient and Privacy-Preserving Decentralized Biometric Authentication Protocol on Open Blockchain [20.258052017948902]
  Decentralized authentication approaches leveraging blockchain technology have emerged as a promising solution. We propose BioZero, an efficient and privacy-preserving decentralized biometric authentication protocol. Our work contributes to the advancement of decentralized identity authentication using biometrics.
  arXiv  Detail & Related papers  (2024-09-26T03:37:35Z)
• Decentralized Biometric Authentication based on Fuzzy Commitments and Blockchain [6.540771405203321]
  We propose a blockchain-based biometric authentication protocol that enables decentralization and resilience while protecting the privacy, personal data, and, in particular, biometric features of users.
  arXiv  Detail & Related papers  (2024-09-17T15:58:06Z)
• SoK: Bridging Trust into the Blockchain. A Systematic Review on On-Chain Identity [0.0]
  This systematic review explores the current status, identifies research gaps, and outlines future research directions for establishing trusted and privacy-compliant identities on the blockchain. A systematic search term was applied across various scientific databases, collecting 2232 potentially relevant research papers. The results of the selected studies have provided insightful findings on the mechanisms of on-chain identities.
  arXiv  Detail & Related papers  (2024-07-24T13:42:46Z)
• The Latency Price of Threshold Cryptosystem in Blockchains [52.359230560289745]
  We study the interplay between threshold cryptography and a class of blockchains that use Byzantine-fault tolerant (BFT) consensus protocols. Existing approaches for threshold cryptosystems introduce a latency overhead of at least one message delay for running the threshold cryptographic protocol. We propose a mechanism to eliminate this overhead for blockchain-native threshold cryptosystems with tight thresholds.
  arXiv  Detail & Related papers  (2024-07-16T20:53:04Z)
• Towards Credential-based Device Registration in DApps for DePINs with ZKPs [46.08150780379237]
  We propose a credential-based device registration (CDR) mechanism that verifies device credentials on the blockchain. We present a general system model, and technically evaluate CDR using zkSNARKs with Groth16 and Marlin.
  arXiv  Detail & Related papers  (2024-06-27T09:50:10Z)
• Blockchains for Internet of Things: Fundamentals, Applications, and Challenges [38.29453164670072]
  Not every blockchain system is suitable for specific IoT applications. Public blockchains are not suitable for storing sensitive data. We explore the blockchain's application in three pivotal IoT areas: edge AI, communications, and healthcare.
  arXiv  Detail & Related papers  (2024-05-08T04:25:57Z)
• What Blocks My Blockchain's Throughput? Developing a Generalizable Approach for Identifying Bottlenecks in Permissioned Blockchains [0.3495246564946556]
  We develop a more unified and graphical approach for identifying bottlenecks in permissioned blockchains. We conduct in-depth case studies on Hyperledger Fabric and Quorum, two widely used permissioned blockchains.
  arXiv  Detail & Related papers  (2024-04-02T13:00:50Z)
• On Cryptographic Mechanisms for the Selective Disclosure of Verifiable Credentials [39.4080639822574]
  Verifiable credentials are a digital analogue of physical credentials. They can be presented to verifiers to reveal attributes or even predicates about the attributes included in the credential. One way to preserve privacy during presentation consists in selectively disclosing the attributes in a credential.
  arXiv  Detail & Related papers  (2024-01-16T08:22:28Z)
• Combining Decentralized IDentifiers with Proof of Membership to Enable Trust in IoT Networks [44.99833362998488]
  The paper proposes and discusses an alternative (mutual) authentication process for IoT nodes under the same administration domain. The main idea is to combine the Decentralized IDentifier (DID)-based verification of private key ownership with the verification of a proof that the DID belongs to an evolving trusted set.
  arXiv  Detail & Related papers  (2023-10-12T09:33:50Z)
• Blockchain-based decentralized voting system security Perspective: Safe and secure for digital voting system [0.0]
  This paper approach any unique identification the Card number or an OTP will be generated then user can utilise the voting system to cast his/her vote. If any transaction carried out on a block chain-based system would be settled in a matter of seconds while still being safe, verifiable, and transparent.
  arXiv  Detail & Related papers  (2023-03-11T04:52:46Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.