AdamSC1 (OP)
Newbie
 Offline
Activity: 34
Merit: 0
|
 |
April 21, 2014, 06:52:19 PM |
|
At Vault of Satoshi we have always tried to embody the mantra of being an open, honest and transparent exchange. We feel it's our duty to do so when you make the decision to place your funds in our hands. For this reason we have long sought after a way to prove our reserves to the public in a safe and reliable manner, while most exchanges issue a third-party audit, we felt that simply wasn't open enough - so today at Vault of Satoshi we are proud to announce full proof of solvency and the publication of our cold wallet! Users can self validate both their balance and the overall reserves of the exchange by navigating to our security center and selecting "BTC Proof of Solvency". From there, load the partial tree list, select "online tools" and copy paste in the relevant information to validate the holdings. Note: While our secured cold wallet is listed and public, we have decided to not publish the hot wallet address for security reasons, and so the total value may have a discrepancy of up to 5-6%. We at Vault of Satoshi want to thank you for your trust and your continued patronage. We will continue to take steps to be transparent and promote honest, customer oriented practices in the Cryptocurrency market. All the best, Adam Cochran Director of Marketing Vault of Satoshi Original: http://www.reddit.com/r/vos/comments/23lxho/vault_of_satoshi_launches_full_proof_of_solvency/ |
|
|
|
|
|
|
|
|
|
|
|
"In a nutshell, the network works like a distributed
timestamp server, stamping the first transaction to spend a coin. It
takes advantage of the nature of information being easy to spread but
hard to stifle." -- Satoshi
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
|
|
|
|
coiner8
Member
Offline
Activity: 65
Merit: 10
|
|
April 21, 2014, 07:33:10 PM |
|
proof of solvency and the publication of our cold wallet!
we have decided to not publish the hot wallet address for security reasons
This makes it sound like you have only one cold wallet and one hot wallet. Surely that is not the case. I hope? |
|
|
|
|
|
MrWDunne
|
|
April 21, 2014, 07:37:26 PM |
|
proof of solvency and the publication of our cold wallet!
we have decided to not publish the hot wallet address for security reasons
This makes it sound like you have only one cold wallet and one hot wallet. Surely that is not the case. I hope? The amount of addresses they use has very little relevance for security. |
|
|
|
Bit_Happy
Legendary
Offline
Activity: 2100
Merit: 1040
A Great Time to Start Something!
|
|
April 21, 2014, 07:38:50 PM |
|
Congrats on attempting to provide a better, safer service.
FYI: This thread probably belongs in "Service Discussion".
|
|
|
|
|
feverpitch
|
|
April 21, 2014, 07:42:54 PM |
|
This is great. Should be standard protocol for ALL exchanges.
|
|
|
|
|
coiner8
Member
Offline
Activity: 65
Merit: 10
|
|
April 21, 2014, 07:56:26 PM |
|
proof of solvency and the publication of our cold wallet!
we have decided to not publish the hot wallet address for security reasons
This makes it sound like you have only one cold wallet and one hot wallet. Surely that is not the case. I hope? The amount of addresses they use has very little relevance for security. Of course it does. 1 cold wallet = Only takes one security incident, one private key stolen, all funds gone. 10 cold wallets = Needs 10 security incidents to lose everything, otherwise one breach only loses 10%. Naturally the 10 cold wallets need to be stored separately and in different manners in order to be effective. Same goes with the hot wallet. One flaw in the app or servers and the entire thing could be drained. Multiple hot wallets on separate servers with very different access methods will make it much more difficult for a hacker to take all of the hot balance. More likely they'd go for the first one they could get and after that Vault would know and shut the rest down. |
|
|
|
|
|
trout
|
|
April 21, 2014, 11:01:10 PM |
|
would you mind elaborating what you mean by "full proof"?
That is, what information you provide and how can one verify its validity.
|
|
|
|
|
|
HeliKopterBen
|
|
April 21, 2014, 11:48:55 PM |
|
Can customers audit the exchange in real time?
|
Counterfeit: made in imitation of something else with intent to deceive: merriam-webster
|
|
|
|
Light
|
|
April 22, 2014, 12:57:59 AM |
|
Of course it does.
1 cold wallet = Only takes one security incident, one private key stolen, all funds gone.
10 cold wallets = Needs 10 security incidents to lose everything, otherwise one breach only loses 10%.
Naturally the 10 cold wallets need to be stored separately and in different manners in order to be effective.
Same goes with the hot wallet. One flaw in the app or servers and the entire thing could be drained. Multiple hot wallets on separate servers with very different access methods will make it much more difficult for a hacker to take all of the hot balance. More likely they'd go for the first one they could get and after that Vault would know and shut the rest down.
The thing is - if it truly is an air gapped cold storage system it is extremely difficult for someone to actual get hold of the private keys. Setting up 10 different cold storage systems is a lot of effort and wouldn't really achieve that much as if you had a flaw in one you'd have that same flaw in all of them. The whole purpose of a hot wallet is not to have all your coins in there so that if it is stolen it isn't such a big deal. Trust me - having many different hot wallets which different access methods is not exactly easy to manage nor is it that cost effective. Honestly, they'd be better off getting lots of pen-testing done and keeping admin accounts away rather than trying to split up their wallets. |
|
|
|
|
AdamSC1 (OP)
Newbie
Offline
Activity: 34
Merit: 0
|
|
April 22, 2014, 03:00:11 PM |
|
would you mind elaborating what you mean by "full proof"?
That is, what information you provide and how can one verify its validity.
You are able to check that we have all the BTC we claim we have, that your BTC are indeed included as a part of that and appropriately assigned to you and that our coldwallet exists on the blockchain and has the appropriate funds. |
|
|
|
|
AdamSC1 (OP)
Newbie
Offline
Activity: 34
Merit: 0
|
|
April 22, 2014, 03:06:41 PM |
|
Can customers audit the exchange in real time?
It's my understanding that the hashes are produced in a daily cron, and you can run an audit at anytime but you will get the values from that days cron! If you have any further technical questions I can direct them to our software engineer who lead up that project! |
|
|
|
|
|
HeliKopterBen
|
|
April 22, 2014, 06:55:17 PM |
|
Can customers audit the exchange in real time?
It's my understanding that the hashes are produced in a daily cron, and you can run an audit at anytime but you will get the values from that days cron! If you have any further technical questions I can direct them to our software engineer who lead up that project! Thanks. Daily is good enough vs traditional audits that can take several months. Your exchange should gain in market share with the implementation of this new tool. |
Counterfeit: made in imitation of something else with intent to deceive: merriam-webster
|
|
|
bg002h
Donator
Legendary
Offline
Activity: 1463
Merit: 1047
I outlived my lifetime membership:)
|
|
April 22, 2014, 07:31:23 PM |
|
Proof of solvency is a great step forward. Real world security audits are the flip side of the same coin, so to speak.
|
|
|
|
AdamSC1 (OP)
Newbie
Offline
Activity: 34
Merit: 0
|
|
April 22, 2014, 08:47:24 PM |
|
Can customers audit the exchange in real time?
It's my understanding that the hashes are produced in a daily cron, and you can run an audit at anytime but you will get the values from that days cron! If you have any further technical questions I can direct them to our software engineer who lead up that project! Thanks. Daily is good enough vs traditional audits that can take several months. Your exchange should gain in market share with the implementation of this new tool. Regardless, we feel it is the right thing to do. Our users trust us with their assets and we should put that front and center and be as reliant, secure and transparent as we can afford. Our user's deserve every bit of effort to give them peace of mind! |
|
|
|
|
|
