The Wallet

The wallet is under development but is functional. It is built using the Rusty Kaspa SDK and is interoperable with the Rusty Kaspa CLI wallet.

The wallet currently supports standard BIP32 (HD) accounts compatible with the Kaspa ecosystem wallets such as "kaspawallet" that use 12 or 24-word mnemonics. The wallet also supports multiple accounts (via BIP44 account derivation), the ability to create and switch between multiple wallets as well as other features such as instant transfers between wallet accounts.

Various other features have also been developed and tested as a part of the Rusty Kaspa Wallet Framework, but are not yet integrated into the Kaspa NG user interface (targeted for completion in Q1-Q2 2024). This includes:

Creation and import of multiple private keys in a single wallet

Multisig Support
Legacy wallet import (KDX and wallet.kaspanet.io)
Ability to easily export and move wallets between web and desktop applications
Upon completion and testing of the legacy compatibility, we will be migrating wallet.kaspanet.io users to the Kaspa NG infrastructure and Kaspa NG will offer an option to import KDX wallets.

Wallet Security

The key concern during the wallet development has been the supply chain vulnerabilities (hostile code injections in libraries used by developers without them realizing that they are introducing sleeping malware in their software or such malware coming in at a later date during updates). Many users have lost their funds due to these vulnerabilities including most recently Solana and Ledger Wallet ecosystem users.

To address this, Kaspa NG is developed 100% in Rust without any dependencies on web technologies or languages such as JavaScript. The native desktop application is self-contained relying strictly on Rust dependencies that cannot passively activate hostile code.

The web version of Kaspa NG also follows these principles and is built as a single Web Assembly binary. It runs as an isolated application in a web browser and on mobile devices, and does not use DOM, external JavaScript, or any web technologies.

All private in-memory data is always kept encrypted and is only temporarily decrypted to allow transaction signing or other secure operations, following which the memory containing the sensitive data is wiped.

DDoS resilience

To mitigate the potential of DDoS attacks, the software and the public node infrastructure have been designed with decentralization in mind as follows:

The public node infrastructure is comprised of multiple disjoined DDoS-mitigated nodes.
Both web and desktop applications (as well as later the Chrome extension) can connect to any Rusty Kaspa p2p node directly. Thus anyone can put up a public node and make it available internally within their organization or for public access.
Anyone can download or build Kaspa NG locally and sync directly with the Rusty Kaspa p2p network.

Download links

Windows: https://github.com/aspectron-wallet/kaspa-ng/releases/download/v0.2.3/kaspa-ng-v0.2.3-windows-x64.zip
MacOS: https://github.com/aspectron-wallet/kaspa-ng/releases/download/v0.2.3/kaspa-ng-v0.2.3-macos-arm64.zip

senseimaiku

Posts

Merits