โ† All Blockchain Technology Flashcard Decks

Risk Mitigation Flashcards

7 cards from real Blockchain Technology practice questions. Tap to flip, then mark Knew It or Still Learning โ€” missed cards come back until you master them.

Read the first 7 Risk Mitigation flashcards as text
  1. Which strategy best mitigates the risk of a hot wallet being drained on an exchange?

    Answer: Keeping the majority of funds in cold storage and only operational amounts hot

    Cold storage keeps the bulk of funds offline and out of reach of online attackers.

  2. A smart contract uses external calls. Which pattern mitigates reentrancy risk?

    Answer: Checks-Effects-Interactions ordering with a reentrancy guard

    Updating state before external calls and using a guard prevents reentrant withdrawals.

  3. What is the main risk-mitigation benefit of formal verification for a critical contract?

    Answer: It mathematically proves the code meets specified properties

    Formal verification proves specified properties hold for all inputs, catching subtle logic flaws.

  4. Which measure best mitigates governance-token attack risk where an attacker borrows tokens to pass a malicious proposal?

    Answer: Requiring a voting delay and snapshot before flash-loaned votes can count

    Snapshots and voting delays prevent flash-loaned tokens from being used to vote.

  5. How does a phased or canary deployment mitigate risk for a new protocol version?

    Answer: It exposes a small portion of users/funds first to limit blast radius

    Limiting initial exposure contains damage if the new version has a flaw.

  6. Which control mitigates the risk of a malicious or buggy dependency in a contract's imported libraries?

    Answer: Pinning audited library versions and reviewing all dependencies

    Pinning and reviewing dependencies prevents supply-chain risks from unvetted code.

  7. What is the primary mitigation against private keys being stolen from a developer's machine?

    Answer: Using a hardware security module or hardware wallet for signing

    Hardware signing devices keep keys off the host and resist software-based theft.