Connect with us

crypto wallet

Crypto wallet recovery without a private key or seed phrase

Published

on


Disclosure: The views and opinions expressed here belong solely to the author and do not represent the views and opinions of crypto.news’ editorial.

When forgetting their online banking credentials, individuals only need to visit their local bank branches with the necessary documents to identify themselves and recover access to their accounts. The same goes for traditional brokerages; they can reset their password online or contact support for assistance in the recovery process.

But while recovery is easy for custodial services like online banking and brokerages, things can get rather complex in crypto. On the one hand, self-custody significantly reduces counterparty risks and prevents a loss of funds in cases like the infamous Mt.Gox hack and the FTX bankruptcy. On the flip side, it also comes with more responsibilities for investors.

If crypto investors’ private keys or seed phrases go missing, there is no customer support team that can help them recover their self-custodial wallets. At this point, the funds are lost forever. In fact, a Chainalysis report estimates the loss of 3.7 million Bitcoin (BTC), worth over $220 billion at the price of $60,000, which accounts for 18.74% of the current circulating supply. At the same time, the personal research of Coinbase Director Conor Grogan reveals that more than 912,000 Ethereum (ETH) is lost forever (worth $2.41 billion). While it represents only 0.75% of the total circulating Ether supply, lost keys account for 27.5% of the cases.

The most common scenarios of losing access to crypto wallets

In which cases do veteran crypto users, web3 builders, and business owners lose access to their cryptocurrencies? Let’s look at some example scenarios to better understand the events that could lead to lost keys.

In Scenario One, a crypto user stores the private key on his desktop and backs up his seed phrase on the same device. After upgrading to a new device, he wipes his old computer’s hard drive clean, forgetting he stored his keys and seed phrases there. Consequently, his crypto holdings are gone forever.

Scenario Two presents another nightmarish case of human error. This time, an investor backs up his recovery phrase offline, printing it on a sheet of paper and storing it in his home along with other documents. However, after moving to a new apartment, the sheet with the seed phrase goes missing, and the investor fails to recover his wallet.

In Scenario Three, the founder of a crypto startup trusts the organization’s chief operating officer to manage the company’s finances. In addition to the business’ bank and exchange accounts, the COO controls all the private keys belonging to the project’s digital asset wallets. After a heated dispute with the founder and other team members, the chief operating officer resigns, refusing to provide access to the startup’s crypto wallets.

While the organization can regain control over its custodial accounts, it can’t interact with its digital asset holdings because the COO left with the private keys. In this case, a criminal investigation is the only reasonable course of action the startup can take to recover its assets. However, the case can take multiple years to conclude, and success is not guaranteed.

The above are only a few examples of how experienced crypto users can lose access to their digital asset wallets. Other cases of lost crypto may involve data corruption, hardware failures, malware, hacks, counterparty risks, mortality, and fraud.

Prevent locking users out of their crypto wallets

If crypto investors have neither access to their private keys nor their seed phrases, the only hope for them is wallet recovery solutions. However, the chances of success are tiny in most cases, and many fraudulent providers operate in this space, asking for upfront payments without providing any real service.

That is why a more efficient alternative to wallet recovery services is a decentralized trust. When creating a decentralized trust, crypto investors designate a backup wallet in case something happens with their main wallets. Suppose they accidentally misplace their private keys and seed phrases, losing access to the digital assets stored in their main wallets.

In that case, after several months without activity, the decentralized trust’s recovery mechanism automatically transfers users’ assets from their main to their backup wallets. As investors have access to their backup wallets, they can now interact with their cryptocurrency wealth, which would otherwise be considered lost.

There’s also no need to worry about a loss of funds due to the owner’s mortality. A decentralized trust can be configured to pass on inheritance to heirs based on the terms and predetermined conditions set by granters.

The next step in the evolution of crypto wallets

With multisig technology, decentralized trusts require multiple private keys to sign transactions. This eliminates single points of failure (like the case with the crypto startup’s COO in Scenario Three), reduces the chances of human error, and safeguards funds against unauthorized access.

Thus, a decentralized trust is the perfect choice for decentralized autonomous organizations, distributed Web3 teams, non-profits, and other crypto organizations to collectively manage their assets efficiently. Business owners and DAO members can even configure signature rights in a flexible way to secure the project’s assets and prevent funds’ misappropriation.

Available at a fraction of the costs of their traditional counterparts, decentralized trusts provide an effective solution for recovering access to lost wallets. As the next step in the evolution of crypto wallets, they have the potential to become popular solutions for storing cryptocurrencies. When more investors replace their old wallets with decentralized trusts, fewer digital assets will be lost to human errors, fraud, hacks, counterparty risks, and single points of failure. Eventually, this will help create a more secure and resilient crypto industry.

Ruslan Tugushev

Ruslan Tugushev

Ruslan Tugushev is a seasoned entrepreneur and investor with over a decade of experience in business management and web development. He is the founder and CEO of UBD Network, a professional multisig platform designed to enhance security and collaboration in the cryptocurrency space, as well as the DeTrust Wallet. Ruslan has a strong background in investment capital, having previously established a successful crowdfunding platform that helped blockchain startups secure funding. Furthermore, he was also the CEO of Tugush Capital Partners, a venture advisory firm that focused on assisting companies in achieving investment-ready status, with a special focus on the blockchain sectors. 



Source link

crypto wallet

Quant, Cardano prices spike; wallet activity hot: Santiment

Published

on


Cardano and Quant prices drifted upwards on Sunday, Sep. 8 as the recent crypto sell-off eased a bit.

Quant (QNT) token rose for the second consecutive day, reaching a high of $70, its highest swing since Aug. 26. It rose by over 23% from its lowest point last week but remains 54% below its highest point this year.

Cardano and Quant have higher wallet activity

Cardano (ADA) rose to $0.3390, much higher than Friday’s low of $0.30. Like other coins, it has dropped by almost 60% from the year-to-date high.

These tokens rose slightly as Bitcoin’s (BTC) sell-off moderated. After falling to $52,900 on Friday, Bitcoin bounced back to $54,500 on Sunday as some investors bought the dip. In most periods, altcoins tend to track Bitcoin’s movement.

Cardano and Quant prices also rose as data shows heightened address activity. According to Santiment, this indicates that some investors are accumulating, and that often leads to a rebound.

Another evidence is that Cardano’s open interest in the futures market is rising. Data by CoinGlass shows that its open interest rose to $177 million on Sunday, the third consecutive day of gains.

It was slightly higher than Friday’s $167 million. Cardano’s active addresses have also risen to over 31,000, according to DeFi Llama.

Similarly, Quant’s futures open interest went parabolic, reaching a high of $12.15 million, its highest level since June 7, and much higher than last week’s low of $6.50 million. 

Quant futures interest
Quant futures open interest | Source: CoinGlass

Futures open interest is an important metric in the financial market because it shows the volume of unfilled orders. 

Quant, Cardano: Big players in crypto

Cardano and Quant are some of the biggest players in the crypto industry. Cardano, with a market cap of $12 billion, is the 11th coin and its goal is to become the best alternative to Ethereum (ETH). 

However, over the years, the network has struggled to attract developers and users. As a result, it only has a handful of DeFi dApps and a total value locked of $191 million. This makes it smaller than other newer layer-1 and layer-2 networks like Arbitrum and Sui.

The developers recently launched the Chang hardfork, which its developers hope will lead to more activity.

Quant is a different network that helps companies build blockchain-enabled applications, especially in the payment services.

It is often seen as one of the top players in the fast-growing industry of Real World Asset tokenization, helped by its overledger technology.





Source link

Continue Reading

crypto custody

Centralizing SaaS wallets: Killing autonomy for the sake of convenience?

Published

on


Disclosure: The views and opinions expressed here belong solely to the author and do not represent the views and opinions of crypto.news’ editorial.

Traditional software-as-a-service-based multi-party computation custodians are often seen as the “convenient” solution in the crypto universe, managing a staggering portion of decentralized assets. But the reality is that the convenience quickly wears off, revealing a host of limitations, unexpected risks, and challenges as you dive deeper into the technological aspects of protecting digital currency. 

Regardless of your decentralization versus centralization stance, it is essential to recognize that the appearance of private key control can be skewered by a lack of control in policy governance and infrastructure you do not run yourself.

The rise and risks of SaaS-based MPC wallets 

The emergence of SaaS-based MPC wallets has significantly impacted the crypto landscape, allowing businesses to manage digital assets with convenience and perceived security. These wallets are typically provided by tech companies that are currently positioning themselves more and more as non-custodial service providers. However, despite this label, these solutions still require users to trust a centralized party to coordinate signing and key generation securely, placing them high on the custody spectrum in terms of control over assets. 

This reliance on a centralized service provider creates a situation where control and security are not entirely in the hands of the institution using the service. While these tech providers do not operate as traditional third-party custodians, such as BitGo or Anchorage—highly regulated and offer fully managed custodial services—they still introduce a central point of control and potential vulnerability. As used by both SaaS-based providers and traditional custodians, MPC technology involves splitting cryptographic keys required for transactions into multiple parts distributed among various parties to enhance security. 

However, in the case of SaaS-based solutions, the centralization of these services within a few dominant players introduces new risks. One of them is that these providers become attractive targets for hackers due to their significant control over many clients’ assets, creating a vulnerability similar to that of centralized exchanges. Two, the concentration of control in these SaaS-based models not only increases security risks but indirectly limits the autonomy of crypto businesses.

By relying on an external provider to manage critical aspects of digital asset security, institutions may find themselves constrained in managing policies, procedures, and the overall governance of their assets. This centralization stands in contrast to the decentralized ethos of the crypto industry, where individual sovereignty over digital assets is paramount.

The challenges of dependency and trust in MPC custodians 

While MPC wallets often claim to be non-custodial because the institution holds part of the key, the reality is far more complex: the heavy dependency on third-party vendors for day-to-day operations, security, and service availability introduces significant risks. Despite the customer institution holding a key share, all other components affecting the use or potential misuse of key shares remain under the vendor’s control. This setup creates vulnerabilities around key signing integrity but, even more importantly, introduces friction into the customer experience, an operational risk that should be accounted for.  For instance, any policy change can take up to a few weeks if it is not prioritized by the vendor, posing significant delays and operational inefficiencies​.

Analyze this potential impact further. MPC wallets can have longer transaction times, and their reliance on vendors for routine account changes and maintenance can be problematic. If a team member leaves, revoking their access is done at the vendor’s tempo. It can take considerable time, resulting in a period where the security of assets may be compromised. Additionally, service downtimes for maintenance during business hours can disrupt operations. Plus, in disaster scenarios, asset recovery can take up to 48 hours—a period that is far too long for any organization dealing with high-value transactions. These operational dependencies can be highly inconvenient. Ultimately, they pose security risks that contradict what decentralization stands for—namely, running your own wallet infrastructure.

For regulated financial institutions or firms with stringent security requirements, these dependencies are deal-breakers. That’s because the operational risks and costs associated with relying on third-party MPC wallet solutions are often unacceptable to internal risk teams. These teams are unable to get comfortable with the inherent uncertainties and potential for delayed response times that these products entail. Consequently, many MPC wallet solutions fail to pass the rigorous scrutiny of risk assessments, preventing them from being adopted by institutions that require the highest levels of security and operational control​.

A new paradigm for crypto custody

If the incumbent SaaS solutions represent the ‘trust us’ model, the ideal solution should transition towards a ‘trust but verify’ approach and, ultimately, a ‘never trust, always verify’ model. This shift empowers customers to partially or fully host the software, granting them control and ownership of critical IT infrastructure. By eliminating the opaque operations inherent in black box SaaS solutions, institutions not only mitigate operational risks hidden in the friction of operating in a third party’s sandbox but also enable more agile and flexible infrastructure management.

This enhanced control supports better risk management and allows institutions to adapt quickly to market demands, ultimately driving revenue growth and positively impacting the bottom line.

A practical solution integrates critical management and policy controls into a comprehensive platform, allowing institutions to manage their digital assets within a zero-trust security framework. This architecture continuously validates every interaction, eliminating implicit trust and enhancing security. By adopting a service-oriented architecture, institutions can tailor the system to their unique requirements, ensuring scalability, high performance, and robust security. 

Current market offerings, which rely entirely on SaaS-based MPC wallets, place undue trust in vendors who control all components, including cryptographic processes, keys, policies, and transaction data. By moving towards solutions that enable institutions to own and control critical parts of their digital asset infrastructure, the industry can mitigate risks and reduce vulnerabilities while operating more closely to the principles of decentralization. Such a transformation is essential for fostering trust and security in the rapidly evolving crypto landscape​.

Now is the time for institutions to take control of their policies. By adopting models that provide partial or complete control over key management and policy enforcement, institutions can better align with the correct treatment and oversight of service providers or outsourcing arrangements. This paradigm shift is essential for the industry’s future, and it’s something that is poised to safeguard crypto’s core values while paving the way for continued innovation and trust.

Haden Patrick

Haden Patrick

Haden Patrick is the director of business operations of Cordial Systems, a provider of institutional-grade self-custody software using a zero-trust security model.  Haden has executive experience in team leadership, engineering, and education originating from his 24-year career as a Naval Officer. After co-founding SoloKeys, the first open-source security key company, he managed projects connecting web3 to traditional finance at a cryptocurrency trading firm before joining Cordial Systems.



Source link

Continue Reading
Advertisement [ethereumads]

Trending

    wpChatIcon