Decentralized Reputation in OpenBazaar

Decentralized reputation is one of the most sought after prizes in the cypherpunk community…

Evolution Exit Scam Shows Multisig Isn’t Enough: We need Decentralization

This week another darknet market closed abruptly. The Evolution site operators stole millions of dollars worth of users’ bitcoins. This is only the latest in a series of “exit scams” where the operators…

OpenBazaar Threat Model

This blog post outlines the security model and policies of OpenBazaar. It is written for contributors with push access who are asked to review and merge pull requests, external developers who are interested in submitting pull requests, and end-users who are interested in understanding…

Digital Assets in OpenBazaar

Digital assets are obligations to real-world items, content, or services that are digitally recorded. Digital assets are issued by individuals or corporations, and the bearers of the assets are entitled to the obligation promised by the issuer. In simple terms, they are the…

Security incident: Developer impostor

We recently faced a minor security incident at the OpenBazaar GitHub repository.

An attacker was able to briefly gain push access and make code changes that remained undetected for about one hour, by pretending to be a developer with…