Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Migrate off Stellar Test-Net #13

Open
mikhael28 opened this issue Aug 13, 2021 · 0 comments
Open

Migrate off Stellar Test-Net #13

mikhael28 opened this issue Aug 13, 2021 · 0 comments
Labels

Comments

@mikhael28
Copy link
Owner

As of right now, the Stellar blockchain digital assets known as 'Golf Coins' are on the test-net. This is fine for testing purposes and initial users, but the test-net assets get wiped every 3 months. This issue revolves around migrating to the blockchain itself, which entails a few pieces of work hardening security.

  1. Create a 'distributor' wallet, to be used in paying out GC for experience earned. Right now, the origin account is directly paying out GC - this is comically terrible from a security perspective, as anyone can send a POST request to the right end-point, add in a JSON string specifying how many GC I should send to which account id. Using a distributor account for payouts, adding another layer of security, allows me to protect my private keys.
  2. Create a tokenization service to retrieve our users Stellar private keys, instead of just storing them in their profile. Should likely encrypt them inside an S3 bucket, implement access control pattern for granular access.
  3. When creating Stellar wallets, we need to fund them with a minimum of 5 XLM (or so). This is partially because there is a small transaction cost involved in creating the account in the first place, and a small transaction cost for transferring digital assets from one wallet to another. In addition to figuring out how to fund these accounts without burning real world cash, we also need to a) have a check/alert to the user notifying them that they need to either buy XLM or have the distributor account give them some and b) have a way to notify the team when the XLM balance in the distributor/creator account is low, to either manually buy some more or figure out an automated solution.

In general, this is lots of work - if someone wants to have more experience working with the blockchain to put on their resume/portfolio, this is a great ticket to work on. After we work on a few smaller ticket items and we can trust each other, I will open partial access to the back-end APIs and test keys.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant