This site uses cookies. Browsing the site, you agree to the use of cookies. If you need more information, please visit the Cookies Policy page
Cryptocurrencies: 4077 / Markets: 34194
Market Cap: $ 1 031 011 991 137 / 24h Vol: $ 110 072 242 963 / BTC Dominance: 66.28652878817%

Н News

A crypto New Year’s resolution: Modernize security infrastructure

840_aHR0cHM6Ly9zMy5jb2ludGVsZWdyYXBoLmNvbS91cGxvYWRzLzIwMjAtMTIvNjZmYzg0MmUtM2E0YS00OWI0LThjYmItZmIyZjg2MTVjOTQ2LmpwZw==.jpg

In 2021 and in the years to come, the digital-asset space must take steps to identify and implement solutions for its security.

It’s safe to say that 2020 has been a banner year for the digital-asset space. Bitcoin (BTC) soared past its previous high, and many other prominent cryptocurrencies reached their highest levels since the heyday of 2017 and early 2018. Across the financial services industry, institutional voices are expressing reinvigorated interest in digital assets. The growth and maturation of this space has been impossible to ignore, engendering plenty of optimism among those who build the platforms and systems on which it runs.

Unfortunately, not all the headlines from the past year have been positive. Several well-known crypto exchanges and other organizations were hacked, which led to significant losses. Events like these are not only damaging to a firm’s reputation and potentially devastating for investors, they also erode hard-won trust in the digital-asset space among institutional investors and the public.

Many of these hacks could have been avoided if the companies in question had taken proactive steps to modernize their technology infrastructure. As we close this whirlwind year for digital assets, one of the industry’s top resolutions for 2021 should be to reexamine its approach to infrastructure and make changes to ensure that investors of all stripes can trade and transact with security, efficiency and peace of mind.

Let’s review three of the most consequential hacking events of 2020 and examine how a more intelligent approach to infrastructure could have led to a different outcome.

KuCoin hack: $275 million in customer funds stolen

On Sept. 25, crypto exchange KuCoin was on the receiving end of a major hack that affected its Bitcoin, Ether (ETH) and ERC-20 hot wallets. While initial analysis suggested the hackers stole around $150 million, estimates began to increase in the ensuing days, ultimately making it one of the largest hacking events in the history of digital assets.

Related: KuCoin hack unpacked: More crypto possibly stolen than first feared

As it turns out, the hack was the result of private keys being stolen. While still prevalent in the digital-asset space, private keys mean there will always be a single point of failure through which bad actors can claim unfettered access to hot wallets. Put simply, they are a business risk.

A better approach would have been to leverage multiparty computation protocols, which eliminate the need for private keys and sign every transaction in a secure, distributed way, coupled with an enforced governance-and-control mechanism.

In the KuCoin case, even if the exchange was successfully breached, the hacker would not be able to execute any transaction not authorized by the institution’s infrastructure-provided policy engine.

OKEx withdrawal freezing

For five weeks in October and November, investors were unable to make withdrawals from cryptocurrency exchange OKEx. In a letter to customers, OKEx revealed that one of its private-key holders was cooperating with a police investigation, which kept them out of touch with the company and prevented its multisignature authorization process from being fulfilled.

For a platform that users leverage to carry out important investment decisions, the idea that a single person becoming compromised could result in a critical functionality being disabled for over a month is clearly untenable.

There is a lesson here: When firms use blockchain features designed for security to implement a policy, the result is overwhelming inflexibility. This is one of the paradoxes of the digital-asset space — blockchain transactions are secure and irreversible, but without the right approach, that same rigidity can spell disaster if things go awry.

To prevent this, firms must ensure their infrastructure includes a policy engine that, while not compromising on security, enables a more flexible policy control for multiple approvers, including the separation of signing on and approval of transactions. With this kind of solution in place, OKEx’s ability to fully operate would not have hinged on the availability of any key person.

Nexus Mutual breach: $8 million stolen

These hacking events were not limited to exchanges, as evidenced by the December breach of Nexus Mutual, a decentralized finance platform that serves as an alternative to insurance. The hacker managed to access the personal device of CEO Hugh Karp and install a compromised version of MetaMask, which led to Karp inadvertently signing a transaction that sent 370,000 NXM, worth $8.2 million, to an attacker-controlled address.

The issue here has to do with locally run wallets. These local wallets are unable to provide an out-of-band policy engine, so there is no way to verify that a contract and counterparty address are whitelisted, that the amount and issuer comply with company policy, or that there are additional approvers for certain transaction parameters.

Enlisting a third party with a more flexible, secure approach to infrastructure is the way to address these risks. This is especially important to reduce counterparty address manipulation, which is a risk in many scenarios. Even in the unlikely event that a provider like this is breached, there are safeguards in place to verify counterparty addresses, giving firms multiple lines of defense.

Conclusion

While digital assets have gained a remarkable amount of momentum in the past several months, many organizations still need to improve their security infrastructure before true adoption of digital assets can start.

This is not meant to chastise these firms, which continue to do important work to serve the industry, but to identify where their focus should be to achieve future growth and bring digital assets to the mainstream.

For all these issues — private-key security, authorization structure, local wallets and more — there are approaches that can lead to more efficient, stress-free transacting and fewer headlines that set off alarm bells for the traditional investors we all want to reach.

The views, thoughts and opinions expressed here are the author’s alone and do not necessarily reflect or represent the views and opinions of Cointelegraph.

Itay Malinger is co-founder and CEO of Curv, a digital-asset security infrastructure firm. He draws on more than 15 years of cybersecurity experience in both the public and private sectors. Formerly, Itay was the director of enterprise security products at Akamai Technologies.

Source

  • 14.09.20 17:21 Попков С.А.

    ​здарова бандиты

  • 14.09.20 17:30 Серега Бумер

    Привет из Москвы

  • 14.09.20 17:35 Анастасия

    Давайте биткоин по 20к

  • 14.09.20 17:40 Лысый Боб

    Подарите книгу)))

  • 14.09.20 17:41 Светлана П

    Hello

  • 14.09.20 17:48 Николаев

    Понеслась

  • 14.09.20 17:53 Щука А

    Слава эфиру

  • 14.09.20 17:58 Захар Трофимов

    Надо изучать Defi , интересно

  • 14.09.20 17:59 Павел Павлов

    15$. профита всем

  • 14.09.20 18:01 Попко Колян

    Давайте биткоин по 20к

  • 14.09.20 18:08 Попков С.А.

    Круто

  • 14.09.20 18:13 Алексей С.

    ​гуд

  • 14.09.20 18:18 Попков С.А.

    Как успехи?

  • 14.09.20 18:24 Попко Колян

    👍👍👍👍👍

  • 14.09.20 18:26 Егор Шетюк

    Понеслась

  • 14.09.20 18:26 Захар Трофимов

    15$. Тюмень рулит😁

  • 14.09.20 18:35 Константин В.В

    Биток и эфир держу до лучших времён)

  • 14.09.20 18:38 Попко Колян

    ​ДОБРОГО

  • 14.09.20 18:43 Даниил

    Рига смотрит

  • 14.09.20 18:46 Вадим Никулин

    Всегда смотрю Вас!

  • 14.09.20 18:55 Захар Трофимов

    Минск на проводе

  • 14.09.20 18:56 Щука А

    Спасибо за ваш труд

  • 14.09.20 19:01 Никита

    Хай

  • 14.09.20 19:06 Вячеслав Левков

    Отложил биток на пенсию

  • 14.09.20 19:13 Попков С.А.

    Отличные эфиры у вас

  • 14.09.20 19:20 Щука А

    Привет из Москвы

  • 14.09.20 19:25 Алексей С.

    Всем РЕСПЕКТ

  • 14.09.20 19:27 Николай

    Вперед криптаны

  • 14.09.20 19:34 КРИПТАН

    Слышно гуд

  • 14.09.20 19:36 Егор Шетюк

    Подарите книгу)))

  • 14.09.20 19:44 Светлана П

    миллионерам привет

  • 14.09.20 19:48 Вячеслав Левков

    Крипта скам=)

  • 14.09.20 19:53 Тоха

    Понеслась

  • 14.09.20 19:57 Носов А.А

    Рига смотрит

  • 14.09.20 20:04 Прокоп

    Донаты принемаете?

  • 14.09.20 20:06 Носов А.А

    спасибо

  • 14.09.20 20:12 Юрий Ник

    Тюмень рулит😁

  • 14.09.20 20:18 Даниил

    миллионерам привет

  • 14.09.20 20:18 Нина

    17$. Биток и эфир держу до лучших времён)

  • 14.09.20 20:24 Никита

    18$. Задонатю вам баблишка)

  • 14.09.20 20:25 Вячеслав Левков

    Поможем парням лайками, я уже свой поставил

  • 14.09.20 20:26 Павел Скоровойтов

    Слава эфиру

  • 14.09.20 20:35 Носов А.А

    Привет, пацаны. Слышно, видно хорошо

  • 14.09.20 20:36 Тоха

    Шалом

  • 14.09.20 20:44 Лена

    Биток и эфир держу до лучших времён)

  • 14.09.20 20:47 Нина

    ​ку-ку)

  • 14.09.20 20:53 Попков С.А.

    Все good. Ростем потихоньку и падаем, как всегда

  • 14.09.20 20:58 Санек

    Всем РЕСПЕКТ

  • 14.09.20 21:01 Славка Орехов

    Спасибо за ваш труд

  • 14.09.20 21:10 Ваня А,

    Привет, пацаны. Слышно, видно хорошо

  • 14.09.20 21:13 Нина

    ​ДОБРОГО

  • 14.09.20 21:20 Никита

    Привет парни!

  • 14.09.20 21:25 Егор Шетюк

    Hello

  • 14.09.20 21:27 Вячеслав Левков

    ​ку-ку)

  • 14.09.20 21:33 Попков С.А.

    Тамбов с вами братва

  • 14.09.20 21:37 Серега Бумер

    Слава эфиру

  • 14.09.20 21:42 Ваня А,

    Подарите книгу)))

  • 14.09.20 21:50 Павел Скоровойтов

    Поможем парням лайками, я уже свой поставил

  • 14.09.20 21:54 Захар Трофимов

    Привет парни!

  • 14.09.20 21:56 Санек

    Отложил биток на пенсию

  • 14.09.20 22:03 Носов А.А

    Привет, пацаны. Слышно, видно хорошо

  • 14.09.20 22:03 Попков С.А.

    14$. Надо изучать Defi , интересно

  • 14.09.20 22:09 Николай

    Поможем парням лайками, я уже свой поставил

  • 14.09.20 22:14 Вадим Никулин

    Я из РБ слежу за вами давно💰

  • 14.09.20 22:17 Николай

    Поможем парням лайками, я уже свой поставил

  • 14.09.20 22:24 Лена

    ​Я снова с вами)))

  • 14.09.20 22:28 Носов А.А

    Отложил биток на пенсию

  • 14.09.20 22:31 Серега Бумер

    Тюмень рулит😁

  • 14.09.20 22:40 Светлана П

    Сморгонь 👍

  • 14.09.20 22:43 Вадим Никулин

    Отложил биток на пенсию

  • 14.09.20 22:46 Николаев

    Круто

  • 14.09.20 22:53 Ваня А,

    Люблю ваши трансляции, вы крутые!

  • 14.09.20 22:58 Вячеслав Левков

    Биток вперед!!!

  • 14.09.20 23:05 Носов А.А

    ​Привет всем с Украины!

  • 14.09.20 23:06 Носов А.А

    12$. ​здарова бандиты

  • 14.09.20 23:09 Константин В.В

    Отложил биток на пенсию

  • 14.09.20 23:14 Прокоп

    Екатеринбург на связи

  • 14.09.20 23:18 Николаев

    Круто

  • 14.09.20 23:25 Тоха

    ​здарова бандиты

  • 14.09.20 23:27 Попков С.А.

    Отличные эфиры у вас

  • 14.09.20 23:33 Лена

    Поможем парням лайками, я уже свой поставил

  • 14.09.20 23:39 Николаев

    Доброе утречко

  • 14.09.20 23:45 Лена

    Как успехи?

  • 14.09.20 23:49 Павел Скоровойтов

    ​ку-ку)

  • 14.09.20 23:51 Ваня А,

    Привет, пацаны. Слышно, видно хорошо

  • 14.09.20 23:57 Попков С.А.

    Хомяки тут

  • 15.09.20 00:01 Лысый Боб

    Привет, пацаны. Слышно, видно хорошо

  • 15.09.20 00:07 Санек

    Слава эфиру

  • 15.09.20 00:12 Щука А

    Екатеринбург на связи

  • 15.09.20 00:14 Нина

    23$. Лайк

  • 15.09.20 00:16 Юрий Ник

    Вперед криптаны

  • 15.09.20 00:25 Лена

    Биток и эфир держу до лучших времён)

  • 15.09.20 00:26 Попков С.А.

    Как успехи?

  • 15.09.20 00:33 Попко Колян

    Я из РБ слежу за вами давно💰

  • 15.09.20 00:40 Даниил

    миллионерам привет

  • 15.09.20 00:50 Константин В.В

    11$. Круто

  • 17.09.20 15:31 Trident

    купил билет на семинар который изначально планировался в субботу.... в пятницу не смогу послушать, гле посмотреть запись?

  • 24.09.20 12:08 Серго1985

    Как бабло зарабатывается??

  • 15.10.20 09:16 Vyacheslav

    отлично зарабатывается !)

  • 15.10.20 09:16 Vyacheslav

    у вас как?

To join the Chat, you need a free pro-blockchain.com account. Enter Registration