Live data from Hacker News

Coinbase – Exchange API

docs.exchange.coinbase.com

41–42 of 42 posts

Re: Coinbase – Exchange API

#41
post #32

Earlier quoted context omitted.

I have not rwad the article but from what you are describing it sounds like they probably should just use itch. I think anonymity in markets might be something we should experiment with getting rid of. Doing that right is hard because it is difficult to prevent sock-puppetry-spoofing which would require regulations and penalties for rat hole order shredding. So order anonymity is 'easier'. But now the exchange has to…

Orders should be anonymous or explicitly attributed. What I'm taking issue with is the grey zone coinbase has created where you are mostly anonymous but you might be leaking some identifying information via public client order ids. If they want identities to be public they could make it explicit via explicit market participant IDs.

I understand, I am just pointing out the ultimate situation the exchange arrives in once they (hopefully) patch up the vulnerability you described.

Making parties known via explicit market ids leaves them open to spoofers gaming that process and finding other people to sign up and shred their orders across a pool of ids the spoofer controls. (what I refer to as rat-holing and has been done here [1]). Note that even if a participant doesn't rat-hole/shred their orders doesn't preclude them from spoofing, it just makes it less profitable to do so, and easier for advanced counterparty's to track and recognize bad reputation of a spoofer.

Not making it explicit allows spoofers to trivially run their algorithms without having to rat-hole/shred so it lowers the barrier to entry for spoofers and blends their orders in among the non-spoof orders resting in the book making their strategies more effective.

In any case spoofing is a felony because of dodd-frank. [2]

The only question that remains is does this exchange fall under the scope of dodd-frank's provisions against disruptive practices? What will they do to ensure that spoofing doesn't take place on their exchange? The law doesn't contemplate an exchanges ability to opt-out of this provision. If they are running an exchange that allows people to spoof they could be seen as allowing those felonies to occur through indifference because it generates volume and hence makes them more money, making them an accessory to the crime. In any case someone will need to enforce the provision on their exchange otherwise a perverse moral hazard is created where some participants are willing to risk breaking the law because the worst they will expect is a slap on the wrist, while those that do follow the law are at a severe informational disadvantage.

1: http://www.fbi.gov/chicago/press-releases/2014/high-frequenc...

2: http://www.cftc.gov/ucm/groups/public/@newsroom/documents/fi...

Re: Coinbase – Exchange API

#42
Nice to have a ASCII-based REST API, but they should also add a proper binary protocol, which does not involve HTTP. Mainly to reduce parsing and encoding times.

(This is my personal and not my employer's opinion.)

Post reply on HN