The collapse of FTX, a prominent cryptocurrency exchange, in November 2021 sent shockwaves throughout the crypto world, raising serious concerns regarding the security of existing wallet solutions. As the field of cryptography continues to advance, the wallet ecosystem has witnessed significant expansion, offering a diverse range of options to cater to the needs of individuals, DAOs, and institutions.
Individual users seek wallets that provide a seamless user experience, low transaction fees, and flexibility when interacting with decentralized applications (dApps). Meanwhile, DAOs require wallets with transparent gold management and active participation in ecosystem governance, while institutional users prioritize features like chain ignorance, auditability, and institutional-grade security.
Notably, smart contract wallets and multi-party computation protocols (MPC) have made remarkable strides in bolstering the security of cryptographic assets while addressing user requirements.
In this article, we will delve into popular wallet types, including EOA wallets, MPC wallets, hardware EOA wallets, and AA wallets, conducting a thorough analysis of their respective strengths and weaknesses, in order to assist users in selecting the most appropriate wallet for their specific needs.
The Popularity of EOA Wallets:
Among the various wallet types, EOA wallets have gained significant popularity in the crypto community. These traditional wallets rely on mnemonic and hierarchical deterministic structures to generate private keys, corresponding public keys, and blockchain addresses. EOA wallets offer users the ability to generate private keys for transaction signing and facilitate key recovery through the use of memos. The convenience and user-friendly nature of EOA wallets have led to millions of users adopting them, with browser extensions like MetaMask becoming a prominent part of this ecosystem.
Source：EOA Wallet
Advantages of EOA Wallets：
EOA wallets, such as MetaMask, offer several advantages that contribute to their widespread adoption:
●Seamless User Experience: Traditional EOA wallets excel in providing a seamless user experience, particularly when interacting with decentralized applications (Dapps). Users can easily connect their wallets to various Dapps without the need for extensive technical knowledge or complex setup processes. This convenience has contributed to the popularity of EOA wallets among crypto enthusiasts.
●Easy Usage: EOA wallets, including popular options like MetaMask, are designed with user-friendliness in mind. Generating and importing private keys is relatively straightforward, simplifying the wallet setup process. This ease of use eliminates potential barriers for new users and encourages wider adoption within the crypto ecosystem.
Source ：The most popular crypto wallet in the world, MetaMask
Disadvantages of EOA Wallets:
Despite their popularity, EOA wallets have a few notable drawbacks that users should be aware of:
● Risk of Losing Memos: One of the inherent risks of EOA wallets is the potential loss of private keys. If the private key is compromised or leaked, it exposes the associated assets to the risk of theft. Unfortunately, there are limited recovery measures available once a private key is compromised, making asset security a crucial concern.
● Vulnerability to Hacking: EOA wallets, by their nature, require real-time online connectivity. This exposes them to potential security threats, particularly phishing attacks. Users may unknowingly click on malicious links, leading to the loss of private keys and subsequent compromise of their assets. While the Mac ecosystem may offer slightly more security, the Windows ecosystem is generally considered more susceptible to such attacks.
● High Learning Curve: EOA wallets can pose challenges for users who are new to blockchain technology. The use of human-readable public key addresses, such as the "0x" format, may seem abstract and unfamiliar to individuals without a solid understanding of basic blockchain concepts like private keys and memos. This can create a learning curve for newcomers, potentially hindering their understanding of fundamental security practices.
Self-proclaimed as the most secure cold wallet
A cold wallet, also referred to as an offline or static wallet, is a type of wallet that operates without an internet connection. It remains disconnected from the network and doesn't update blockchain data in real time. Among the popular choices for cold wallets are Ledger, Trezor, and Ellipal.
These wallets prioritize security and aim to provide users with a robust and reliable storage solution for their cryptocurrencies.
Source : Cold Wallet Ledger Nano S Plus
Advantages:
Disadvantages:
MPC wallet--Which is not that "crypto" as others
MPC (Message Processing Circuit) wallets use a Turing complete state machine to verify transactions and manage private keys. They are often used to implement DAO token management and governance. Unlike traditional wallets, MPC wallets do not require users to manually manage private keys. Users can define and manage token issuance, transfer, and management functions through a smart contract written in a programming language. Currently popular MPC wallets include Lit, Qredo, and ZenGo."
Source：MPC Wallet
Advantages:
Disadvantages:
AA Wallet - Smart Multi-Signature Wallet
Smart multi-signature wallets are a type of wallet that requires multiple private keys to sign transactions. They are typically composed of a main private key and one or more child private keys. The main private key is responsible for managing the wallet's ownership and transaction permissions, while the child private keys sign and verify transactions.
Advantages:
Disadvantages:
Echooo: The First Self-Hosting Multisig Wallet on The Crypto Market
Echooo provides two types of wallets: the EOA wallet and the smart multisig (valut) wallet. The EOA wallet generates a wallet private key, but unlike traditional wallets, it does not require users to store the private key using a password. The private key is encrypted using an algorithm and the encrypted file is stored on the cloud server instead. It also has the functionality of MPC (Multi-Party Security Computing) capabilities, multi-signature, and social recovery mechanism.
The valut wallet has a higher level of security. Even if the account is hacked, the transactions can only be made with the approval of multiple people, ensuring that user assets do not lose. Both can register new accounts and recover the wallet using social recovery mechanism, and Echooo does not require any passwords.
In the future, multi-signature and social recovery will be seen as a perfect manifestation of the principle: each participant has the ability to accept or reject transactions, but no one can singly control the funds. Compared to situations where funds must be singly controlled by one person or a single key, this more complex construction logic is more reliable in terms of security.
https://medium.com/1kxnetwork/wallets-91c7c3457578
https://learnblockchain.cn/article/3938
https://wupeaking.github.io/learn/solidity_mutli_sign/
https://wiki.gear-tech.io/docs/examples/multisig-wallet/
https://twitter.com/starzqeth/status/1592142515892649985?s=20&t=EU-DZIiNlRX1KOzlJ1IuNA
DeltaPrime, a DeFi protocol on Arbitrum, lost $6 million in suspicious transactions. The source of the compromised private key is still under investigation amidst alleged links to North Korean hackers adding complexity to the ongoing investigation.
CatherinePrivate key, wallet, Dark Skippy: How to crack your hardware wallet private key with 2 signatures? Golden Finance, Are hackers and white hats also doing the "Olympics"?
JinseFinanceThis article discusses why fake wallets are downloaded/purchased, as well as the risk of private key/mnemonic phrase leakage. It will also provide a series of security suggestions to help users ensure the safety of their funds.
JinseFinanceGrand Base token suffered a $2 million loss in a hacking incident, resulting in a 99% price plummet and significantly undermining community confidence in its security protocols.
CatherineRekt Builder's investigation reveals Ledger Live's covert user activity tracking, raising serious privacy concerns for Ledger hardware wallet users.
KikyoFlareMetrics has advised delegates on OracleSwap to change to other FTSO operators and revoke access due to the risk of having their rewards stolen by bad actors.
BeincryptoCurrently, the trading, deposit and withdrawal functions of CEX have been suspended.
Numen Cyber LabsBlockchain analysis firms involved in Solana exploit investigation unpack the latest developments as teams try to figure out how private keys were stolen.
CointelegraphThe proposed law would not necessarily make cryptocurrencies legal tender in the country, but would at least make them legally recognized financial assets for investment and other purposes.
CointelegraphThe proposed law won’t necessarily make crypto legal tender in the country, but it’ll at least be a legally recognized financial asset for investments and other uses.
Cointelegraph