Crypto Casino Security: Hot Wallets vs. Cold Wallets.

[BitBakerr1]

Every crypto casino needs to have one thing in mind if they want to stay long in the business, they need to protect their customers or users funds or crypto very well  to avoid hackers from stealing the funds or crypto.

Hot wallets: we all know that hot wallet are connected to internet, and this makes it very easy for deposits and withdrawals however this usually makes it very easy for online attackers, meaning hackers can easily access it and hack it.

Cold wallets: cold wallet stays offline there by making it more better because it gives stronger protection against hacking however are less convenient for frequent transactions.

Which do you think a crypto casino should use?

[Oshosondy]

Which do you think a crypto casino should use?

Nobody will tell casinos about how to run their businesses. Just make sure you are using a reputable gambling site.

I remember when Stake and Metawin were hacked, they both survived it.

Also make sure that any money you are not using to gamble, withdraw it from the gambling sites. I rarely have money on my accounts on gambling sites.

[DanWalker]

No serious crypto casino today uses only hot wallets or only cold wallets. Industry best practice is hybrid custody. Afaik, they keep a limited balance in hot wallets for daily withdrawals. And the vast majority of user funds are kept in offline cold wallets. And sometimes, if necessary, they replenish the hot wallet from cold manually or through a controlled process.

[Orpichukwu]

What are you proposing the casinos should do now? Should they take all their wallets offline and handle everything manually to make sure hackers don’t gain access to the wallet and authorise withdrawal? Because that’s the only way they will operate without using a hot wallet.

And beside, most of their reserve can’t be in a hot wallet; only the wallet connected to their system, which triggers the automatic withdrawal for every withdrawal request, can be connected to the internet always.

[PostQuantumBTC]

No serious crypto casino today uses only hot wallets or only cold wallets. Industry best practice is hybrid custody. Afaik, they keep a limited balance in hot wallets for daily withdrawals. And the vast majority of user funds are kept in offline cold wallets. And sometimes, if necessary, they replenish the hot wallet from cold manually or through a controlled process.

Yes, just like how it is on exchanges. But gambling sites have advantages because most people that are depositing money on the gambling sites will not be able to withdraw the money because almost all the gamblers are losing. So crypto gambling sites keep most of their coins on cold wallets while only just little amount of it in percentage is on hot wallets.

[Alphakilo]

No serious crypto casino today uses only hot wallets or only cold wallets. Industry best practice is hybrid custody. Afaik, they keep a limited balance in hot wallets for daily withdrawals. And the vast majority of user funds are kept in offline cold wallets. And sometimes, if necessary, they replenish the hot wallet from cold manually or through a controlled process.

I am trying to understand if this post is referring to the casino platform use of hot vs cold wallet preference or it is the user who is the reference point here, because I believe a standard crypto casino these days are way ahead with technology and automation that should ensure an adoption of both hot and cold wallet use making it a hybrid approach, while a user does same too to ensure their security just as any casino company or business using and accepting crypto currency would to be secure from scams and hacks.
It's not a one size fit all when it comes to crypto currencies and both institutions and retail users have to adopt both practice of using hot and cold wallet for security and economic concerns.

[Coyster]

I've seen a couple of crypto casinos get hacked, but i don't think they are a major target for bad actors, as much as say, centralized exchanges. That's in part because nobody really stores their funds in casinos, it should only hold gambling funds, and big wins would be withdrawn to non-custodial wallets.

The casinos would determine what works for them, particularly based on what makes them more efficient. Depending on how big the casino is, bulk of their reserves would surely be in cold storage, but they'd still have a lot of money in online wallets to keep their platform running as it should.

[Perfectbaby]

Casinos knows exactly what is best for them to use than we choosing to tell them what types of wallets they should be using.
Casinos knows the best security measures to deploy on their site that could help more better to secure their platform than we choosing for them on what to do. Nowadays I barely heard about casino hack instead it is more common with cryptocurrency exchanges just as what we had about a recent news on one exchange.

[Rashlyowl]

I agree with what bros @Oshosondy said, it’s not really our place to worry about how casino sites manage their wallets. Their departments are usually staffed by individuals who are competent in their respective fields. Just focus on our role as users, such as ensuring we play on a trusted site. It is an exception if you want to launch a crypto casino site & ask for advice from users on this forum.

For your information, sites typically employ both types of wallets, hot wallets are used to process withdrawals made by players, while cold wallets serve as the site's treasury.

[yahoo62278]

They use both, there's no need to keep a ton in the hot wallet unless they have a high volume of high rollers. Casinos can just monitor the wallet throughout the day and refill it as needed, otherwise just keep the coins they hold in a cold wallet and not have much at risk if hackers find their way in the front door.

[Chibit01]

Every crypto casino needs to have one thing in mind if they want to stay long in the business, they need to protect their customers or users funds or crypto very well  to avoid hackers from stealing the funds or crypto.

Crypto casinos can do little here, as already explained by members above, as it's nearly impossible for them to operate without a hot wallet. Maybe they can channel all deposits which come more often in their cold wallet and leave a small amount on the hot wallet, which can be used to handle withdrawals, but they should also focus on increasing their security and not just to focus only on games and how to attract customers because there is no much case of the industry being hit by hackers like others don't mean they can't be attacked.

[BitMaxz]

Hot wallets: we all know that hot wallet are connected to internet, and this makes it very easy for deposits and withdrawals however this usually makes it very easy for online attackers, meaning hackers can easily access it and hack it.

No, if it's easy, no one will use hot wallets; they're vulnerable to attacks, but the chances of a hacker attacking this wallet remain slim. Unlike offline wallets, simply knowing your wallet's address is not enough to hack it. You can only hack or steal coins from an offline wallet if you have physical access to it.

Which do you think a crypto casino should use?

I believe casinos online use offline or cold storage wallets, but I also believe they also have hot wallets to fill the online casino if ever someone wants to withdraw from their site.

Just like other businesses and exchanges, they have separate wallets, including multisig wallets, to avoid hacks.

[Asiska02]

Which do you think a crypto casino should use?

The best approach for a seamless service offering is for the casino to go for the both. The hot wallet should have little amount of money for fast transactions and withdrawal, this is one of the advantages of keeping customers coming to your casino to use always. The cold storage should be air gapped holding the more majority of the casinos fund. They only need to access the wallet when they want to fund their hot wallet more and it should be a multisig that requires authorization of two persons to access the funds. Relying on just the hotels  wallet can lead to security breach and loss of funds. Also, relying on cold wallet will cause delay in transaction which many users dislike about using a casino with such deficit in withdrawal.

[Karl_3000]

No, if it's easy, no one will use hot wallets; they're vulnerable to attacks, but the chances of a hacker attacking this wallet remain slim. Unlike offline wallets, simply knowing your wallet's address is not enough to hack it. You can only hack or steal coins from an offline wallet if you have physical access to it.

Clipper malware can be able to steal from cold wallet or offline wallet without the hacker having physical access to the wallet. While making transaction, it is good to make sure the wallet address is correct and when you are about to sign the transaction, make sure also the the address is not changed.