Bitcoin Forum
June 26, 2019, 02:58:01 AM *
News: Latest Bitcoin Core release: 0.18.0 [Torrent] (New!)
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Exchanges create a wallet per user ? Or a single wallet to all ?  (Read 630 times)
lseo
Newbie
*
Offline Offline

Activity: 6
Merit: 0


View Profile
June 05, 2017, 07:18:14 AM
 #1

Hello,

I and a friend are trying to develop an exchange, at last to learn how it works.
At moment, we are using bitcoinjs-lib.

1) An exchange creates a wallet per user ? Or does it have a single wallet which makes all transactions ?
2) If the exchange keeps a wallet per user, how can it protect the user's private key in case  of unauthorised access in database ? Crypt and decrypt it with user's password is an option, but it implies in ask for password every transaction.

Regards,
1561517881
Hero Member
*
Offline Offline

Posts: 1561517881

View Profile Personal Message (Offline)

Ignore
1561517881
Reply with quote  #2

1561517881
Report to moderator
1561517881
Hero Member
*
Offline Offline

Posts: 1561517881

View Profile Personal Message (Offline)

Ignore
1561517881
Reply with quote  #2

1561517881
Report to moderator
1561517881
Hero Member
*
Offline Offline

Posts: 1561517881

View Profile Personal Message (Offline)

Ignore
1561517881
Reply with quote  #2

1561517881
Report to moderator
Try The Brand New Ethereum Game
50 Last Players Also Win The Bank
Works On Any iOS/Android Device With Standard Browser
Join Us On Telegram To Get Notified When You Can Win
COLOR PIXELS
AND WIN
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1561517881
Hero Member
*
Offline Offline

Posts: 1561517881

View Profile Personal Message (Offline)

Ignore
1561517881
Reply with quote  #2

1561517881
Report to moderator
1561517881
Hero Member
*
Offline Offline

Posts: 1561517881

View Profile Personal Message (Offline)

Ignore
1561517881
Reply with quote  #2

1561517881
Report to moderator
1561517881
Hero Member
*
Offline Offline

Posts: 1561517881

View Profile Personal Message (Offline)

Ignore
1561517881
Reply with quote  #2

1561517881
Report to moderator
ranochigo
Legendary
*
Offline Offline

Activity: 1708
Merit: 1141

Somewhat inactive.


View Profile WWW
June 05, 2017, 07:22:31 AM
 #2

Hello,

I and a friend are trying to develop an exchange, at last to learn how it works.
At moment, we are using bitcoinjs-lib.

1) An exchange creates a wallet per user ? Or does it have a single wallet which makes all transactions ?
I don't work at an exchange. However, I can safely tell you that any exchange will not attempt to make a wallet for every user. The sheer amount of resources required will make in unfeasible.
2) If the exchange keeps a wallet per user, how can it protect the user's private key in case  of unauthorised access in database ? Crypt and decrypt it with user's password is an option, but it implies in ask for password every transaction.

Regards,
If there is an unauthorised access to the server, the password would probably be captured anyways. In most cases, the funds are sent from a hot wallet that can be refilled from a cold wallet.

italianMiner72
Hero Member
*****
Offline Offline

Activity: 840
Merit: 500


View Profile
June 05, 2017, 09:47:29 AM
 #3

Hello,

I and a friend are trying to develop an exchange, at last to learn how it works.
At moment, we are using bitcoinjs-lib.

1) An exchange creates a wallet per user ? Or does it have a single wallet which makes all transactions ?
2) If the exchange keeps a wallet per user, how can it protect the user's private key in case  of unauthorised access in database ? Crypt and decrypt it with user's password is an option, but it implies in ask for password every transaction.

Regards,

A singular wallet can collect all the addresses do you need...
but i think, who Exchange, have hot and cold wallets to protect users funds...
Sure, not one for each users
TechPriest
Sr. Member
****
Offline Offline

Activity: 350
Merit: 258



View Profile
June 06, 2017, 12:52:50 PM
 #4

Hello,

I and a friend are trying to develop an exchange, at last to learn how it works.
At moment, we are using bitcoinjs-lib.

1) An exchange creates a wallet per user ? Or does it have a single wallet which makes all transactions ?
2) If the exchange keeps a wallet per user, how can it protect the user's private key in case  of unauthorised access in database ? Crypt and decrypt it with user's password is an option, but it implies in ask for password every transaction.

Regards,


1). No, exchanger has cold wallet and hot wallet. BUT. This wallets can hold many pairs "address-private key". Exchange creates many addresses (for every deposit transaction). But this addresses locates in cold wallet. Exchange give to you only voucher and in fact you don't own your money.

In science we trust!
NeuroticFish
Legendary
*
Offline Offline

Activity: 1890
Merit: 1238


There are no mistakes. Only opportunities wasted.


View Profile
June 06, 2017, 01:09:08 PM
 #5

Hello,

I and a friend are trying to develop an exchange, at last to learn how it works.
At moment, we are using bitcoinjs-lib.

1) An exchange creates a wallet per user ? Or does it have a single wallet which makes all transactions ?
2) If the exchange keeps a wallet per user, how can it protect the user's private key in case  of unauthorised access in database ? Crypt and decrypt it with user's password is an option, but it implies in ask for password every transaction.

Regards,

From what I've seen as user, I think that (for BTC-like coins) they have one wallet they check for each and every user one address (per user) for inputs only.
As user you have one address to send your funds to. After your funds get one confirmation there's a big chance your funds are sent away (used as inputs for others' withdrawals). If you withdraw, your inputs will most likely not be from the one address where you sent the money to. Also this makes it easier to use cold storage as needed.

There's no such thing as user's private key in such online services. All private keys are the exchange's and they are used accordingly. And if a breach happens, we better pray that most of the funds are protected in cold storage.

TechPriest
Sr. Member
****
Offline Offline

Activity: 350
Merit: 258



View Profile
June 06, 2017, 10:16:28 PM
 #6

From what I've seen as user, I think that (for BTC-like coins) they have one wallet they check for each and every user one address (per user) for inputs only.
Nah, you can deposit to different addresses. When you click to "generate address" it generates address and attach to your account name (i think exchange keeps this information in SQL database). But only for one deposit operation (it can depends through exchange).

In science we trust!
NeuroticFish
Legendary
*
Offline Offline

Activity: 1890
Merit: 1238


There are no mistakes. Only opportunities wasted.


View Profile
June 07, 2017, 04:14:44 PM
 #7

From what I've seen as user, I think that (for BTC-like coins) they have one wallet they check for each and every user one address (per user) for inputs only.
Nah, you can deposit to different addresses. When you click to "generate address" it generates address and attach to your account name (i think exchange keeps this information in SQL database). But only for one deposit operation (it can depends through exchange).

Yes, I guess it keeps one address per user in the DB and you can create a new one if you want to (at some exchanges) replacing the old address in the DB.
It's still one address per user in every moment.

Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!