You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
As of right now, the Stellar blockchain digital assets known as 'Golf Coins' are on the test-net. This is fine for testing purposes and initial users, but the test-net assets get wiped every 3 months. This issue revolves around migrating to the blockchain itself, which entails a few pieces of work hardening security.
Create a 'distributor' wallet, to be used in paying out GC for experience earned. Right now, the origin account is directly paying out GC - this is comically terrible from a security perspective, as anyone can send a POST request to the right end-point, add in a JSON string specifying how many GC I should send to which account id. Using a distributor account for payouts, adding another layer of security, allows me to protect my private keys.
Create a tokenization service to retrieve our users Stellar private keys, instead of just storing them in their profile. Should likely encrypt them inside an S3 bucket, implement access control pattern for granular access.
When creating Stellar wallets, we need to fund them with a minimum of 5 XLM (or so). This is partially because there is a small transaction cost involved in creating the account in the first place, and a small transaction cost for transferring digital assets from one wallet to another. In addition to figuring out how to fund these accounts without burning real world cash, we also need to a) have a check/alert to the user notifying them that they need to either buy XLM or have the distributor account give them some and b) have a way to notify the team when the XLM balance in the distributor/creator account is low, to either manually buy some more or figure out an automated solution.
In general, this is lots of work - if someone wants to have more experience working with the blockchain to put on their resume/portfolio, this is a great ticket to work on. After we work on a few smaller ticket items and we can trust each other, I will open partial access to the back-end APIs and test keys.
The text was updated successfully, but these errors were encountered:
As of right now, the Stellar blockchain digital assets known as 'Golf Coins' are on the test-net. This is fine for testing purposes and initial users, but the test-net assets get wiped every 3 months. This issue revolves around migrating to the blockchain itself, which entails a few pieces of work hardening security.
In general, this is lots of work - if someone wants to have more experience working with the blockchain to put on their resume/portfolio, this is a great ticket to work on. After we work on a few smaller ticket items and we can trust each other, I will open partial access to the back-end APIs and test keys.
The text was updated successfully, but these errors were encountered: