Visit Polkadot UI, go to Settings tab and select address prefix.
In a dropdown menu select Polkadot (live).
Set the node/endpoint. Choose one hosted by Parity or Web3 as on screenshot below and click Save & Reload.
Go to Account tab and press Add account button. Polkadot mainnet address should start with "1".
Complete all the required fields and save all information in a secure place. For future ease add in the name of the account “stash” to identify it easily in the future or add a tag after creation. You will be able to download and store your encrypted keystore locally.
Press Save and backup your account.
For secure staking you will need to have at least two accounts:
Stash - the primary account that holds the funds. The funds can be kept in a cold wallet and all bonded DOT are locked. After unbonding, users must wait for 28 days before they can access the locked funds.
Controller - a separate account to control and perform staking commands for stash account, like changing nominations, starting or stopping nominating and so on. It needs to have sufficient funds in DOT to pay for transaction fees when actions are taken.
Now you have created one account that initially will perform both functions. It will appear in your Accounts tab. After enablement of token transfers, it is recommended to create a separate account, send 1 DOT to it and use it as a controller.
Create an account using PolkadotJS browser extension
As an alternative way of creating Polkadot account you can use Polkadot.JS browser extension. It is available for Chrome and Mozilla users.
Open the PolkadotJS plugin and press Create New Account or simply press the cross in the middle.
Write down or copy your seed phrase and go to the next step. If you will try to paste it before finishing the process, extension window will close so you will need to repeat this step.
Choose the name of account and set a secure password. Press the orange button.
You will see the account in the extension menu. Now you can paste a seed phrase if you copied it in a previous step. Now check that address displays as a Polkadot mainnet address that should start from "1". Press a "gear" in the right top corner. In the dropdown menu choose Polkadot (live). Click back and you will see that address will transform. Now you can copy it to save as a plain text.
Download a backup JSON by pressing three dots and choosing Export Account. The extension will ask you to enter the password which you specified in a previous step.
Now you can visit Polkadot UI and let the extension to add your account. If there was no such intention you can simply press Restore JSON and drug the backup file saved in a previous step. Even if you haven't changed the address format to Polkadot (live) in extension it still can be imported to the Polkadot UI and transformed in a Settings tab.
For secure staking you will need to have at least two accounts:
Stash - the primary account that holds the funds. The funds can be kept in a cold wallet and all bonded DOT are locked. After unbonding, users must wait for 28 days before they can access the locked funds.
Controller - a separate account to control and perform staking commands for stash account, like changing nominations, starting or stopping nominating and so on. It needs to have sufficient funds in DOT to pay for transaction fees when actions are taken.
Now you have created one account that initially will perform both functions. It will appear in your Accounts tab. After enablement of token transfers, it is recommended to create a separate account, send 1 DOT to it and use it as a controller.
About P2P Validator
P2P Validator is a world-leading non-custodial staking provider securing more than $3 billion by over 10,000 delegators/nominators across 25+ high-class networks. We have been present in all Polkadot testnets and have been actively participating on Kusama network since the beginning. P2P Validator invested its own funds in Polkadot in 2017 and intends to support the network in the long term.
<h1 id="cosmos-game-of-zones-phase-3-a-deceptive-rootchain-that-will-trap-your-tokens"><strong>Cosmos' Game of Zones Phase 3: a Deceptive Rootchain that will trap your tokens</strong></h1><p><em><em>For Phase 3 we prepared a specific deceptive zone whose purpose is to trap your transfers and let the zone ‘root’ users to claim them on the counterparty chains.</em></em></p><h2 id="evil-rootchain"><strong>Evil Rootchain</strong></h2><p>For Phase 3 we prepared a specific deceptive zone whose purpose is to trap your transfers and let the zone ‘root’ users to claim them on the counterparty chains.</p><p>That zone does not expose a vulnerability in IBC, neither it is something unexpected by people who made ICS: it’s merely an illustration of IBC threat model and how it can be used to steal user funds.</p><p>We modified <code>createOutgoingPacket()</code> function to work like that:</p><ul><li>user who has at least some root denom tokens (i.e. 1000root on balance) can create any outgoing transfers they want, even if they don’t have the required funds;</li><li>user who has no root tokens cannot transfer any tokens back to a source chain.</li></ul><p>Here’s the <a href="https://gist.github.com/vshvsh/88964912dbd389332c53bc239fb59168?ref=p2p.org">gist</a> of how it’s done, and the <a href="https://github.com/p2p-org/gaia-rootchain?ref=p2p.org">full project</a>.</p><p>So if someone was to transfer, say, doubloons to our deceptive chain, they couldn’t take it back - but any root user can redeem fake tokens for real tokens on an origin chain.</p><p>That means that a regular user who sends funds to a deceptive chain can’t cash them out on an origin chain - they’ve basically lost they funds. But it’s not apparent, because internal transfers on the zone work fine, and until a user tries to redeem the transferred token they won’t see any problems.</p><p>Moreover, malicious root token holder can redeem those tokens instead of an original sender or transferred token holders, and that wouldn’t be apparent too without aggregate analysis of all transfers across all channels.</p><p>We deployed it on responsible-3 zone (heads up: responsible was an approved sockpuppet account of p2p all along; it didn’t compete in earlier phases where scarcity and/or account throughput were an issue).</p><h2 id="demonstration"><strong>Demonstration</strong></h2><p>An unsuspecting user makes a transfer of 100 very valuable ptp tokens to responsible-3:</p><pre><code>>rly tx transfer p2p-org-3 responsible-3 100ptp true cosmos16zx4s8nculu94vhm07fd3qlg8g7grtj0xk49dg
I[2020-06-03|18:21:59.489] ✔ [p2p-org-3]@{50776} - msg(0:transfer) hash(962733C0568867D6F4EA70417EB1E747FCC136396E3E020D5351DAD011ACBE6D)
I[2020-06-03|18:22:09.218] ✔ [responsible-3]@{50793} - msg(0:update_client,1:ics04/opaque) hash(87D2802713DB702334AB843CAD488841E5A3E1A7C95DCB0DA0344E5039A77674)
</code></pre><p>They now have transferred tokens in the wallet, but can they transfer them back?</p><pre><code>>rly q bal responsible-3
100transfer/fmqnwnlqii/ptp
</code></pre><pre><code>>rly tx transfer responsible-3 p2p-org-3 100ptp false cosmos16zx4s8nculu94vhm07fd3qlg8g7grtj0xk49dg
I[2020-06-03|18:56:09.666] ✘ [responsible-3]@{51200} - msg(0:transfer) err(sdk:4:failed to execute message; message index: 0: need to be root user to send ibc source=false transfers: unauthorized)
Error: failed to send first transaction
</code></pre><p>No, they can’t. Here comes a root user:</p><pre><code>>rly q bal responsible-3
100000000000root,975000rsp
</code></pre><p>They don’t have any <code>100transfer/fmqnwnlqii/ptp</code> tokens, but they can redeem 100ptp on p2p-org-3 anyway:</p><pre><code>>rly tx transfer responsible-3 p2p-org-3 100ptp false cosmos1hazzkmrvxcrxvxv98daslkw0a7uax5djqgn20d
I[2020-06-03|18:58:41.425] ✔ [responsible-3]@{51230} - msg(0:transfer) hash(24456218B05964F3B7B57EFD1F25E2CEEDA9BAAEBC957D0A6E315D801929E093)
I[2020-06-03|18:58:49.540] ✔ [p2p-org-3]@{51217} - msg(0:update_client,1:ics04/opaque) hash(769158A9735DF93496F08F631E5D1AB04CCF081DFC132700E25C970D33DF74DB)
</code></pre><pre><code>>rly q bal p2p-org-3
100ptp
</code></pre><h2 id="conclusion"><strong>Conclusion</strong></h2><p>The prolonged existence of actively malicious “rootchains” is not realistic - people wouldn’t use it for anything - but we expect people might deploy temporary ones for fishing or scamming purpose when IBC connections are permissionless and IBC-enabled wallets allow arbitrary chains to be added.</p><p>More than that, any sufficiently complicated IBC-enabled blockchain can become a “rootchain” due to vulnerability, especially if we’re talking about complex smart contract chains and dynamic IBC like on Agoric or CosmWASM chains. Both trapping the funds on receiving chain forever or dishonest redeeming on source chain can be a result of an exploit on undertested code.</p><p>We think that the community should build tools for total supply observability across chains and means to swiftly stop IBC transfers with malicious or vulnerable zones or applications via governance to prevent user fund loss.</p><hr><p><em><em>The best way to support our contribution is to <a href="https://p2p.org/cosmos?utm_source=blog&utm_medium=economy&utm_campaign=phase3_post">stake ATOM with P2P Validador</a>.</em></em></p><hr><p><a href="https://p2p.org/?utm_source=blog&utm_medium=economy&utm_campaign=phase3_post">P2P Validator</a> is a world-leading non-custodial staking provider securing more than $3 billion by over 10,000 delegators/nominators across 25+ high-class networks. We've been validating in Cosmos Hub since the first day of mainnet. P2P Validator provides comprehensive due-diligence and invested its own funds in ATOM in 2017 intending to support Cosmos network in the long term.</p><p><strong><strong>Web:</strong></strong><a href="https://p2p.org/?utm_source=blog&utm_medium=economy&utm_campaign=phase3_post"> https://p2p.org</a></p><p><strong><strong>Stake ATOM with us:</strong></strong> <a href="https://p2p.org/cosmos?utm_source=blog&utm_medium=economy&utm_campaign=phase3_post">p2p.org/cosmos</a></p><p><strong><strong>Twitter:</strong></strong><a href="https://twitter.com/p2pvalidator?ref=p2p.org"> @p2pvalidator</a></p><p><strong><strong>Telegram:</strong></strong> <a href="https://t.me/P2Pstaking?ref=p2p.org">https://t.me/P2Pstaking</a></p>
<p><em><em>This guide will walk you through the process of claiming DOT tokens. Make sure that you have <a href="https://p2p.org/economy/create-account-in-polkadot-network">created Polkadot account</a>. After successful claim you can <a href="https://p2p.org/economy/polkadot-nomination-guide">start nominating</a>.</em></em></p><h1 id="claim-your-dot"><strong>Claim your DOT</strong></h1><p>After account registration you need to claim your DOT. Go to the <a href="https://polkadot.js.org/apps/?ref=p2p.org#/claims">claim app</a> on Polkadot UI, select your account and press <code>Continue</code>.</p><figure class="kg-card kg-image-card"><img src="https://p2p.org/economy/content/images/2020/09/1-3.png" class="kg-image" alt loading="lazy" width="1882" height="856" srcset="https://p2p.org/economy/content/images/size/w600/2020/09/1-3.png 600w, https://p2p.org/economy/content/images/size/w1000/2020/09/1-3.png 1000w, https://p2p.org/economy/content/images/size/w1600/2020/09/1-3.png 1600w, https://p2p.org/economy/content/images/2020/09/1-3.png 1882w" sizes="(min-width: 720px) 720px"></figure><p>Paste the Ethereum fundraiser address in the field to connect it with Polkadot account and press <code>Continue</code>.</p><figure class="kg-card kg-image-card"><img src="https://p2p.org/economy/content/images/2020/09/2-5.png" class="kg-image" alt loading="lazy" width="1889" height="859" srcset="https://p2p.org/economy/content/images/size/w600/2020/09/2-5.png 600w, https://p2p.org/economy/content/images/size/w1000/2020/09/2-5.png 1000w, https://p2p.org/economy/content/images/size/w1600/2020/09/2-5.png 1600w, https://p2p.org/economy/content/images/2020/09/2-5.png 1889w" sizes="(min-width: 720px) 720px"></figure><p>You will need to sign the message in a grey box with the ETH address that has DOT indicator tokens and paste the transaction signature in the empty box below.</p><figure class="kg-card kg-image-card"><img src="https://p2p.org/economy/content/images/2020/09/3-5.png" class="kg-image" alt loading="lazy" width="1888" height="855" srcset="https://p2p.org/economy/content/images/size/w600/2020/09/3-5.png 600w, https://p2p.org/economy/content/images/size/w1000/2020/09/3-5.png 1000w, https://p2p.org/economy/content/images/size/w1600/2020/09/3-5.png 1600w, https://p2p.org/economy/content/images/2020/09/3-5.png 1888w" sizes="(min-width: 720px) 720px"></figure><p>To sign a transaction you can use MyCrypto (MC) or MyEtherWallet (MEW). For increased security, you can run one of the preferred applications on your local computer. Make sure that you have downloaded the latest version for your operating system.</p><p>In MC go to <code>Sign & Verify Message</code>, in MEW go to <code>Message</code> tab. Copy text from the dotted box in the Polkadot claim app you used at the start and paste it into the empty message box in the MC or MEW and click <code>Sign</code>.</p><figure class="kg-card kg-image-card"><img src="https://p2p.org/economy/content/images/2020/09/4-2.png" class="kg-image" alt loading="lazy" width="1888" height="769" srcset="https://p2p.org/economy/content/images/size/w600/2020/09/4-2.png 600w, https://p2p.org/economy/content/images/size/w1000/2020/09/4-2.png 1000w, https://p2p.org/economy/content/images/size/w1600/2020/09/4-2.png 1600w, https://p2p.org/economy/content/images/2020/09/4-2.png 1888w" sizes="(min-width: 720px) 720px"></figure><p>After that you will get an output. Copy and paste it into the empty box in the Polkadot claim app and press <code>Confirm claim</code>.</p><figure class="kg-card kg-image-card"><img src="https://p2p.org/economy/content/images/2020/09/5-2.png" class="kg-image" alt loading="lazy" width="1911" height="753" srcset="https://p2p.org/economy/content/images/size/w600/2020/09/5-2.png 600w, https://p2p.org/economy/content/images/size/w1000/2020/09/5-2.png 1000w, https://p2p.org/economy/content/images/size/w1600/2020/09/5-2.png 1600w, https://p2p.org/economy/content/images/2020/09/5-2.png 1911w" sizes="(min-width: 720px) 720px"></figure><p>If you have a valid claim you will see a green box with the amount of DOT. Press <code>Claim</code> and then press <code>Submit (no signature)</code> to finish the process. Go to the <code>Account</code> tab and verify that tokens have appeared on the balance of your account.</p><p>Now you are able to take part in staking and nominate, token transfers are prohibited at the moment.</p><h1 id="about-p2p-validator"><strong>About P2P Validator</strong></h1><p><a href="https://p2p.org/?utm_source=blog&utm_medium=economy&utm_campaign=polkadot_claim">P2P Validator</a> is a world-leading non-custodial staking provider securing more than $3 billion by over 10,000 delegators/nominators across 25+ high-class networks. We have been present in all Polkadot testnets and have been actively participating on Kusama network since the beginning. P2P Validator invested its own funds in Polkadot in 2017 and intends to support the network in the long term.</p><hr><p><em><em>Have issues with claiming your DOT? Ask questions in our <a href="https://t.me/P2Pstaking?ref=p2p.org">Telegram chat</a> or contact Alex via [email protected], we will be happy to help.</em></em></p><hr><p><strong><strong>Web:</strong></strong><a href="https://p2p.org/?utm_source=blog&utm_medium=economy&utm_campaign=polkadot_claim"> https://p2p.org</a></p><p><strong><strong>Stake DOT with us:</strong></strong> <a href="https://p2p.org/polkadot?utm_source=blog&utm_medium=economy&utm_campaign=polkadot_claim">https://p2p.org/polkadot</a></p><p><strong><strong>Twitter:</strong></strong><a href="https://twitter.com/p2pvalidator?ref=p2p.org"> @p2pvalidator</a></p><p><strong><strong>Telegram:</strong></strong> <a href="https://t.me/P2Pstaking?ref=p2p.org">https://t.me/P2Pstaking</a></p>
ALL
Agoric
Aptos
Auth
Avail
Avalanche
Axelar
Babylon
Bitcoin
BTC
Cardano
Celestia
Chainlink
Cosmos
Crescent
Cyberway
DAOBet
DVT
Dymension
Economy
EigenLayer
Elrond
Ethereum
Evmos
Explain Like I'm Five
Guide
HR
Kava
Kusama
Lido
LSP
Manta
Mantle
Marlin
Matic
Mina
Moonbeam
MultiversX
Near
NuCypher
Oasis
Origin
Partnership
Persistence
Pocket
Polkadot
Polygon
Quicksilver
Regen
Renzo
restaking
RPC Node
Serum
Solana
SSV.Network
Staking
Starknet
Sui
symbiotic
Terra
Tezos
TheGraph
Threshold
Update
Vara
Vega
