# Wallet Security Related Articles

HTX News Center provides the latest articles and in-depth analysis on "Wallet Security", covering market trends, project updates, tech developments, and regulatory policies in the crypto industry.

AmericanFortress proposed a scheme to protect crypto wallets from quantum threats

AmericanFortress has published a preprint detailing ZKPoSP, a cryptographic scheme designed to protect hierarchically deterministic (HD) cryptocurrency wallets from potential quantum attacks without requiring users to change their addresses. The proposed scheme replaces classical digital signatures with non-interactive zero-knowledge (NIZK) proofs, aiming to maintain compatibility with existing address formats. The company also introduced the QBIP32 scheme, intended to generate a signing scalar, a separate quantum-resistant proof, and a chain code in a single function call. According to the authors, QBIP32 can be applied to various elliptic curves of prime order, including secp256k1 and Ed25519. The post-quantum security of the scheme is described as "conjectured," relying on the quantum resistance of the underlying hash functions and NIZK proofs. However, for the scheme to function in a given blockchain network (like Bitcoin, Ethereum, or Solana), nodes would need to support verification of these new proofs instead of standard signatures—a capability currently not implemented. An implementation in Rust using RISC Zero reportedly takes 12–13 seconds to generate a proof and 9–10 milliseconds to verify it. The publication follows other industry efforts to address quantum threats, including reports from Galaxy on vulnerable assets, new hardware wallets like the PQ1, and consortiums like the Bitcoin Security Consortium pledging funding for post-quantum cryptography research. This new work specifically focuses on HD wallets and positions ZKPoSP/QBIP32 as a general mechanism for multiple curves and networks.

cryptonews.ru1h ago

AmericanFortress proposed a scheme to protect crypto wallets from quantum threats

cryptonews.ru1h ago

Digital Nomad Remote Job Hunting Fraud Prevention Guide: Your Wallet Could Be Emptied Even Before the Interview Starts

Digital Nomad Remote Job Scam Prevention Guide: How to Avoid Getting Scammed Before the Interview Even Starts Remote job searching offers opportunities across cities and countries, but the lack of face-to-face interaction, use of stablecoins for salary, and reliance on private messages/emails for hiring make it harder to verify job legitimacy. Scammers are more prevalent online. This guide, based on real cases from the TT3Labs community, categorizes scams by what they target—your device/wallet, your money, or your identity—and offers practical avoidance strategies. Key Scam Types: 1. Targeting Device Control & Wallets: The most common. Red flags include requests to download unfamiliar meeting software, install "audio plugins," run commands, share screens, or connect your crypto wallet under the pretext of an interview or coding test. These actions can install malware to steal assets in seconds. 2. Targeting Your Money: Includes "pre-employment tests" that are actually刷单 schemes (requiring you to垫钱 with promises of returns), paid job placement guarantees, and training/onboarding loans. Legitimate companies do not charge candidates for hiring. 3. Targeting Your Identity: Requests for ID, passport, bank details, or手持自拍照 during the interview stage. Legitimate background checks typically occur after a formal offer. 4. Post-Hire Risks: Some real companies may exploit remote/cross-border arrangements to delay or withhold pay, especially the final month's salary. Common Red Flags: - Offers that seem "too good to be true" (high pay for low门槛, overly easy interviews). - Communication solely via private chat (e.g., Telegram) with refusal to use mainstream tools. - Rushing the process (sending meeting links at the last minute). - Offering upfront money before you start. - Inconsistent communication (e.g., awkward translation, mismatched accents). Self-Protection Strategies: - Verify through trusted channels: Use official job platforms, company websites, and official app downloads. - Research the HR contact's online presence. - Draw a clear line: Never install unknown software, run commands, pay fees, share wallet keys/私钥, or provide sensitive documents before formal入职. - Practice device isolation: Use a separate device,虚拟机, or sandbox for testing code or downloading suspicious files. If You've Been Compromised: 1. Immediately disconnect from the internet and shut down the infected device. 2. Use a clean device to move remaining assets to a new wallet address. 3. Change all important account passwords and enable two-factor authentication. 4. Document all evidence (chat logs, transaction records) for reporting and community awareness. 5. File a police report, understanding that recovery for跨境 scams can be difficult. Staying vigilant and following these guidelines can help digital nomads navigate remote job searches more safely.

marsbit06/10 09:21

Digital Nomad Remote Job Hunting Fraud Prevention Guide: Your Wallet Could Be Emptied Even Before the Interview Starts

marsbit06/10 09:21

Spring Festival Asset Security Guide: How to Protect Your Tokens While Relaxing with Family and Friends?

Ahead of the Lunar New Year, this guide outlines key strategies to protect your digital assets during a period of increased activity and potential distraction. Key risks highlighted include sophisticated AI-powered scams, such as voice and deepfake video calls that can perfectly mimic acquaintances to request urgent token transfers. The article stresses that traditional verification methods are no longer foolproof and recommends establishing offline verification protocols with trusted contacts. It also warns against clicking any links, even those shared by friends, and advises always using official channels for transactions. The second major risk involves accumulated wallet authorizations (approvals) from past DeFi interactions. These can become hidden vulnerabilities if old, unused permissions are exploited. The guide recommends a pre-holiday "security check" to review and revoke unnecessary approvals, especially unlimited ones, using tools within wallets like imToken or external sites like revoke.cash. The core principle is to adhere to the minimum necessary permissions. Finally, the article cautions against security lapses during travel and social gatherings. This includes never storing seed phrases digitally, avoiding public discussion of holdings, and only downloading wallets from official sources. For transactions, it is critical to double-check the full address (not just the first and last characters), conduct test transfers to new addresses, and use address whitelisting to prevent falling victim to common phishing attacks. In conclusion, while Web3 cannot be risk-free, these proactive measures can create a manageable security environment, allowing users to enjoy the holiday with greater peace of mind.

marsbit02/17 06:39

Spring Festival Asset Security Guide: How to Protect Your Tokens While Relaxing with Family and Friends?

marsbit02/17 06:39

活动图片