Live data from Hacker News

Coinbase introduces Vault

blog.coinbase.com

11–20 of 63 posts

Re: Coinbase introduces Vault

#12
post #9

I'm assuming the vault doesn't improve security at all in the event that coinbase gets hacked and loses all of their btc?

Probably not as much as they'd like it to.

Brian Armstrong, CEO of Coinbase once said in an interview (http://techcrunch.com/video/coinbase-founder-brian-armstrong...) that they are dividing their bitcoins in hot and cold wallets.

A hot wallet only contains about 5% of the bitcoins the company has. Meanwhile, the other 95% of bitcoins they're holding are stored savely in a key-split cold wallet.

Now, the problem is: if some user wants a large amount of his bitcoins out of coinbase, the guys owing their part of the split private key need to take action to transfer that amount of bitcoins from the cold to the hot wallet, assuming the amount is > 5%.

So what I think "Vault" does is give them a better architecture for planing and organizing their hotwallet-coldwallet-process.

Re: Coinbase introduces Vault

#14
post #9

I'm assuming the vault doesn't improve security at all in the event that coinbase gets hacked and loses all of their btc?

What makes you so sure that Coinbase even has all of our bitcoin in the first place?

I said all of their bitcoin. Coinbase certainly doesn't have all of my bitcoin.

I didn't intend to make a conspiracy theory out of my question.

Re: Coinbase introduces Vault

#15
post #14

Earlier quoted context omitted.

What makes you so sure that Coinbase even has all of our bitcoin in the first place?

I said all of their bitcoin. Coinbase certainly doesn't have all of my bitcoin. I didn't intend to make a conspiracy theory out of my question.

The question means all of our Bitcoin at Coinbase. He's not making a conspiracy theory out of it - he's asking a legitimate question about whether or not Coinbase has all deposits accounted for or not.

Re: Coinbase introduces Vault

#16
post #9

I'm assuming the vault doesn't improve security at all in the event that coinbase gets hacked and loses all of their btc?

They're all offline, stored in real safety deposit boxes and bank vaults...

The keys are stored offline, but the BTC are always online. They are relatively safe against someone compromising your computers remotely. Against physical intrusions or insider attacks, not as much.

Re: Coinbase introduces Vault

#19
How about fixing the web app before adding more features? Their Ajax page loading hangs most of the time. Going straight to the URL works immediately, but it's not always possible.

Re: Coinbase introduces Vault

#20

Earlier quoted context omitted.

They're all offline, stored in real safety deposit boxes and bank vaults...

The keys are stored offline, but the BTC are always online. They are relatively safe against someone compromising your computers remotely. Against physical intrusions or insider attacks, not as much.

Physical intrusions can be dealt with by encrypting the keys, which I hope they are doing. Using a secret sharing scheme with physical tokens (e.g. smartcards) carried by chosen employees should reduce the danger of both of those attacks.
Post reply on HN