Alex Melville Securing and Running A Multisig...

27
Ethereum at BitGo Securing and Running A Multisig Ethereum Wallet Alex Melville

Transcript of Alex Melville Securing and Running A Multisig...

Page 1: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

Ethereum at BitGoSecuring and Running A Multisig Ethereum Wallet

Alex Melville

Page 2: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

Alex Melville (Technical Lead on the Coins Team)

2

github.com/Melvillian

#
Page 3: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

Today’s Plan

3

Questions!

#
Page 4: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

BitGo: 2-of-3 Multi-Signature Wallets

No single point of failure!

BITGO KEYCUSTOMER KEY EMERGENCY (BACKUP) KEY

4

#
Page 5: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

Supported Coins and Tokens

ETH

ETHEREUM

BTC

BITCOIN

LTC

LITECOIN

BCH

BITCOIN CASH

BTG

BITCOIN GOLD ZCASH

ZEC XRP

XRP

XLM

STELLARDASH

DASH

Augur (REP)

Basic Attention Token (BAT)

Bread (BRD)

Civic (CVC)

Golem (GNT)

Kyber Network (KNC)

Numeraire (NMR)

OmiseGo (OMG)

0x (ZRX)

Maker (MKR)

Worldwide Asset eXchange (WAX)

Zilliqa (ZIL)

iShook (SHK)

Rialto (XRL)

Kin (KIN)

Salt (SALT)Change (CAG)

Power Ledger (POWR)

AppCoins (APPC)

Serenity (SRNT)PlusCoin (PLC)

Linker Coin (LNC)

Snovio (SNOV)

Status Network Token (SNT)

Decision Token (HST) Propy (PRO)

AirSwap (AST)

WaltonChain (WTC)

Storj (STORJ)

SwissBorg (CHSB)

Aragon (ANT)

Aelf (ELF)

Populous (PPT)

OPTin Token (OPT)AION (AION)

Celsius (CEL)

Sentinel Protocol (UPP)

ANA (ANA)

WeTrust (TRST)

Indorse (IND)

Dent (DENT)

Polymath (POLY)

TrueUSD (TUSD)

Bancor (BNT)

Colu Local Network (CLN)

DAOstack (GEN)

Storm (STORM)

Gnosis (GNO)

Pundi X (NPXS)

Gemini Dollar (GUSD)

Paxos (PAX)

Rebglo (REB)

CoinLion (LION)

Hold (HOLD)

Cryptopay (CPAY)

...with more being added all the time.

#
Page 6: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

Ethereum Basics (Addresses vs. Contracts)

6

Addresses:

● Basically like Bitcoin Addresses● Single Signature● Initiate Contract Creation/Execution● Pay for Fees! (EIP 101)

Contracts

● Turing-Complete Execution● Extremely Tricky to Reason About

TXCreation

External (Fee) Address

10

#
Page 7: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

Ethereum Basics (Two Full Node Implementations)

7

Parity Geth

Rust Golang

#
Page 8: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

8

The Code:

● Multisignature Wallet● 12 functions

○ Sending○ Safe Mode○ Helper Functions

● Events○ Transacted○ Deposited

● web3.js (we don’t use it!)

Writing and Deploying A Multisig Wallet Smart Contract

#
Page 9: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

Writing and Deploying A Multisig Wallet Smart Contract

9

#
Page 10: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

10

The Deploy:

● Similar Care as Hardware● Audits

○ OpenZeppelin○ Coinspect○ ABDK Consulting

● Fee Address○ It Costs to Deploy Wallet and Receive Addresses

Writing and Deploying A Multisig Wallet Smart Contract

25

#
Page 11: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

11

The Ethereum Multisig Problem: Fungibility and Usability

TX

HitBTC does not see the

transaction!

#
Page 12: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

12

The Ethereum Multisig Problem

Multiparty ECDSA Signatures to the Rescue!

45

#
Page 13: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

13

Transaction Nonce Holes: Full Node

1 2 3 4

TX #11 ETH

TX #23 ETH

TX #35 ETH

TX #47 ETH

= Confirmed

#
Page 14: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

14

Transaction Nonce Holes: Full Node

1 2 3 4

= DB Query

5

TX #11 ETH

TX #23 ETH

TX #35 ETH

TX #47 ETH

TX #59 ETH

= Unconfirmed

= Confirmed

#
Page 15: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

15

Transaction Nonce Holes: Full Node

1 2 3 4

5

TX #11 ETH

TX #23 ETH

TX #35 ETH

TX #47 ETH

TX #59 ETH

TX #611 ETH

= DB Query

= Unconfirmed

= Confirmed

#
Page 16: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

16

Transaction Nonce Holes: Full Node

1 2 3 4

5

TX #11 ETH

TX #23 ETH

TX #35 ETH

TX #47 ETH

TX #59 ETH

TX #611 ETH

= DB Query

= Unconfirmed

= Confirmed

#
Page 17: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

17

Transaction Nonce Holes: Database

1 2 3 4 5

DB

5

= DB Query

= Unconfirmed

= Confirmed

#
Page 18: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

18

Transaction Nonce Holes: Database

1 2 3 4 5

DB

5

= DB Query

= Unconfirmed

= Confirmed

#
Page 19: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

19

Transaction Nonce Holes: Database

1 2 3 4 5 6

DB

6

= DB Query

= Unconfirmed

= Confirmed

#
Page 20: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

20

Transaction Nonce Holes: Database

1 2 3 4 5 6

DB

6

= DB Query

= Unconfirmed

= Confirmed

#
Page 21: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

21

Transaction Nonce Holes: Database

1 2 3 4 5 6

DB

8

7 8

= DB Query

= Unconfirmed

= Confirmed

#
Page 22: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

22

Transaction Nonce Holes: Database

1 2 3 4 5

= DB Query

DB

8

7 8

= Nonce Confirmed

#
Page 23: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

23

Transaction Nonce Holes: Database

1 2 3 4 5

DB

8

7 8

TX #91 ETH

= DB Query

= Unconfirmed

= Confirmed

#
Page 24: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

24

Transaction Nonce Holes: Database

1 2 3 4 5 6

DB

8

7 8

= DB Query

= Unconfirmed

= Confirmed

#
Page 25: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

25

Learning to Love/Hate Parity

60

#
Page 26: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

26

Right At Your Fingertips

#
Page 27: Alex Melville Securing and Running A Multisig …cs251crypto.stanford.edu/18au-cs251/lectures/lecture12.pdfEthereum Basics (Addresses vs. Contracts) 6 Addresses: Basically like Bitcoin

27

Thank You!

#

Enter the Hydra: Toward Principled Bug Bounties and ... · Some (in)famous smart contracts •The DAO (June 2016) •Reentrancy bug ⇒$50+ million stolen •Parity multisig hack

Enter the Hydra: Toward Principled Bug Bounties and ... · Some (in)famous smart contracts •The DAO (June 2016) •Reentrancy bug ⇒$50+ million stolen •Parity multisig hack

Papal Addresses

Papal Addresses

Opening Addresses

Opening Addresses

IP Addressing · • The difference between a network mask and a subnet mask will be ... Public addresses • Most IP addresses are public addresses. Public addresses are registered

IP Addressing · • The difference between a network mask and a subnet mask will be ... Public addresses • Most IP addresses are public addresses. Public addresses are registered

College Addresses

College Addresses

Multicast Addresses

Multicast Addresses

C++ Constructor Insanity › courses › cse333 › 18au › lecture… · L12: C++ Constructor Insanity CSE333, Autumn 2018 Synthesized Default Constructor vIf you define any constructors,

C++ Constructor Insanity › courses › cse333 › 18au › lecture… · L12: C++ Constructor Insanity CSE333, Autumn 2018 Synthesized Default Constructor vIf you define any constructors,

Inaugural Addresses

Inaugural Addresses

Internet Addresses

Internet Addresses

Introduction sidechains and hy… · Single Custodian Multisig ... token exchange method created by Sergio Demian Lerner (P2PTradeX) [2]. Drivechain is a newer ... The easiest case

Introduction sidechains and hy… · Single Custodian Multisig ... token exchange method created by Sergio Demian Lerner (P2PTradeX) [2]. Drivechain is a newer ... The easiest case

Hardening Lightning - Stanford University · Recent work on multi-party channels: Scalable Funding of Bitcoin Micropayment Channel Networks Multi-party channels via hierarchy of multisig

Hardening Lightning - Stanford University · Recent work on multi-party channels: Scalable Funding of Bitcoin Micropayment Channel Networks Multi-party channels via hierarchy of multisig

CSE 442 - Data Visualization Animationcourses.cs.washington.edu/courses/cse442/18au/lectures/CSE442-Animation.pdf · Basic idea is to warp time: as duration goes from start (0%) to

CSE 442 - Data Visualization Animationcourses.cs.washington.edu/courses/cse442/18au/lectures/CSE442-Animation.pdf · Basic idea is to warp time: as duration goes from start (0%) to

Addresses, Protocols, and Ports · Addresses,Protocols,andPorts ThischapterprovidesaquickreferenceforIPaddresses,protocols,andapplications. …

Addresses, Protocols, and Ports · Addresses,Protocols,andPorts ThischapterprovidesaquickreferenceforIPaddresses,protocols,andapplications. …

Mac Addresses

Mac Addresses

THE LIFE OF POWER - benchpresschampion.com · US Addresses: $29/1 year US Addresses: $49/2 years International Addresses: $65/1 year International Addresses: $115/2 years Address

THE LIFE OF POWER - benchpresschampion.com · US Addresses: $29/1 year US Addresses: $49/2 years International Addresses: $65/1 year International Addresses: $115/2 years Address

3e. Tutorial: how to secure your bitcoins with a MultiSig Wallet · a MultiSig Wallet Nicolas T. Courtois-University College London , UK. Crypto Currencies ... paycoin_multisig_tutorial_3e

3e. Tutorial: how to secure your bitcoins with a MultiSig Wallet · a MultiSig Wallet Nicolas T. Courtois-University College London , UK. Crypto Currencies ... paycoin_multisig_tutorial_3e

Premium Addresses - Custom Email Addresses Presentation

Premium Addresses - Custom Email Addresses Presentation

Virtual and Physical Addresses Physical addresses are provided …cs350/W11/notes/vm.pdf · 2010-12-21 · Virtual Memory 1 Virtual and Physical Addresses • Physical addresses are

Virtual and Physical Addresses Physical addresses are provided …cs350/W11/notes/vm.pdf · 2010-12-21 · Virtual Memory 1 Virtual and Physical Addresses • Physical addresses are

V.E.L.A · VELAS Blockchain Use Cases > VELAS is the backbone on which a whole ecosystemwill run including exchange, multisig wallet, and merchant platform. > Companies such as Mind

V.E.L.A · VELAS Blockchain Use Cases > VELAS is the backbone on which a whole ecosystemwill run including exchange, multisig wallet, and merchant platform. > Companies such as Mind

IP Addresses

IP Addresses