Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Questions about the security of the Augur platform

3
votes
1answer
24 views

Former functionality of Augur Escape Hatch

What functionality did the "Augur Escape Hatch" contract have between the launch of Augur and the contracts transfer to a burn address this week?
2
votes
0answers
15 views

Checksum verification for Augur App on Windows

What steps can a Windows users take to obtain a GPG signed message with the checksums of the Augur App? How can this data be used to verify a match with the current Windows .exe file available for ...
6
votes
2answers
59 views

Checksum verification for Linux users of Augur App

Where are the checksums as verified by GPG signed message for the current Augur App binaries? Please include instructions to verify the above GPG signature and checksums on Linux
4
votes
1answer
47 views

Locating and verifying checksums for Augur App on MacOS

Where can I find the checksums (confirmed with a GPG signed message) of the binaries for the most recent Augur App located on GitHub? Please also include instructions to verify the above GPG ...
2
votes
0answers
22 views

Does any cryptocurrency have a system in place that helps supporters recover lost bitcoin from scams [closed]

I know that crypto is a decentralized form of investment or theory, however I believe due to real life scenario and from real world experience any honorable project would try and help a supporter ...
2
votes
0answers
27 views

Different between bounty programs

What is the difference between the different Augur bounty programs such as GetGitcoin and the bounties listed in the Augur bounty GitHub repository? What reason is there for the Forecast Foundation ...
2
votes
0answers
28 views

OWASP risk rating model and Bug Bounty program

What is the OWASP risk rating model? What two factors does it weigh in order to assess bug severity? Who determines the eligibility and OWASP derived score for bug bounty submissions?
3
votes
1answer
76 views

Can 3rd party applications potentially create security/integrity issues for Augur?

You do your best to make the protocol safe and robust. Can security be compromised should other developers start building numerous apps on the top of the original code? Or this will not be possible? ...
3
votes
1answer
288 views

How do reporters actually vote?

Does the voting use a partial lock commit reveal method? I can't seem to find that in the docs. Do reporters obfuscate their vote during the dispute round? How do you prevent collusion or just ...
4
votes
2answers
418 views

Security implications of Augur market cap exceeding that of Ethereum

Assume at some point in the future Augur marketcap greatly exceeds that of Ethereum. In that situation would the current Ethereum PoW or future PoS security model retain sufficient security ...
1
vote
1answer
311 views

Could an EtherDelta type hack happen to Augur?

What measures are in place to prevent this from happening once launched?
4
votes
1answer
593 views

How will Augur handle malicious markets?

The aspect of Augur that is most striking to me is that the system seems capable of establishing decentralized, reliable facts-as-a-service. Augur could provide smart contracts and DAOs with a ...
2
votes
1answer
66 views

External Solidity auditor selection

Which external auditors were chosen to conduct Augur Solidity contracts & security audits beginning next week? Was it the same firm that conducted the Serpent audits or someone else? Next week ...
15
votes
3answers
2k views

What makes REP tokens a critical component of Augur?

Many ERC20 "utility tokens" have been criticized for not being technically required for the DApp to function properly because ETH could easily be used instead. What exactly makes Augur one of those ...
4
votes
1answer
64 views

Augur client authentication method comparison

The Augur client will support AirBitz, MetaMask, uPort, Keystore and Ledger authentication methods. What are the security related differences between them?
5
votes
2answers
187 views

Augur and IPFS utilization

When I visit bleeding edge testnet site at https://augur-dev.firebaseapp.com I am now forwarded to https://dev.augur.net/ which is also the URL mentioned in the most recent weekly development update ...
8
votes
1answer
685 views

Where does the 5x multiplier on open interest come from?

Augur's reporting fee system is designed to put upward price pressure on REP such that the REP market cap remains at least 5x larger than Augur outstanding interest. What is the reasoning between 5x ...
3
votes
1answer
208 views

REP Hack of Febushi Capital Co-Founder

What is known about the hack of REP owned by early Augur investor and Febushi Capital Co-Founder Bo Shen? Specifically how did it happen and what security lessons that we can learn from it to reduce ...
5
votes
1answer
54 views

Random Assignment of markets to report on

I recently read that the assignment of markets for REP owners are asked to report on is no longer random (but that the UI encourages some variety in market categories while reporting). If that is ...
5
votes
1answer
31 views

Purpose of destructible contract

What is the use case for Augur requiring the use of a destructible contract? base contract that can be destroyed by owner. All funds in contract including listed tokens will be sent to the owner.
5
votes
1answer
31 views

Oyente and Securify

What are Oyente and Securify and how will they supplement the intended purpose of the upcoming solidity security audits?
5
votes
1answer
170 views

Legal limitations of Augur - insider trading, dark markets [closed]

I hold a lot of REP, which I bought because I believe in the platform. I worry about A) black markets e.g. betting on someone dying and then paying for a whack B) match-fixing, C) insider trading ...
10
votes
1answer
73 views

How Augur can deal with Sybil Attack?

Given the definition of Sybil Attack from FAQ page: Attacks on a system, like a reputation or feedback system, using the creation of multiple false identities created to undermine the system or ...
5
votes
2answers
42 views

Technical limitations of a possible Augur fork running on Ethereum Classic

Aside from lower market liquidity, would there be any technical limitations of an Augur fork built to run on Ethereum Classic? Could such an Ethereum Classic Augur fork that utilized Augur (Ethereum ...
5
votes
1answer
69 views

Impact of Ethereum conversion to Proof of Stake

What impact will the eventual change of Ethereum from Proof of Work to Proof of Stake have on Augur security and scalability?
6
votes
1answer
69 views

Can someone be a reporter and a participant in the same market?

Is is possible to be both a reporter and a participant (either market creator or participant with an open market position) in the same event?
5
votes
1answer
63 views

What type of 2FA does Augur offer its users?

What type of account protection options are available for the Augur platform and how does it work?
6
votes
1answer
228 views

Reason for the REP contract address change

What was the reason behind the recent change in the REP ERC20 token contract address? Previously when I logged into my wallet, the REP contract address was listed as: ...
4
votes
1answer
86 views

Reporting with REP in cold storage

I love the Augur oracle system and hope to see as many reporters as possible. However security is also very important. There are already several hardware wallets that support Ethereum ERC20 tokens ...
4
votes
2answers
316 views

How often will each REP owner be required to report on an event?

How often will each REP owner be required to report on an market or markets? Will this frequency be multiplied by the number of ETH addresses with a REP balance than the REP owner controls? If so is ...
5
votes
1answer
93 views

What makes Augurs Oracle model trustless?

What makes Augurs Oracle model trustless? Is there some mechanism to prevent collusion between oracles? Even if oracles are randomly assigned events to report on, what would prevent them from ...
3
votes
2answers
172 views

Ability to prevent or reduce the potential impact of insider trading?

Augur market participants can act pseudonymously. In certain markets some parties may either have a personal impact on the outcome of an event or awareness of facts not yet available to the general ...
6
votes
1answer
54 views

Amount of funds allocated for the Bug Bounty Prediction Market Release

What amount of funds have been allocated for the Bug Bounty Prediction Market Release? Are these funds denominated in REP, ETH or something else? Is there a cap on the amount of funds that can be ...
4
votes
1answer
70 views

Can cryptocurrency exchanges storing REP act as active reporters?

Are there any measures to force REP being stored on cryptocurrency exchanges to not be used by the exchange for reporting? If not, what are the security implications of a major exchange, holding lots ...
3
votes
1answer
37 views

Critical Serpent Compiler weakness from Zeppelin Solutions Audit

What were the 8 "Criticial Severity" items identified in the Zeppelin Solutions Audit of the Serpent Compiler used for Augur? How will a conversion from Serpent to Solidity address these concerns? ...
8
votes
1answer
69 views

Is Augur vulnerable to front-running transactions?

As far as I understand, Augur is a decentralized application running on the Ethereum network. I am wondering, if someone is watching the underlying contracts on the blockchain for new incoming ...
7
votes
1answer
75 views

Can the stability of Augur be disrupted?

Augur uses a blockchain to distribute trades. Since there are no servers or employees there is no easy way of taking it down (similar to other peer-to-peer technologies). Are there any other concerns ...