Summary: Everyone knows that when you give your assets to someone else, they always keep them safe. If this is true for individuals, it is certainly true for businesses. Custodians always tell the truth and manage funds properly. They won't have any interest in taking the assets as an exchange operator would. Auditors tell the truth and can't be misled. That's because organizations that are regulated are incapable of lying and don't make mistakes. First, some background. Here is a summary of how custodians make us more secure: Previously, we might give Alice our crypto assets to hold. There were risks:
Alice might take the assets and disappear.
Alice might spend the assets and pretend that she still has them (fractional model).
Alice might store the assets insecurely and they'll get stolen.
Alice might give the assets to someone else by mistake or by force.
Alice might lose access to the assets.
But "no worries", Alice has a custodian named Bob. Bob is dressed in a nice suit. He knows some politicians. And he drives a Porsche. "So you have nothing to worry about!". And look at all the benefits we get:
Alice can't take the assets and disappear (unless she asks Bob or never gives them to Bob).
Alice can't spend the assets and pretend that she still has them. (Unless she didn't give them to Bob or asks him for them.)
Alice can't store the assets insecurely so they get stolen. (After all - she doesn't have any control over the withdrawal process from any of Bob's systems, right?)
Alice can't give the assets to someone else by mistake or by force. (Bob will stop her, right Bob?)
Alice can't lose access to the funds. (She'll always be present, sane, and remember all secrets, right?)
See - all problems are solved! All we have to worry about now is:
Bob might take the assets and disappear.
Bob might spend the assets and pretend that he still has them (fractional model).
Bob might store the assets insecurely and they'll get stolen.
Bob might give the assets to someone else by mistake or by force.
Bob might lose access to the assets.
It's pretty simple. Before we had to trust Alice. Now we only have to trust Alice, Bob, and all the ways in which they communicate. Just think of how much more secure we are! "On top of that", Bob assures us, "we're using a special wallet structure". Bob shows Alice a diagram. "We've broken the balance up and store it in lots of smaller wallets. That way", he assures her, "a thief can't take it all at once". And he points to a historic case where a large sum was taken "because it was stored in a single wallet... how stupid". "Very early on, we used to have all the crypto in one wallet", he said, "and then one Christmas a hacker came and took it all. We call him the Grinch. Now we individually wrap each crypto and stick it under a binary search tree. The Grinch has never been back since." "As well", Bob continues, "even if someone were to get in, we've got insurance. It covers all thefts and even coercion, collusion, and misplaced keys - only subject to the policy terms and conditions." And with that, he pulls out a phone-book sized contract and slams it on the desk with a thud. "Yep", he continues, "we're paying top dollar for one of the best policies in the country!" "Can I read it?' Alice asks. "Sure," Bob says, "just as soon as our legal team is done with it. They're almost through the first chapter." He pauses, then continues. "And can you believe that sales guy Mike? He has the same year Porsche as me. I mean, what are the odds?" "Do you use multi-sig?", Alice asks. "Absolutely!" Bob replies. "All our engineers are fully trained in multi-sig. Whenever we want to set up a new wallet, we generate 2 separate keys in an air-gapped process and store them in this proprietary system here. Look, it even requires the biometric signature from one of our team members to initiate any withdrawal." He demonstrates by pressing his thumb into the display. "We use a third-party cloud validation API to match the thumbprint and authorize each withdrawal. The keys are also backed up daily to an off-site third-party." "Wow that's really impressive," Alice says, "but what if we need access for a withdrawal outside of office hours?" "Well that's no issue", Bob says, "just send us an email, call, or text message and we always have someone on staff to help out. Just another part of our strong commitment to all our customers!" "What about Proof of Reserve?", Alice asks. "Of course", Bob replies, "though rather than publish any blockchain addresses or signed transaction, for privacy we just do a SHA256 refactoring of the inverse hash modulus for each UTXO nonce and combine the smart contract coefficient consensus in our hyperledger lightning node. But it's really simple to use." He pushes a button and a large green checkmark appears on a screen. "See - the algorithm ran through and reserves are proven." "Wow", Alice says, "you really know your stuff! And that is easy to use! What about fiat balances?" "Yeah, we have an auditor too", Bob replies, "Been using him for a long time so we have quite a strong relationship going! We have special books we give him every year and he's very efficient! Checks the fiat, crypto, and everything all at once!" "We used to have a nice offline multi-sig setup we've been using without issue for the past 5 years, but I think we'll move all our funds over to your facility," Alice says. "Awesome", Bob replies, "Thanks so much! This is perfect timing too - my Porsche got a dent on it this morning. We have the paperwork right over here." "Great!", Alice replies. And with that, Alice gets out her pen and Bob gets the contract. "Don't worry", he says, "you can take your crypto-assets back anytime you like - just subject to our cancellation policy. Our annual management fees are also super low and we don't adjust them often". How many holes have to exist for your funds to get stolen? Just one. Why are we taking a powerful offline multi-sig setup, widely used globally in hundreds of different/lacking regulatory environments with 0 breaches to date, and circumventing it by a demonstrably weak third party layer? And paying a great expense to do so? If you go through the list of breaches in the past 2 years to highly credible organizations, you go through the list of major corporate frauds (only the ones we know about), you go through the list of all the times platforms have lost funds, you go through the list of times and ways that people have lost their crypto from identity theft, hot wallet exploits, extortion, etc... and then you go through this custodian with a fine-tooth comb and truly believe they have value to add far beyond what you could, sticking your funds in a wallet (or set of wallets) they control exclusively is the absolute worst possible way to take advantage of that security. The best way to add security for crypto-assets is to make a stronger multi-sig. With one custodian, what you are doing is giving them your cryptocurrency and hoping they're honest, competent, and flawlessly secure. It's no different than storing it on a really secure exchange. Maybe the insurance will cover you. Didn't work for Bitpay in 2015. Didn't work for Yapizon in 2017. Insurance has never paid a claim in the entire history of cryptocurrency. But maybe you'll get lucky. Maybe your exact scenario will buck the trend and be what they're willing to cover. After the large deductible and hopefully without a long and expensive court battle. And you want to advertise this increase in risk, the lapse of judgement, an accident waiting to happen, as though it's some kind of benefit to customers ("Free institutional-grade storage for your digital assets.")? And then some people are writing to the OSC that custodians should be mandatory for all funds on every exchange platform? That this somehow will make Canadians as a whole more secure or better protected compared with standard air-gapped multi-sig? On what planet? Most of the problems in Canada stemmed from one thing - a lack of transparency. If Canadians had known what a joke Quadriga was - it wouldn't have grown to lose $400m from hard-working Canadians from coast to coast to coast. And Gerald Cotten would be in jail, not wherever he is now (at best, rotting peacefully). EZ-BTC and mister Dave Smilie would have been a tiny little scam to his friends, not a multi-million dollar fraud. Einstein would have got their act together or been shut down BEFORE losing millions and millions more in people's funds generously donated to criminals. MapleChange wouldn't have even been a thing. And maybe we'd know a little more about CoinTradeNewNote - like how much was lost in there. Almost all of the major losses with cryptocurrency exchanges involve deception with unbacked funds. So it's great to see transparency reports from BitBuy and ShakePay where someone independently verified the backing. The only thing we don't have is:
ANY CERTAINTY BALANCES WEREN'T EXCLUDED. Quadriga's largest account was $70m. 80% of funds are in 20% of accounts (Pareto principle). All it takes is excluding a few really large accounts - and nobody's the wiser. A fractional platform can easily pass any audit this way.
ANY VISIBILITY WHATSOEVER INTO THE CUSTODIANS. BitBuy put out their report before moving all the funds to their custodian and ShakePay apparently can't even tell us who the custodian is. That's pretty important considering that basically all of the funds are now stored there.
ANY IDEA ABOUT THE OTHER EXCHANGES. In order for this to be effective, it has to be the norm. It needs to be "unusual" not to know. If obscurity is the norm, then it's super easy for people like Gerald Cotten and Dave Smilie to blend right in.
It's not complicated to validate cryptocurrency assets. They need to exist, they need to be spendable, and they need to cover the total balances. There are plenty of credible people and firms across the country that have the capacity to reasonably perform this validation. Having more frequent checks by different, independent, parties who publish transparent reports is far more valuable than an annual check by a single "more credible/official" party who does the exact same basic checks and may or may not publish anything. Here's an example set of requirements that could be mandated:
First report within 1 month of launching, another within 3 months, and further reports at minimum every 6 months thereafter.
No auditor can be repeated within a 12 month period.
All reports must be public, identifying the auditor and the full methodology used.
All auditors must be independent of the firm being audited with no conflict of interest.
Reports must include the percentage of each asset backed, and how it's backed.
The auditor publishes a hash list, which lists a hash of each customer's information and balances that were included. Hash is one-way encryption so privacy is fully preserved. Every customer can use this to have 100% confidence they were included.
If we want more extensive requirements on audits, these should scale upward based on the total assets at risk on the platform, and whether the platform has loaned their assets out.
There are ways to structure audits such that neither crypto assets nor customer information are ever put at risk, and both can still be properly validated and publicly verifiable. There are also ways to structure audits such that they are completely reasonable for small platforms and don't inhibit innovation in any way. By making the process as reasonable as possible, we can completely eliminate any reason/excuse that an honest platform would have for not being audited. That is arguable far more important than any incremental improvement we might get from mandating "the best of the best" accountants. Right now we have nothing mandated and tons of Canadians using offshore exchanges with no oversight whatsoever. Transparency does not prove crypto assets are safe. CoinTradeNewNote, Flexcoin ($600k), and Canadian Bitcoins ($100k) are examples where crypto-assets were breached from platforms in Canada. All of them were online wallets and used no multi-sig as far as any records show. This is consistent with what we see globally - air-gapped multi-sig wallets have an impeccable record, while other schemes tend to suffer breach after breach. We don't actually know how much CoinTrader lost because there was no visibility. Rather than publishing details of what happened, the co-founder of CoinTrader silently moved on to found another platform - the "most trusted way to buy and sell crypto" - a site that has no information whatsoever (that I could find) on the storage practices and a FAQ advising that “[t]rading cryptocurrency is completely safe” and that having your own wallet is “entirely up to you! You can certainly keep cryptocurrency, or fiat, or both, on the app.” Doesn't sound like much was learned here, which is really sad to see. It's not that complicated or unreasonable to set up a proper hardware wallet. Multi-sig can be learned in a single course. Something the equivalent complexity of a driver's license test could prevent all the cold storage exploits we've seen to date - even globally. Platform operators have a key advantage in detecting and preventing fraud - they know their customers far better than any custodian ever would. The best job that custodians can do is to find high integrity individuals and train them to form even better wallet signatories. Rather than mandating that all platforms expose themselves to arbitrary third party risks, regulations should center around ensuring that all signatories are background-checked, properly trained, and using proper procedures. We also need to make sure that signatories are empowered with rights and responsibilities to reject and report fraud. They need to know that they can safely challenge and delay a transaction - even if it turns out they made a mistake. We need to have an environment where mistakes are brought to the surface and dealt with. Not one where firms and people feel the need to hide what happened. In addition to a knowledge-based test, an auditor can privately interview each signatory to make sure they're not in coercive situations, and we should make sure they can freely and anonymously report any issues without threat of retaliation. A proper multi-sig has each signature held by a separate person and is governed by policies and mutual decisions instead of a hierarchy. It includes at least one redundant signature. For best results, 3of4, 3of5, 3of6, 4of5, 4of6, 4of7, 5of6, or 5of7. History has demonstrated over and over again the risk of hot wallets even to highly credible organizations. Nonetheless, many platforms have hot wallets for convenience. While such losses are generally compensated by platforms without issue (for example Poloniex, Bitstamp, Bitfinex, Gatecoin, Coincheck, Bithumb, Zaif, CoinBene, Binance, Bitrue, Bitpoint, Upbit, VinDAX, and now KuCoin), the public tends to focus more on cases that didn't end well. Regardless of what systems are employed, there is always some level of risk. For that reason, most members of the public would prefer to see third party insurance. Rather than trying to convince third party profit-seekers to provide comprehensive insurance and then relying on an expensive and slow legal system to enforce against whatever legal loopholes they manage to find each and every time something goes wrong, insurance could be run through multiple exchange operators and regulators, with the shared interest of having a reputable industry, keeping costs down, and taking care of Canadians. For example, a 4 of 7 multi-sig insurance fund held between 5 independent exchange operators and 2 regulatory bodies. All Canadian exchanges could pay premiums at a set rate based on their needed coverage, with a higher price paid for hot wallet coverage (anything not an air-gapped multi-sig cold wallet). Such a model would be much cheaper to manage, offer better coverage, and be much more reliable to payout when needed. The kind of coverage you could have under this model is unheard of. You could even create something like the CDIC to protect Canadians who get their trading accounts hacked if they can sufficiently prove the loss is legitimate. In cases of fraud, gross negligence, or insolvency, the fund can be used to pay affected users directly (utilizing the last transparent balance report in the worst case), something which private insurance would never touch. While it's recommended to have official policies for coverage, a model where members vote would fully cover edge cases. (Could be similar to the Supreme Court where justices vote based on case law.) Such a model could fully protect all Canadians across all platforms. You can have a fiat coverage governed by legal agreements, and crypto-asset coverage governed by both multi-sig and legal agreements. It could be practical, affordable, and inclusive. Now, we are at a crossroads. We can happily give up our freedom, our innovation, and our money. We can pay hefty expenses to auditors, lawyers, and regulators year after year (and make no mistake - this cost will grow to many millions or even billions as the industry grows - and it will be borne by all Canadians on every platform because platforms are not going to eat up these costs at a loss). We can make it nearly impossible for any new platform to enter the marketplace, forcing Canadians to use the same stagnant platforms year after year. We can centralize and consolidate the entire industry into 2 or 3 big players and have everyone else fail (possibly to heavy losses of users of those platforms). And when a flawed security model doesn't work and gets breached, we can make it even more complicated with even more people in suits making big money doing the job that blockchain was supposed to do in the first place. We can build a system which is so intertwined and dependent on big government, traditional finance, and central bankers that it's future depends entirely on that of the fiat system, of fractional banking, and of government bail-outs. If we choose this path, as history has shown us over and over again, we can not go back, save for revolution. Our children and grandchildren will still be paying the consequences of what we decided today. Or, we can find solutions that work. We can maintain an open and innovative environment while making the adjustments we need to make to fully protect Canadian investors and cryptocurrency users, giving easy and affordable access to cryptocurrency for all Canadians on the platform of their choice, and creating an environment in which entrepreneurs and problem solvers can bring those solutions forward easily. None of the above precludes innovation in any way, or adds any unreasonable cost - and these three policies would demonstrably eliminate or resolve all 109 historic cases as studied here - that's every single case researched so far going back to 2011. It includes every loss that was studied so far not just in Canada but globally as well. Unfortunately, finding answers is the least challenging part. Far more challenging is to get platform operators and regulators to agree on anything. My last post got no response whatsoever, and while the OSC has told me they're happy for industry feedback, I believe my opinion alone is fairly meaningless. This takes the whole community working together to solve. So please let me know your thoughts. Please take the time to upvote and share this with people. Please - let's get this solved and not leave it up to other people to do. Facts/background/sources (skip if you like):
The inspiration for the paragraph about splitting wallets was an actual quote from a Canadian company providing custodial services in response to the OSC consultation paper: "We believe that it will be in the in best interests of investors to prohibit pooled crypto assets or ‘floats’. Most Platforms pool assets, citing reasons of practicality and expense. The recent hack of the world’s largest Platform – Binance – demonstrates the vulnerability of participants’ assets when such concessions are made. In this instance, the Platform’s entire hot wallet of Bitcoins, worth over $40 million, was stolen, facilitated in part by the pooling of client crypto assets." "the maintenance of participants (and Platform) crypto assets across multiple wallets distributes the related risk and responsibility of security - reducing the amount of insurance coverage required and making insurance coverage more readily obtainable". For the record, their reply also said nothing whatsoever about multi-sig or offline storage.
In addition to the fact that the $40m hack represented only one "hot wallet" of Binance, and they actually had the vast majority of assets in other wallets (including mostly cold wallets), multiple real cases have clearly demonstrated that risk is still present with multiple wallets. Bitfinex, VinDAX, Bithumb, Altsbit, BitPoint, Cryptopia, and just recently KuCoin all had multiple wallets breached all at the same time, and may represent a significantly larger impact on customers than the Binance breach which was fully covered by Binance. To represent that simply having multiple separate wallets under the same security scheme is a comprehensive way to reduce risk is just not true.
Private insurance has historically never covered a single loss in the cryptocurrency space (at least, not one that I was able to find), and there are notable cases where massive losses were not covered by insurance. Bitpay in 2015 and Yapizon in 2017 both had insurance policies that didn't pay out during the breach, even after a lengthly court process. The same insurance that ShakePay is presently using (and announced to much fanfare) was describe by their CEO himself as covering “physical theft of the media where the private keys are held,” which is something that has never historically happened. As was said with regard to the same policy in 2018 - “I don’t find it surprising that Lloyd’s is in this space,” said Johnson, adding that to his mind the challenge for everybody is figuring out how to structure these policies so that they are actually protective. “You can create an insurance policy that protects no one – you know there are so many caveats to the policy that it’s not super protective.”
The most profitable policy for a private insurance company is one with the most expensive premiums that they never have to pay a claim on. They have no inherent incentive to take care of people who lost funds. It's "cheaper" to take the reputational hit and fight the claim in court. The more money at stake, the more the insurance provider is incentivized to avoid payout. They're not going to insure the assets unless they have reasonable certainty to make a profit by doing so, and they're not going to pay out a massive sum unless it's legally forced. Private insurance is always structured to be maximally profitable to the insurance provider.
The circumvention of multi-sig was a key factor in the massive Bitfinex hack of over $60m of bitcoin, which today still sits being slowly used and is worth over $3b. While Bitfinex used a qualified custodian Bitgo, which was and still is active and one of the industry leaders of custodians, and they set up 2 of 3 multi-sig wallets, the entire system was routed through Bitfinex, such that Bitfinex customers could initiate the withdrawals in a "hot" fashion. This feature was also a hit with the hacker. The multi-sig was fully circumvented.
Bitpay in 2015 was another example of a breach that stole 5,000 bitcoins. This happened not through the exploit of any system in Bitpay, but because the CEO of a company they worked with got their computer hacked and the hackers were able to request multiple bitcoin purchases, which Bitpay honoured because they came from the customer's computer legitimately. Impersonation is a very common tactic used by fraudsters, and methods get more extreme all the time.
A notable case in Canada was the Canadian Bitcoins exploit. Funds were stored on a server in a Rogers Data Center, and the attendee was successfully convinced to reboot the server "in safe mode" with a simple phone call, thus bypassing the extensive security and enabling the theft.
The very nature of custodians circumvents multi-sig. This is because custodians are not just having to secure the assets against some sort of physical breach but against any form of social engineering, modification of orders, fraudulent withdrawal attempts, etc... If the security practices of signatories in a multi-sig arrangement are such that the breach risk of one signatory is 1 in 100, the requirement of 3 independent signatures makes the risk of theft 1 in 1,000,000. Since hackers tend to exploit the weakest link, a comparable custodian has to make the entry and exit points of their platform 10,000 times more secure than one of those signatories to provide equivalent protection. And if the signatories beef up their security by only 10x, the risk is now 1 in 1,000,000,000. The custodian has to be 1,000,000 times more secure. The larger and more complex a system is, the more potential vulnerabilities exist in it, and the fewer people can understand how the system works when performing upgrades. Even if a system is completely secure today, one has to also consider how that system might evolve over time or work with different members.
By contrast, offline multi-signature solutions have an extremely solid record, and in the entire history of cryptocurrency exchange incidents which I've studied (listed here), there has only been one incident (796 exchange in 2015) involving an offline multi-signature wallet. It happened because the customer's bitcoin address was modified by hackers, and the amount that was stolen ($230k) was immediately covered by the exchange operators. Basically, the platform operators were tricked into sending a legitimate withdrawal request to the wrong address because hackers exploited their platform to change that address. Such an issue would not be prevented in any way by the use of a custodian, as that custodian has no oversight whatsoever to the exchange platform. It's practical for all exchange operators to test large withdrawal transactions as a general policy, regardless of what model is used, and general best practice is to diagnose and fix such an exploit as soon as it occurs.
False promises on the backing of funds played a huge role in the downfall of Quadriga, and it's been exposed over and over again (MyCoin, PlusToken, Bitsane, Bitmarket, EZBTC, IDAX). Even today, customers have extremely limited certainty on whether their funds in exchanges are actually being backed or how they're being backed. While this issue is not unique to cryptocurrency exchanges, the complexity of the technology and the lack of any regulation or standards makes problems more widespread, and there is no "central bank" to come to the rescue as in the 2008 financial crisis or during the great depression when "9,000 banks failed".
In addition to fraudulent operations, the industry is full of cases where operators have suffered breaches and not reported them. Most recently, Einstein was the largest case in Canada, where ongoing breaches and fraud were perpetrated against the platform for multiple years and nobody found out until the platform collapsed completely. While fraud and breaches suck to deal with, they suck even more when not dealt with. Lack of visibility played a role in the largest downfalls of Mt. Gox, Cryptsy, and Bitgrail. In some cases, platforms are alleged to have suffered a hack and keep operating without admitting it at all, such as CoinBene.
It surprises some to learn that a cryptographic solution has already existed since 2013, and gained widespread support in 2014 after Mt. Gox. Proof of Reserves is a full cryptographic proof that allows any customer using an exchange to have complete certainty that their crypto-assets are fully backed by the platform in real-time. This is accomplished by proving that assets exist on the blockchain, are spendable, and fully cover customer deposits. It does not prove safety of assets or backing of fiat assets.
If we didn't care about privacy at all, a platform could publish their wallet addresses, sign a partial transaction, and put the full list of customer information and balances out publicly. Customers can each check that they are on the list, that the balances are accurate, that the total adds up, and that it's backed and spendable on the blockchain. Platforms who exclude any customer take a risk because that customer can easily check and see they were excluded. So together with all customers checking, this forms a full proof of backing of all crypto assets.
However, obviously customers care about their private information being published. Therefore, a hash of the information can be provided instead. Hash is one-way encryption. The hash allows the customer to validate inclusion (by hashing their own known information), while anyone looking at the list of hashes cannot determine the private information of any other user. All other parts of the scheme remain fully intact. A model like this is in use on the exchange CoinFloor in the UK.
A Merkle tree can provide even greater privacy. Instead of a list of balances, the balances are arranged into a binary tree. A customer starts from their node, and works their way to the top of the tree. For example, they know they have 5 BTC, they plus 1 other customer hold 7 BTC, they plus 2-3 other customers hold 17 BTC, etc... until they reach the root where all the BTC are represented. Thus, there is no way to find the balances of other individual customers aside from one unidentified customer in this case.
Proposals such as this had the backing of leaders in the community including Nic Carter, Greg Maxwell, and Zak Wilcox. Substantial and significant effort started back in 2013, with massive popularity in 2014. But what became of that effort? Very little. Exchange operators continue to refuse to give visibility. Despite the fact this information can often be obtained through trivial blockchain analysis, no Canadian platform has ever provided any wallet addresses publicly. As described by the CEO of Newton "For us to implement some kind of realtime Proof of Reserves solution, which I'm not opposed to, it would have to ... Preserve our users' privacy, as well as our own. Some kind of zero-knowledge proof". Kraken describes here in more detail why they haven't implemented such a scheme. According to professor Eli Ben-Sasson, when he spoke with exchanges, none were interested in implementing Proof of Reserves.
And yet, Kraken's places their reasoning on a page called "Proof of Reserves". More recently, both BitBuy and ShakePay have released reports titled "Proof of Reserves and Security Audit". Both reports contain disclaimers against being audits. Both reports trust the customer list provided by the platform, leaving the open possibility that multiple large accounts could have been excluded from the process. Proof of Reserves is a blockchain validation where customers see the wallets on the blockchain. The report from Kraken is 5 years old, but they leave it described as though it was just done a few weeks ago. And look at what they expect customers to do for validation. When firms represent something being "Proof of Reserve" when it's not, this is like a farmer growing fruit with pesticides and selling it in a farmers market as organic produce - except that these are people's hard-earned life savings at risk here. Platforms are misrepresenting the level of visibility in place and deceiving the public by their misuse of this term. They haven't proven anything.
Fraud isn't a problem that is unique to cryptocurrency. Fraud happens all the time. Enron, WorldCom, Nortel, Bear Stearns, Wells Fargo, Moser Baer, Wirecard, Bre-X, and Nicola are just some of the cases where frauds became large enough to become a big deal (and there are so many countless others). These all happened on 100% reversible assets despite regulations being in place. In many of these cases, the problems happened due to the over-complexity of the financial instruments. For example, Enron had "complex financial statements [which] were confusing to shareholders and analysts", creating "off-balance-sheet vehicles, complex financing structures, and deals so bewildering that few people could understand them". In cryptocurrency, we are often combining complex financial products with complex technologies and verification processes. We are naïve if we think problems like this won't happen. It is awkward and uncomfortable for many people to admit that they don't know how something works. If we want "money of the people" to work, the solutions have to be simple enough that "the people" can understand them, not so confusing that financial professionals and technology experts struggle to use or understand them.
For those who question the extent to which an organization can fool their way into a security consultancy role, HB Gary should be a great example to look at. Prior to trying to out anonymous, HB Gary was being actively hired by multiple US government agencies and others in the private sector (with glowing testimonials). The published articles and hosted professional security conferences. One should also look at this list of data breaches from the past 2 years. Many of them are large corporations, government entities, and technology companies. These are the ones we know about. Undoubtedly, there are many more that we do not know about. If HB Gary hadn't been "outted" by anonymous, would we have known they were insecure? If the same breach had happened outside of the public spotlight, would it even have been reported? Or would HB Gary have just deleted the Twitter posts, brought their site back up, done a couple patches, and kept on operating as though nothing had happened?
In the case of Quadriga, the facts are clear. Despite past experience with platforms such as MapleChange in Canada and others around the world, no guidance or even the most basic of a framework was put in place by regulators. By not clarifying any sort of legal framework, regulators enabled a situation where a platform could be run by former criminal Mike Dhanini/Omar Patryn, and where funds could be held fully unchecked by one person. At the same time, the lack of regulation deterred legitimate entities from running competing platforms and Quadriga was granted a money services business license for multiple years of operation, which gave the firm the appearance of legitimacy. Regulators did little to protect Canadians despite Quadriga failing to file taxes from 2016 onward. The entire administrative team had resigned and this was public knowledge. Many people had suspicions of what was going on, including Ryan Mueller, who forwarded complaints to the authorities. These were ignored, giving Gerald Cotten the opportunity to escape without justice.
There are multiple issues with the SOC II model including the prohibitive cost (you have to find a third party accounting firm and the prices are not even listed publicly on any sites), the requirement of operating for a year (impossible for new platforms), and lack of any public visibility (SOC II are private reports that aren't shared outside the people in suits).
Securities frameworks are expensive. Sarbanes-Oxley is estimated to cost $5.1 million USD/yr for the average Fortune 500 company in the United States. Since "Fortune 500" represents the top 500 companies, that means well over $2.55 billion USD (~$3.4 billion CAD) is going to people in suits. Isn't the problem of trust and verification the exact problem that the blockchain is supposed to solve?
To use Quadriga as justification for why custodians or SOC II or other advanced schemes are needed for platforms is rather silly, when any framework or visibility at all, or even the most basic of storage policies, would have prevented the whole thing. It's just an embarrassment.
We are now seeing regulators take strong action. CoinSquare in Canada with multi-million dollar fines. BitMex from the US, criminal charges and arrests. OkEx, with full disregard of withdrawals and no communication. Who's next?
We have a unique window today where we can solve these problems, and not permanently destroy innovation with unreasonable expectations, but we need to act quickly. This is a unique historic time that will never come again.
bphosting.io was founded by a team of professionals and is registered in the offshore zone in Malaysia. We created the company with one goal – to provide our customers with anonymity and freedom on the Internet. Our bulletproof services allow customers to place any projects, as well as get reliable protection from organizations controlling the Internet. Our bulletproof hosting will help you avoid problems with stopping your site on the next complaint. We are professionals with extensive experience in this field and make sure that your sites work 24/7 and your privacy is not compromised. During our work we managed to place our equipment in the main offshore locations such as (Russia, Ukraine, Malaysia and several European and Asian countries). Due to such infrastructure for our hosting, we can afford host various illegal content. Bulletproof hosting has become extremely popular not only among illegal projects, but also among ordinary ones. Let’s still figure out why our secure hosting differs from conventional hosting. Currently, all actions on the Internet are controlled by special organizations such as Spamhaus, Icann, Legitscript etc. So if illegal content is posted on the hosting, such organizations send a complaint (abuse) to the hosting provider and upon receipt of such an abuse hosting blocks your site, often even without warning.The advantage of our bulletproof hosting is that we never block a client’s projects.Despite complaints, your project will be online on the Internet. We have entered into partnerships with offshore Data Centers, which allows us to ignore most of the incoming complaints, and even if we get an abuse to the DC channel we won’t stop the project we just transfer it to another location without violating the site’s uptime. Ordering our bulletproof hosting, you will never be left alone with another problem due to complaints you will always get a ready-made solution.If your business has problems with the law enforcement authorities this is not a problem if using our bulletproof hosting.We will place your site in an offshore location where the legislation will no longer work.You pay all bills using cryptocurrencies such as bitcoin which is very safe and anonymous. Recently our bulletproof hosting has become very popular among ordinary high-load projects. If you already have a lot of traffic, competitors will probably can start sending complaints to the hosting and registrarso it can also lead to blocking the site. Therefore, we recommend that you order our bulletproof hosting. We have flexible configurations on the servers, and the hardware protection against DDOS installed in the DC allows us to provide excellent uptime and protection for your sites.
Hi everyone We are Group of Young Rusian and australian Hackers, we will share with you all what we have and learn earlier . BUY BANK LOGINS, CVV FULLZ, DUMPS, 101 & 201, TRANSFERS, TUTORIALS, SPAM TOOLS, RDP, VPN, BOTNETS, SCAM PAGES Contact for help: [[email protected]](mailto:[email protected]) ICQ: 721808635 Buy Hacked PayPal, Bank Logins, WesternUnion, cc top up, cvv, smtp, RDP, inbox mailer, email leads, dumps, wares, with proofs of transactions and accounts. I am selling hacked western union, hacked PayPal accounts, bank logins, MoneyBookers, CC details/transfer, Hacked iTunes Accounts, Dumps, wares and fullz infos. I have many customers and buyers all over the world and they trust me and i promised to never break this chain till DEATH I'm offering many offers to earn online money through sources like western union transfers, bank transfers, moneybookers and PayPal transfers through offshore database. All transactions are offshore and anonymous and has no trace backs or chargebacks Come with us and enjoy the best products to make money , how to shop online ,buy your stuff freely and make much tax free Cash Our online support only to serious customers Country for sale : USA, UK, CA, AU, EU and more. Credit Card All Countries Western Union Money Transfers Card Dumps, Track 1+2 (with pin) Hacking Bank Login ,paypal world wide(bank transfers) Payment methods: Bitcoin, Perfect Money, Web Money Hopefully we can find a good customer to do business together long term You will feel happy, confident and safe to work with us, that's for sure PRIX MSR: MSR505 / MSR2000: 549 $ MSR505 / MSR300 *: 499 $ MSR505 / TA-48: 639 $ MSR206 / MSR3000: 729 $ MSR206 / MSR300: 549 $ MSR206 2× MSR400: 900 $ MSR206 2× MSR500m (Mini123): 875 $ MSR206 2× TA-32: 990 $ MSR206 2× CRM42: 869 $ MSR206 2×CRM41: 929 $ Western Union Transfer Rates $1000 Transfer = $100 Charge $3000 Transfer = $250 $4500 Transfer = $350 $7000 Transfer $500 Bank Transfers :- This is my responsibility is to transfer the required amount into your account from an offshore server, you have no trace back or charge backs, but it is your responsibility to handle the bankers and get safe your side. i will use my personal method for making clear payment so no dispute no charge back chances. (transferring all over the world) Info needed for Bank transfers : 1: Bank name 2: Bank address 3: Zip code 4: Account Holder 5: Account number 6: Account Type 7: Routing number 8: Swift number 9: BIC and IBAN Bank transfer will take maximum 6hours to show money in your bank account. Bank Transfer Rates: $1000 transfer = $100 Charges $3000 Transfer = $250 Charges $5000 Transfer = $400 Charges $10,000 Transfer = $800 Charges $15,000 Transfer = $1200 Charges MoneyBookers Transfer :- Offering moneybookers/skrill transfer worldwide. It is a instant payment/transfer. I’m using an offshore server to transfer moneybookers so there is no chargeback and negative feedback. (transferring all over the world) Money Bookers Transfer Rates : $1800 Transfer = $150 Charges � $3000 Transfer = $250 Charges $5000 Transfer = $400 Charges $9000 Transfer = $700 Charges � $15000 Transfer = $1200 Charges Paypal Transfer :- Paypal Transfer Rates: $1800 Transfer = $150 Charges $3000 Transfer = $250 Charges $5000 Transfer = $400 Charges $9000 Transfer = $700 Charges $15,000 Transfer = $1200 Charges CreditCard TopUP Rates:- $1800 transfer = $150 Charges $3000 Transfer = $250 Charges $5000 Transfer = $400 Charges $10,000 Transfer = $800 Charges $15,000 Transfer = $1200 Charges ***Also selling RDP, SMTP SERVERS, WEBMAIL, MAILERS, BULK MAILS (US/UK based) DATING ACCOUNTS, cPanel HOSTING, Hacked Panels, CC dumps. Thanks All. Contact: [[email protected]](mailto:[email protected])
Hello Everyone. My name is Ali Kazim, I am an Ethical Hacker Spammer from India Based in West Pennsylvania I am well specialize in PayPal transfer, bank transfers and logins and several others online transfer.. I spam and I hack good products and I have shopped my products particularly for sale.. Buy freshly Hacked PayPal logs, Bank wire logins, western union trf and bug, skrill account, cc top-up, cvv, smtp, rdp, inbox mailer, email leads, dumps, warez, virus, malware etc with proofs of transactions and accounts. Transactions are secured and with zero theft and no charge back SELLING HACKING SOFTWARE AND PRICE TAG BANK HACKING SOFTWARE = $800 For bank accounts. HACKDOO (TROJAN) = $400 Steal information from any target [email protected] VAMPIRE 3.5 = $200 Helps in hiding your ip unlimited. SOFTWARE BUG WESTERN UNION VERSION 2017 = $600 CONTACT ME QUICKLY -- Gmail : [[email protected]](mailto:[email protected]) Cell : +18148131306 I also have good deals on iTunes Accounts, Dumps, warez and fullz infos.. I'm offering many offers to earn online money through sources like western union transfers, bank transfers, money-bookers and PayPal transfers through offshore databases. All transactions are offshore and has no trace backs or charge-backs here are the Rates List with Explanation :- Western Union Transfer :-Transferring Western Union all over the world and it takes maximum 15 mins You Will Get MTCN Code With Sender Info + Amount And Then You Can Pick Up Funds From Any Western union Store. (transferring all over the world) Info needed for WU transfers : full name and location Transfer rate $1500 cost $200 $3000 cost $300 $5000 cost $400 $10000 cost $700 $15000 cost $1000 Bank Transfers :-The amount will be transferred into your account from an offshore server.. I will use my personal method for making clear payment so no dispute no charge-back chances. (transferring all over the world) Info needed for Bank transfers :- 1: Bank name 5: Account number Bank transfer will take maximum 6hour Transfer rate $3000 cost $300 $5000 cost $400 $10000 cost $750 $20000 cost 1200 MoneyBookers Transfer :-Offering moneybookers/skrill transfer worldwide. It is an instant payment/transfer. i use an offshore server to transfer moneybookers so there is no charge-back and negative feedback. (transferring all over the world) MoneyBooker Transfer Rates : $1800 Transfer = $150 Charges $3000 Transfer = $250 Charges $5000 Transfer = $400 Charges $9000 Transfer = $700 Charges $12000 Transfer = $1000 Charges $15000 Transfer = $1200 Charges PayPal Transfer :-Using hacked and verified PayPal accounts to transfer PayPal account to account transfer if you are a genius then you can easily dodge PayPal and enjoy big free online money from it. This depends upon you and this is the most safest way to earn money. (transferring all over the world except banned/blacklisted countries) PayPal Transfer Rates : $1800 Transfer = $150 Charges $3000 Transfer = $250 Charges $5000 Transfer = $400 Charges $9000 Transfer = $700 Charges $15,000 Transfer = $1200 Charges Credit-card Top Up Rates:- $1800 transfer cost $150 $3000 Transfer cost $250 $5000 Transfer cost $400 $10,000 Transfer cost $800 $15,000 Transfer cost $1200 ***Also selling RDP, SMTP SERVERS, WEB-MAILS, MAILERS, BULK MAILS (US/UK based) DATING ACCOUNTS, cPanel HOSTING, Hacked Panels, CC dumps. ***TERMS AND CONDITIONS If anyone wants to do regular business with me then you must have more than one bank account, PayPal, Money Booker and fake ids for western union because after 2 or 3 transfers your PayPal and Wu ids will be black listed and banned. so you are advised to have a personal account to transfer funds to and also withdraw for cash or make purchases online. Payments are accepted via Perfect Money, Bitcoin, Bank Transfer, Ether.. *****100 % SECURED AND PROOF OF TRANSACTIONS**** A GUARANTEED TERMS AND CONDITIONS FOR EVERY GOOD WORK DONE FOR YOU.
Numbers on the screen or how digital payment systems make the market fair?
https://preview.redd.it/6m1gp2mvotx41.png?width=1160&format=png&auto=webp&s=a83f0346d8008c17968d6a240cfba8fe3fe4e2aa Continuing the trend of practicality characteristic of the XXI century, paper money is gradually disappearing from our lives, giving way to more practical digital storage. However, the digitized banking that we now use every day is still far from perfect. For starters, it is completely controlled by third parties. No one owns the numbers they see on the screen — control is entirely owned by third parties, such as banks. Banks create money out of thin air, and credit is a prime example of this. Money is no longer printed when someone takes out an overdraft or mortgage-it is simply created out of nothing. Moreover, these banks charge disproportionately high fees for the services they provide, and these services are outdated and impractical today. For example, it is impractical to pay a Commission to spend your money abroad, as it is impractical to wait a few days to verify the transfer of a small amount from You to your relative. All this makes no sense in the interconnected and instantaneous world in which We live today. Thus, the monetary system has ceased to be practical, it is replaced by a higher form of value storage. In this particular case, it is replaced by a faster and safer system that eliminates expensive operations and gives control to the person. https://i.redd.it/quc2bgmxotx41.gif Money that you have in your Bank account can be considered a virtual currency since it does not have a physical form and exists only in the Bank book. If they lose the book, your money will simply disappear. These are just numbers that you see on the screen. The numbers are stored on the hard drives of Bank servers. https://i.redd.it/4nvhydtzotx41.gif Do you open a regular app and think you have money? They are just bytes of the computer system. Today’s global payment infrastructure moves money from one payment system to another through a series of internal Deposit transfers between financial institutions. Since these transfers occur in different systems with a low level of coordination, the calculation of funds is slow, often 3–5 days, capturing liquidity.
How do payments work?
When you make a money transfer, for example, from your Bank card to the Bank card of a friend or acquaintance, you see an instant transfer, so to speak, moving numbers from you to the Recipient. For the user, the transfer is carried out instantly, and the exchange of obligations between the participants of the process takes place within 3–7 days, the User does not know about it and hardly ever thinks about it. https://preview.redd.it/rl4aai81ptx41.png?width=1400&format=png&auto=webp&s=cdfa10f0d68442aac84c14e3bae5a52e92651878 When you make a payment at a supermarket or any other point of sale, at the time of payment, information from the POS-terminal is sent to the acquiring Bank — then the acquiring Bank sends a request that passes through the payment system (Visa or MasterCard) and then transmitted to Your Bank, which confirms the operation. At this point, there is no write-off of funds. The funds are temporarily held, and the actual withdrawal will take place within a few days, the maximum processing time is up to 30 days. https://i.redd.it/8njxgxq2ptx41.gif
Currency transactions and payments abroad
You may have noticed that after making a transaction in a different currency, such as yen or dirhams, or any other currency that differs from the currency of your account or buying an item abroad, the amount charged may differ from the amount that was reflected immediately after payment.
Why is this happening?
As soon As you have made a transaction with Your Bank card — the local Bank transfers the information to the payment system: Visa or MasterCard — the payment system converts the currency used into the billing currency.
Billing currency — the currency that will be used for payment with the payment system by your Bank that issued the card. For the US, the billing currency is the dollar, in Europe — the Euro.
The billing currency may also differ depending on the issuing Bank — the Bank that issued your debit card. For example, some banks use the billing currency — Euro when making payments with MasterCard cards in the United States, which will lead to additional costs when converting euros into dollars. If the payment is in other currencies, the payment scheme will become more complicated and, accordingly, its cost will be more expensive. The transfer rate from one settlement currency to another is set by the payment system: Visa and MasterCard. If the currency of your Bankcard is the same as the currency of the payment system, the payment will take place without additional operations. For example, You have a dollar card, you make a payment in dollars in the United States, and if you make a payment with a dollar card in Europe, your Bank will convert the amount at its exchange rate, which will lead to additional costs. There are exceptions, some European banks can use dollars for settlements, but this is more an exception than a rule. Also, if, for example, you pay for purchases in China using a Bank card in euros, then double conversion is inevitable. Thus, payment in dollars is universal all over the world, except for the European Union countries. The dollar is a global currency and is therefore often used for binding in international settlements. Now we understand that due to differences in the account currency and the differences in the VISA or MasterCard payment system, additional conversions may occur, which will lead to additional bank fees. as a result, the actual payment amount will differ from the amount debited from your card. In addition to paying for conversion in the payment system and paying for currency conversion in your Bank, some banks charge an additional fee for conducting a cross-border transaction.
Where do we lose money when making debit card payments?
Euro-Dollar, or in the case of processing payment via MasterCard in Turkey, Turkish lira-Euro and additional conversion on the side of the issuing Bank (your Bank) Euro — Dollar.
Currency conversion by an acquiring bank;
The difference between the exchange rate on the purchase date and the write-off date. We purchased at a rate of 0.91 euros per dollar, and the write-off occurred at a rate of 0.94 euros per dollar.
A large number of currency conversions.
The greater the number of them, the more we will lose when buying. For example, when paying in the UAE or China, buying a product for the local currency, we understand that the number of conversions increases several times.
If we touch on the topic of international translations, we will encounter additional nuances:
This is the payment processing time. International payments can be processed within 3–5 days, as mentioned above, which in our dynamic time — it interferes with the comfortable use of the system.
Restrictions on the amounts;
Possible requirements for certain documentation for payment confirmation;
Additional fees and commissions, sometimes hidden fees.
It is not always possible to make a transfer quickly and when necessary due to these restrictions. All this confirms the complexity of the operations and additional commissions that the user pays.
And now back to the numbers on the screen, this topic affects not only banks but also centralized cryptocurrency exchanges:
You top up your Deposit on the exchange in cryptocurrency-then you use numbers inside the exchange, and real funds are most often stored on “cold storage” for which administrators or other responsible persons are responsible.
Only when you make a withdrawal from the exchange to your wallet-you are sent real funds (tokens or cryptocurrency).
The same applies to centralized applications and online services that deal with cryptocurrencies: There are many services, both online and apps, that are centralized, regardless of what they will be called: Bitcoin wallet or bitcoin exchange. This means that when you add funds to an account in such a wallet, the funds are stored on the developecompany’s side. In simple words, all your funds are stored in the wallets of the system’s creators. If you use a centralized app, you have a risk of losing funds. Although the application is called cryptocurrency, it does not affect its main principles — it is decentralization. In other words, using systems where there is a Central authority, especially in the cryptocurrency market — the risk increases, so we recommend using decentralized systems for storing currency to reduce risks to a minimum.
Decentralizationis the process of redistributing, dispersing functions, forces, power, people, or things from a Central location or governing body.Centralizationis a condition in which the right to make the most important decisions remains with the highest levels of management.
Using decentralized tools, for example, a local Tkeycoin wallet or a Multi-currency blockchain tkeyspace wallet — Your funds belong only to You and only You can use them, which eliminates the risks of third-party bankruptcy, and such a decentralized architecture can also protect against natural disasters. Given that there is no central server that can be damaged in a natural disaster, the system can work even if there are 2 nodes. https://i.redd.it/sb6i2ladptx41.gif In addition to force majeure situations, you protect your funds from theft and any sanctions from third parties-in our time, this is very important. The owner of Tkeycoin does not need Bank branches, does not need additional verifications, and does not need permission to use, transfer, or even transport Tkeycoin. You can easily carry $1 million worth of Tkeycoin in your pocket and even in theory not know any troubles. https://preview.redd.it/uvw9vfyeptx41.png?width=1400&format=png&auto=webp&s=14b89acca3568fdc5eb82d986aaa2710219ced91 Besides, it is extremely convenient and safe to store even multibillion-dollar capital in Tkeycoin. Imagine that you have a lot, a lot of money, and you need a safe place to store it. Where do you apply? Of course, the Swiss Bank, Yes, but it can easily freeze your accounts and you can easily lose your savings. In recent years, many banks are actively fighting against gray non-cash funds (including offshore ones), and every month more and more legal proceedings are organized on this basis. https://preview.redd.it/vodiuq5gptx41.png?width=1400&format=png&auto=webp&s=31ab44da4431b0159ef1213db7e37c6fd92d5b0a The fact is that serious money, for the most part, has a gray tinge, and only a tiny fraction of billions and millions are clean for the law. That is why their owners are often called to court, subjected to pressure, forced to leave the country, and so on. If your money is stored in Tkeycoin, you will not be subjected to such pressure and will avoid the lion’s share of troubles that usually accompany accounts with many zeros. Using peer-to-peer systems — you will not be called by a Bank Manager and require documents or a fraudster who asks for Your card number and SMS for confirmation. This is simply not the case, wallets are encrypted, and using different addresses guarantees privacy. As for fees for transfers, there are no Visa or Mastercard payment systems, as well as additional fees that we discussed above.
How are payments made in the Tkeycoin peer-to-peer payment system?
https://i.redd.it/9ftct10iptx41.gif As soon as you sign a transaction, it is sent to the blockchain and the miners are engaged in its confirmation, for which they take a symbolic Commission. Let’s look at an example, the key rate is $1, the transfer fee will be 0.00001970 TKEY or 0.00000174 TKEY.
Accordingly, commissions are almost zero. In Europe, on average, you will pay $15–20 for a small Bank transfer. For example, now sending 1 million dollars to BTC, You will pay a Commission in the area of ≈3–8 dollars. Just think, 1 million dollars, without restrictions, risks, and sanctions, and most importantly, the transaction will be the available day today, and you paid an average of ≈5 dollars for the transfer.
Transactions in the Tkeycoin blockchain
Now let’s touch on the topic of how a transaction in the blockchain goes. Once you have sent a transaction, it will be available to the Recipient. The transaction takes place instantly and the User sees not” numbers on the screen”, but real funds-cryptocurrency. This is very convenient when you make any transactions and the Recipient needs to make sure that the payment came. In the full node-there is a choice of confirmation blocks — this is the amount after which you can use the received cryptocurrency. When sending, you can select the number of confirmations:
As we can see, you can also set a weekly confirmation if necessary. The minimum recommended number is 3 blocks. by default, the full node (local wallet) has 6 blocks installed. The presence of this number of confirmations ensures that Your block will not be forged and will be accepted by the network. Each new transaction that receives network approval is sent to mempool, where it waits for miners to confirm it. When a miner takes a transaction to include it in the next block, it automatically receives the first confirmation.
Generating blocks in the TKEY network
A block in the TKEY network is generated within 6–10 minutes. the network automatically corrects the complexity and time of block formation. Thousands of transactions or a single transaction can be placed in a block. https://i.redd.it/f9d17k8uptx41.gif Transactions work faster in the TKEYSPACE app because we have already enabled new algorithms and this is now the fastest and most convenient way to exchange various digital currencies. https://preview.redd.it/nnz5krdvptx41.png?width=1400&format=png&auto=webp&s=fee452ae6389c8f46d97357777193ed2b10bc4bc Anyway, using the full node is also one of the safest ways to store and send Tkeycoin cryptocurrency, and most importantly, the full node stores a full copy of the entire blockchain, which benefits the network and provides protection from information forgery. The more popular the project becomes, the more load is placed on the network itself. For example, 10,000 transactions passed in one block that was processed quickly, while the other 10–20 transactions in another block hung for a longer time, so temporary “pits” may appear. To deal with them, we are working on implementing additional chains-separate chains that are created for cross-transactions, which ensures fast payments under heavy load. For the global system — we get a shipment around the world in 6–10 minutes, in cross-chains in 10 seconds. In comparison with the global payment system, which processes cross — border payments within 3–5 days, this is a huge advantage. If we add liquidity to this, we will get a perfect payment system. https://preview.redd.it/2d0uu4gxptx41.png?width=1200&format=png&auto=webp&s=ae5f2f0bc8b7c7dedd1814eb32e97092a6330c3a Also, you should not forget that if you did not sync with the network and sent a transaction, the transaction may hang in its memory pool and you will have to perform several actions to solve this situation. Here we must understand that syncing with the network is an important point because if you have a connection failure in the Internet Bank, the payment will also not be processed. After all, it will not be sent to a specialist for confirmation. If you are currently experiencing any delays with transactions, this is due to the transition of CPU mining to GPU, as soon as miners switch to new mining methods, the confirmation of blocks will be consistently fast. In conclusion: blockchain is a new technology and many terms, concepts and how it all works are still difficult for many to understand and this is normal from innovation. In many countries, the word cryptocurrency and blockchain are synonymous and no one wants to understand the reality, most people believe that if the blockchain, it means it is related to trading on the cryptocurrency exchange. No one thinks about the real usefulness of certain solutions that will become commonplace for Us in the future. For example, the Internet banking system dates back to the ’80s of the last century, when the Home Banking system was created in the United States. This system allowed depositors to check their accounts by connecting to the Bank’s computer via their phone. In the future, as the Internet and Internet technologies develop, banks are beginning to introduce systems that allow depositors to get information about their accounts via the Internet. For the first time, the service of transferring funds from accounts was introduced in 1994 in the United States by the Stanford Federal Credit Union, and in 1995 the first virtual Bank was created — Security First Network Bank. But, to the disappointment of the founders of the project, it failed because of strong distrust from potential customers, who, at that time, did not trust such an innovation. Only in 2001, Bank of America became the first among all banks that provide e-banking services, the whole user base for this service exceeded 2 million customers. At that time, this figure was about 20 % of all Bank customers. And in October of the same year, 2001, and the same Bank of America took the bar in 3 million money transfers made using online banking services for a total amount of more than 1 billion US dollars. Currently, in Western Europe and America, more than 50% of the entire adult population uses e-banking services, and this figure reaches 90% among adult Internet users. Life changes, and in the bustle of everyday work — we do not even notice how quickly all processes change. We are experiencing a technological revolution that is inevitable. https://i.redd.it/afcfj3rzptx41.gif
Another really huge issue with the btc community in general, and this reddit especially, is the lack of nuance on price. And again, an unwillingness to accept critique. There are several scenario that can play out with price, but in some of those scenario, we may even see a huge price pump, while *still failing at adoption*. And I think that's an important distinction to make. Just because wallstreet pumps the price for reasons that only concern the rich and institutions, does not equate to adoption. It does not equate to us making vital changes for the betterment of the network and adoption. It just doesn't. Wallstreet is perfectly content with hyper regulated bitcoin that is totally irrelevant for the common man and unadopted and unused, they are perfectly fine treating bitcoin as a glorified sovereign bond and international form of settlement. That is how the institutions and rich see it. They see it much like they see bonds and gold, and are willing to treat it as such. This is even a positive in some regard because it brings monetary transparency into the banking and wealth sector. But it does not address cypherpunk, emancipatory politics, or global poverty, or individual sovereignty. And it is acheived largely through extreme centralization and hyper invasive surveillance. Be clear, they can pump the price to 250,000 while still controlling everything through Patriot Act, AMLD5, NDAA, and FACTA and the banking secrecy Act. All of which Bitcoin is entirely ideologically incompatible with. But that's just fine, because the rich already comply with those laws (mostly). They already price in the regulatory and compliance costs of an institution, of an offshore tax haven. That's just it. IT's fine for them to do this to btc, because the laws are designed for them. They create the barriers only they can afford to play in, while hurting it for everyone else. The average common man in the world, and any developing country should be able to easily acquire btc without kyc. Period. It shouldn't be a surveillance state. I recently listened to Peter McCormack interview a darkmarket guy and I completely agree. We need to engineer away from on ramps, we need to engineer away from payment gates that involve fiat, and we need to all use coinjoiners and mixing technology. It needs to be the standard. There are so many reasons to use coinjoining for non illegality. Privacy is a fundamental need. And internet 4.0 for finance is contingent on a lot of technology. These aren't really coins either. It is backbone technology to better facilitate bitcoin. But we have to have layer two solutions. It doesn't matter whether it's RSK or plasma, or both, we just need the secondary layer to pay for distributed processing, server function, matching, liquidity, file storage, atomic swaps, network gas, etc. DeFi network value cannot be conflated with the supply and demand of btc itself, we don't need permissioned side chains, we need permissionless open source side chains and interoperatibilty platforms that will protect the privacy of bitcoin and facilitate it on decentralized exchanges. On exchanges that cannot be taken down. To do that we need staggering amounts of technology innovation and thoroughput, that will require people to host nodes, mine and stake these ancillary services to protect the backbone of bitcoin commerce. Anyone who is into toxic maximalism. Let it be known that you are willfully promoting corporate bitcoin supported by massive centralized players who will treat it as a bond or settlement statist instrument. You're promoting the support of bitcoin on an entirely captured regulatory framework and an entirely captured unsafe unsecure regular internet controlled by the clearnet and amazon and google and heavily surveiled. .Org just privatize for fuck sakes. And any DNS can be compromised, any .com site can be siezed. This normal backbone is entirely inappropriate for bitcoin. Centralized exchanges and payment apps like cash app are entirely inappropriate for bitcoin. You should be able to visit a IFPS site, connect a hardware wallet to any DEX or DAPP and immediately trade with the same speed and liquidity of binance and bitmex. The user interface should be simple and approachable to the layman. We need a liquidity interbank controlled by SPV server and dark node. Payment incentives for people to host liquidity to the network on plasma, radon, cosmos, uniswap, eventually all the DEX will simply be connected by interchain liquidity. Crypto has to be extremely unfettered. The regulators and wallstreet have strangled it and will continue to do so. Some people have forgotten that this is a battle for financial sovereignty and protection against wealth confiscation. Only when they realize that they can't control us, will they be forced to sit down at the legislative table and negotiate with common people. You have to bring your government to heel.
Bitcoin Isn't Meant For Conventional Westphalianism (Republicanism)(Statism)
Let me give you an idea of the vantage point and perspective I come from. I *am a quant, and a trader, and someone well read in law* I hate wallstreet, because I understand how the western economy works, and obviously I understand the technicals of trading and quant work. So I know the angles they play. And I understand regulatory behavior, I have a background in environmental regulatory work ( left because it's corrupt no surprise). You people obsessed with price at any cost or calling everything FUD have no long term view of things. If we get a economic collapse, a real crash, *the happening*, Bitcoin is going into the hundreds again. At this point, bitcoin is dependent on wallstreet, dependent on the same economy we supposedly disagree with. They've written the laws in the united state to only benefit the rich and institutions, and banned us off almost all exchanges. The only thing americans can use are basically three major names with piss poor liquidity and catastrophic fees. No one even talks about this. You HAVE to trade on unregulated exchanges to get by. Losing binance was a massive loss. The rich and powerful in united states have plans for bitcoin totally antithetical to cypherpunk. We don't just need mainstream adoption, we need mainstream adoption of bitcoin WITH mainstream adoption of things like bisq and wasabi. This needs to become the norm, and yet they instead are planning on geofence locking bitcoin on a system of white listed exchanges, institutions, and wallets, trapping and tagging kyced bitcoin. The thing people have to realize is that the money laundering that is done, is done through Deutsche bank and HSBC and the likes, by the drug cartels, human right violating dictators, war criminals , shell companies for defense companies and spin offs of intelligence agencies. It's all done with cash and the us dollar and banks. The worst people who run the super PAC for election, the worse people who hold trillions offshore and dominate the third world with multinational corporations, Russian oligarchs, all of them use the system and its loop holes to do all the things that they are trying cite as a reason to impose on bitcoin all of these extreme regulations. They want secrecy for themselves. Period. They want to control and oppress us, and use secrecy for themselves. Most of the reason western governments are broken is because of multinational conglomerate and monopolistic economic cartels buying out regulatory agencies. Period. It's called a inverted totalitarianism. (From Lawerence Lessig's Lost Republic). The economic cartels own the regulatory agencies. No regulatory body in the united states does what it really should do. But more often the opposite, specifically to protect industry, and their trillions offshore. The people who have all this wealth and control these profit entities don't even keep the money in the states or pay taxes. The truly rich live above the law while wrecking democracy. They want to have the ability to do the worst possible shit with the same level of secrecy that monero implies. So not only do we need encryption and privacy coins and features and anonymous untraceable access to bitcoin just to protect ourselves from them, we need to empower ourselves by having the same level of financial access that they do. Think about it. What is the effect of the rich institutions making so many loopholes that allow them to move money and participate in functions of the market that the average person is prohibited from? It encourages and enables their ability to subvert democracy secretly with the very financial crimes they accuse of us. So we need to take very deadly serious interchains and DAPP and DEX and DEFI, the wasabis, the mixers, monero, commerce adoption, and INFRASTRUCTURE that supports it. You people acting like maximalist can be so dense FFS. OPSEC. The world doesn't need bitcoin full node on backdoored windows 10 with zuck and the nsa watching you take a shit. The hardware and ancillary gear and infrastructure that supports bitcoin matters. Linux matters, user interface matters, commerce acceptance matters, server technology and security matters, even the processor matters, there are IBM and RISC V chips now,. The internet and bitcoin along with it needs to be violently dragged into open source models. Corporatization and closed gardening and the mcdonaldification of bitcoin is going to end in tragedy. Bitcoin really is intended to be an anarchist apparatus. Bullshit to the citadel loving maximalist power tripping on some sort of libertarian randian american centric fantasy. You need to pay attention to why democracy doesn't work, why our political systems are broken, why these aspects of government only seem to empower the worst aspect of wallstreet criminality and financial crisis. Because it's how a late republic behaves, it's inherent in the flaws of republicanism, in electoral politics, in these hierarchical regulatory bodies, which are in no way self governing. Our regulatory bodies are the literal opposite of Don't trust, Verify but more Don't verify, Trust.
GF notified by IRS about accounts she didn't know about. (US)
GF got a letter from the IRS stating she has not been reporting income from stocks as well as having an offshore account. None of these things is true, as far as she knows; unfortunately it's possible her ex-husband does know about it. When she got married she was very young (19) and through their entire relationship he would have her sign documents and she did so willingly without even looking at them. She did it with their first house and didn't even know how much the house cost. She wasn't allowed to look at the mail that came to their home. She didn't know what bills were being paid or anything, he did all the financial responsibilities within that marriage. He loved playing the stock market and this is the only way she sees how they were able to afford the lifestyle they had at the time. Now, many many years later she received a letter from the IRS basically saying she is being investigated for tax fraud. What legal ground does she have if she "willingly" but "unknowingly" signed and opened accounts for this purpose? If this is indeed done by her ex-husband does she have any legal footing to shift this entirely onto him? The divorce was extremely clean, no lawyers or anything. Assets were not split as she just took her belongings in her car and left, leaving him with everything so I doubt any disclosure of assets was performed. Also a couple years ago she had to sign her name off of the deed for their house and she didn't even know she was on it at the time. Not sure how serious this could be, its the IRS so of course it's not a simple manner but clearing it up seems like it could be impossible if she was not involved in someone forging her name. If the assets are in her name and have been drawn upon by her ex-husband (because she obviously hasn't) would that give her some evidence of her unintentional involvement? Even if she was unintentionally involved does that even matter to the IRS? It is possible though that maybe the iRS is coming after her for any tax evasion her ex-husband performed during the marriage. I don't know the laws on how long something like this could go without being pursued by the IRS (if a statue of limitations even exists for the IRS). Of course this is all assuming her ex-husband had anything to do with this and it's not just some kind of mistake or form of mistaken identity on the IRS's part (wishful thinking). Luckily everything we share together is in my name completely, the house, the vehicles, nothing of significant value has her name attached to it currently. Thankfully I hadn't signed anything over to her as I initially planned on doing so to cover her in case something bad happened to me. Edit So today at work I get notifications that one of my accounts has been logged into from a different address. I do some checking, verify IP addresses and notice that the address is close. I check my works IP, not it. I check the location I'm at, not it. I check the IP address of my home and it matches. I have a server I RDP into (my plex server) and my google account is attached to it. I check my Gmail and see some old bitcoin services I signed up for but never used had been accessed from my IP address as well. I've locked down my server but now I'm slightly paranoid. My GF is not very tech savvy. Yet with this info that was presented today about the IRS and minutes later my home IP address being used to login to accounts..I dont know. I doubt the 2 are connected but man is this starting to feel like some kind of weird movie plot!!
Would it be worthwhile to build a 1Broker knock-off, or too risky?
TLDR: I built a 1Broker knock-off but after seeing 1Broker's fate, I wonder if it's even worth pursuing. *** I've been working on a Bitcoin-denominated prediction market in my spare time as a way to learn jQuery. I've met some really cool Bitcoin enthusiasts and traders on Reddit over the years and we just bet each other on the site for fun. (I won't post the link here because I don't want this to come across as a promo, but rather as a question). Compared to 1Broker, my work is admittedly 'amateur hour' stuff because well, I'm an amateur -- but we enjoy it. My plan was to grow the exchange, increase liquidity and stability, hopefully narrow the bid/ask spreads and open it up to other non-US Bitcoin enthusiasts and traders. But after reading what happened to 1Broker, I'm wondering if my project should be scrapped. I thought I was safe by avoiding all of Broker1's mistaks: used non-US unseizable TLD (top-level domain), offshore registrar, offshore servers, paid for everything in Bitcoin, never deal with fiat, no corporate structure, lock out US users, etc. Further, I force users to assert non-US residency in order to register. But 1Broker did a lot of this stuff too and still got smacked down by the feds. Do you think I should just abandon the project and find another hobby or are there some simple steps I can take to protect myself? Example: Should I use Tor instead of clear web? Should I block IPs originating from the US instead of just having user click the non-US checkbox at registration? As a one-man shop, I don't have the infrastructure to ask each and every user for personal information to prove they're not in the US. Even if I did, I think it's an invasion of privacy, especially for a user who just wants to bet $30 on a game or short the price of Gold. Anyway, I'm kind of on the fence on this one. If you were me, would you just shut it down and move on, or look for a path forward?
Apologies for typos and grammatical errors; wanted to get this out as soon as possible for those that weren't able to watch the live stream. Cleaned up formatting to make it more readable.
While this isn't a 100% word-for-word transcript, the overtone of the meeting should have been conveyed. SEC and CFTC want protections for consumers, but don't want to outright ban crypto. I was under the impression that both agencies were well-educated, but understaffed. They both want to introduce protections for customers and investors and go after scam artists, but don't want to impose any restrictions or regulations that would be bad for crypto as a whole (both from a security perspective, and a technological innovation perspective). Overall a huge positive.
Touched on the definition, use, history, all-time-high, market cap, negative news
Mentioned that the techonology has positives to transform the financial landscape, transfer risk
Volatility, 1000% rise, 60% fall, compared to DOW Jones
touched on scam artists/hackers, undereducated market participants
mentioned there are regulatory gaps, potentials for abuse
neither SEC/CFTC has authority to police all aspects
mentioned some analogies to the dotcom bubble
may be used to fund illicit activity
says they need to do more to get ahead of the curve
"don't forget your day jobs to pursue and punish misconduct", mentioned the 3 big banks being punished recently
crypto brings us to a new age, but don't overlook the princilpes of going after the bad guys and being tough
estimated highest market cap $700 bn; promising new technology
great efficiencies, including capital markets; seek to WORK WITH those who seek to bring innovation
Crypto currencies - replacement for dollars
widely known introduced as substitutes
make it easier and cheaper ot buy and sell goods
verification and fees/costs eliminated
ICOs - stock offering
stocks and bonds, under a new label
security being offered is a virtual token
"if it functions as a security, it IS a security"
doesn't mean you are investing in blockchain ventures
market have less oversight than traditional securities
if it looks like a stock exchange, don't take comfort
no capital and conduct requirements
many ICOs are conducted illegally
creators not following securities laws
those who try to circumvent the SEC are in their crosshairs
do not have control over the regulation of the markets that exchanges exist in
"do not view this as a request for increased SEC jurisdiction"
"I believe every ICO I have seen is a security"
we are working with the DOJ to enforce laws
story about how his kids recently showed an interest in Bitcoin
"we must foster their interest, but crack down hard on those that abuse"
response should have several elements:
learn as much as we can - Lab CFTC to engage with innovators
put things in perspective - as of this morning, Bitcoin 113 bn market cap. less than the market cap of McDonald's. sometimes compared to gold; value of gold dwarfs Bitcoin at 8 trillion market cap
educate consumers - podcasts, webinars, visits to libraries, outreach to seniors
legal authority - "The CFTC does not regulate the dozens of cryptocurrencies"; through their authority, they have enforcement over spot coin markets; analyze manipulation
tough enforcement - they have already launched civil actions, more will follow overall take: wants to work to foster education but introduce protections
Suggesting that perhaps one or both of SEC/CFTC may or should have full control
we should all come together and have a coordinated plan for dealing with the virtual currency market
far from how the stock market is addressed
asked by Crapo if there needs to be additional measures, responded "we may"
FINCEN has been active with AML/KYC
there isn't a comprehensive structure to deal with this
cross-border and international concerns; what challenges?
international nature means patchwork is not sufficient
FINCEN reports that these currencies are used for
encourages FINCEN to continue pursuing this
Markets have been global
Challenge working with overseas and bringing regulations
Challenge requires a lot of new thinking
Encourage to work together to decide how the regulation should look
ICOs raised $4bn globally
SEC focused to protect investors
not clear how much was raised in the U.S., due to unregulated basis; "significant portion"
cooperation between SEC and CFTC regulating Bitcoin but doesn't mention consumer protection bureau CFPB
we're in the enforcement perspective, i can check on that
report that "SEC has stopped enforcement actions against wall street firms"
"I saw that report"; found it annoying; gestation period is 22-24 months, latency period
we've put out a comprehensive report; i'm happy with that
we're pursuing our securities laws vigorously
troubled by a statement "SEC might lose 100 of its enforcement staff by not hiring those who leave"
how are you going to stay on top of everything else we've talked about as well as virtual currencies
personnel is my biggest challenge at the moment
we have a hiring freeze - natural cost, trouble finding people, etc
would receive the "greatest return for additional bodies"
is that the message that you're not the cop it should be?
not at all
I hope you will ask for money and flexibility
I've been very straight about money and value that can be added
Federal reserve is the biggest bank regulator we have
how are you going to put together a task force to deal with crypto currencies before this gets out of control
treasury secretary has brought us together to talk about this
"the funny thing is, they only work for their purported purpose if they're integrated with the financial service"
we are going to be coordinating responses; needs to be clear as to what we're doing
do you need additional legislation
we may be back to ask for that
virtual; go to a virtual doctor, virtual currency, etc
"i started out with pencil and paper in school"
Lack intrinsic value, lack liquidity
gained money going up, lost money going down
don't know where the floor is
relation between Bitcoin value and the cost of mining
charts plotting the correlation
the floor isn't zero, because there is some cost
"think there is something to the value of the crypto exchange"
"I'm not seeing the benefits manifesting themselves in the market yet"
"I'm interested in protecting the main street investors; they should see that"
in the securities world, there are rules that dictate how much you have to tell someone about what they're investing in
we will give you every tool you need to do your job and to hire every person you need to execute that
(essentially) do you have any cryptologists?
emerging area; could always use more horsepower
hired the industry's first "chief innovation officer"
started Lab CFTC
formed virtual currency task force
brought 3 cases against bitcoin fraudsters
used bypass authority for additional resources (13% over budget)
Bitcoin isn't the only one; there are seemingly new ones every day
are you tracking them all?
is someone looking at the long-term systemic effects
eerily similar to late-90s derivatives
Bitcoin is one of many; important to know that many are fraudulent
"MyBigCoin" which became known as "MyBigCon" - Ponzi scheme; we went after them
relatively small market, but we have to watch it
we have had to watch it because they're integrated with the markets we do oversee
on systemic - agrees with Giancarlo
if people are getting ripped off, that is an issue
"I used a pen and pencil as well"
fascinating to see how things are moving
we keep coming back to dollars and cents
new type of exchange; bartering
could avoid determination of the value of the dollar and cents
how do you tax? how do you recognize income?
seems that have to be filled, but basics that a lot of us don't understand
how do you respond to ICOs?
definition of a security is broad
"when you're offering me something and i give you money and the purpose of me giving you money is to profit from your actions going forward"
is Bitcoin a commodity or a security or is it both?
has characteristics of both
is a "medium of exchange, store of value, or a means of account"
we hear a lot of people holding - "HODL - hold on for dear life"
30 year old niece bought some years ago, is holding on
in this regard, it's a commodity
we are looking for fraud and manipulation so that people like his niece are protected
Jan 26th Bloomberg "SEC weighs a big gift [...] blocking class action lawsuits"
wants to get a straight yes/no - "do you support this enormous change in SEC policy"
bottom line - "I can't dictate whether or not this issue comes to us, but I'm not anxious to see a change in this area"
change can't happen without your approval
I'm only 1 of 5 votes
I'd guess there will be at lest 2 votes against it
It would take a long time
I'll let you get away with that
SEC's mission is to protect; not throw under bus
advisers that put fees, kickbacks for recommending product ahead of interest of clients
I want to know that you will not weaken the protections for retirement savers
that's what I'm trying to do - the relation between a broker and their client is regulated by no less than 5 people (the SEC)
want to make sure you're not jeopardizing investors
insufficient standard, lack of clarity, "the standard is only as good as the remedy available"
what dollars do you actually collect when someone does you harm?
if you want to strengthen it, i'm with you
who pays for frivolous lawsuits?
regulatory arbitrage, hard to trace
South Korea, China
was a largely unregulated space
each country is now taking regulatory measures
there's a lot happening beyond the understanding of your average investor
what do we need to do to combat this?
regulatory arbitrage, price arbitrage
different regional and international market
regulation - i think some time ago there was a perception Bitcoin was off the regulatory grid
enforcement / ICOs - we're using our full authority
we will go after misconduct
pump and dump
unregulated exchange, ability for price manipulation
we've taken 3 cases in the last few weeks, more to come
digging deep, learning a lot, seeing a lot
we are working the beat hard
what about retail investors?
formed partnership with CFPB (Consumer Financial Protection Bureau)
Bitcoin is one of the most frequently searched term on library computers
enhancing outreach to educate people coming to the library
getting the word out - financial intermediaries
are you protecting retirement investments
seniors seem to be the prey of choice - not just for Bitcoin
we seek to prosecute these predators
article from Kentucky "Bitcoin is my potential pension"
what would you do to protect them?
troubling, which is why we're putting out so much material
"if it sounds too good to be true, it is"
"if you're giving them money, you'd better be prepared to lose it"
disruptive technologies, but you shouldn't bank on it
pumping all of your money into a disruptive technology has a very high probability of not working out
"there will be winners, but there will be many losers"
want to ensure it's not used against terrorist groups and countries like N Korea
working with FBI; will require cooperation among multiple organizations
also has a dark web working group
when was the last time you bought a fund?
a year or two ago, index funds
did you read the fine print?
not cover to cover
so what's the point of all this over-disclosure if nobody's reading it?
why do we want to do the same for Bitcoin?
adequacy of full disclosure
"I don't think the disclosure we have right now works"
good for lawyers / financial advisers, but right now, we over-disclose
how far should we go to protect people from themselves?
how far do you think we ought to go here? should we just go after the shysters and fully disclose?
what is the right way to deal with this new technology?
we want to deal with ICOs; don't want to go too far
our securities laws work pretty well, but disclosure can be improved
we have to have disclosure that works, and helps the helpless people
if we see the same continued growth, we may see the market cap at 20 trillion dollars by 2020
we may see the same transformation take place
we are going to have to wrap our hands around this
not sure what the right answer is, but this could systemically rise to an FSOC-level event
if this does keep going, is this a systemic issue?
want to go back to separating these two things
should regulate ICOs like securities
false disclosure is fraud, period
so much more to be done
Ethereum - creating "file sharing or extra computer time"
are these in your realm?
if it's an ICO that promises to deliver server time, it's a security
worried that we need a much more coordinated effort
could be as transformational as wireless technology
it is important; we are all working to understand our authorities
bitcoin futures are different; fully transparent and regulated, compared to Bitcoin that's opaque and unregulated
ICOs should be taken under our regime
Putting aside Bitcoin and other distributed ledger, what do you think the value is?
Without Bitcoin, there would be nothing. everything grew out of it.
applications range from financial services and banking, to charity dollars are spent, refugee, access to banking for those who don't have it
66 million tons of soybeans were traded using Bitcoin
allow regulators to do really close market surveillance with precision
challenges, but the potential is significant
agree the potential is significant
hope people pursue it vigorously
DOW Jones fell 4.6%; dollar seen 2% inflation or less; Bitcoin seems to be very volatile in comparison
we have seen volatility but in our world, we're used to it
emergence of futures to provide those who are exposed to it
don't really know what's driving the volatility
not related to foreign currencies
must be something different
lot of volatility compared to what they're supposed to be a substitute for
(essentially) so how does that bode to its claim?
it would not be a very effective means of exchange
with the volatility and delays, there's a significant risk
(quick shout out to) rogue nations, hackers, etc
under what circumstances do the SEC and CFTC have a role in regulating this?
fraud and manipulation - will not hesitate to take authority
what about manipulating to avoid U.S. sanctions?
I'll have to look into that
are there gaps that could create vulnerabilities?
part of a virtual currency task force; includes the fed and FINCEN
meeting with FINCEN this week to get some discussion of cooperation started
seen increase in ICOs; investors using digital tokens
grew from $96mil in 2016 to $4bil in 2017
celebrity promotion - Floyd Mayweather, Kardashian, et al
investors may not understand true risk when they see a product promoted by celebrities
we put out an alert that if you promote a security, you are taking on securities law liability
can you walk us through why the SEC is not comfortable with approving ETFs with crypto currencies?
we've made it clear that there are some issues - price discovery, custody, volatility
don't want to approve an ETF product with a cryptocurrency underlier without working out these issues
don't ETFs mitigate those concerns? are crypto currencies different?
MGT act - modernizing government technologies
create a fund for federal agencies to rid themselves of legacy technology
allows access to dollars; move to cloud
i would be delighted that there isn't a SEC/CFTC hack in the papers soon; advise strengthening cyber security
Kodak and Burger King investments
companies are using block chain as an opportunity to pump up stock prices
Long Island Ice Tea - Long Blockchain
nobody should think it's okay to chain your name to something that contains block chain when you have no idea what you're doing
any time there's something new that can raise the value of their stock without the underlying goods being there, it's not good
ICOs misrepresenting their affiliation where there are wild claims
"Our big task is bringing in enforcement cases and letting people see that"
3bn Bitcoin have been hacked, $500bn hack weeks ago, MtGox
what can buyers do to get their money back?
when you engage in investing online with an offshore entity, the chances that we can do anything to get your money back are very low
for the underlying spot markets, we don't have the authority to enforce safeguards and protections; this is a problem
"It's the old axiom "buyer beware"."
(in regards to the stock market) "Is this perhaps more than ordinary correction?"
I asked my staff and the federal government the same question
nothing to indicate any of our systems didn't indicate properly
largest volume since 2016
Neither single stock nor circuit breakers triggered
Nothing that came out of this are concerning
Is it profit taking? Is it a spook?
Interest rates? Fed has info we don't have?
Economy high, unemployment low?
Combination? Can we really say?
I can't really say. Lots of opinions.
Our job is to look at the systemic risks.
I've not seen anything.
"Markets up? More people bought than sold. Market down? More people sold than bought."
Markets are very complex. Fundamentals are sound. Doesn't appear to be any significant breeches.
Some ICOs are legitimate, some are just Ponzi schemes
"It's now so bad that Facebook recently banned all ads for virtual currencies"
How do we make ICOs safer?
Companies raised more than $4bil
How many companies registered with SEC?
Can you say just a word as to why that's so?
the gatekeepers haven't done their job. we've made it clear what the law is.
there are thousands of private placements. we want them to raise capital. but we want them to do it right.
folks somehow got comfortable that this was new and it's okay.
We started this year, hosting a quality web hosting for ideal prices. First we started with Bitcoin now we are pleasure to announce that we are accepting Monero. Monero has a great privacy and that is best thing for our new clients. Why to choose us instead of other web hosting? Imagine in other hosting providers you need to provide your details to share your privacy, and some of them require your number to confirm or your identification card. We are negative to this, because we are making you anonymous. There Terms of Usage offcourse, we are not OFFSHORE hosting, we are totaly LEGAL hosting, we provide only web hosting where you can host LEGAL things only. We have high speed servers in Netherlands. You can order one of our packages, starting from 5$. After payment is made you will get instant activation, check client panel and your email after payment is confirmed via CoinPayments. Visit us and give a try https://www.hostcrypto.net Cheers.
In light of the recent shutdown of KAT and Torrentz, I thought it'd be pertinent to start a collection of tips and advice for potential future operators of trackers / torrent index sites. So, asking the /trackers community, what steps would you guys take to avoid being shutdown? Practices:
Route all your managerial activity over TOR and VPN(s).
Don't connect your TOR and VPN activity to the clearnet.
Use privacy focused email accounts which aren't directly tied to your personal identity (examples).
Do NOT host anything in the US.
Either don't accept payments, or only accept payments through bitcoin (after being tumbled, held privately).
Run as a non-profit. Donations should be spent solely on maintenance and covering server costs. Raking in tons of cash through ads draws attention. 56
Actively avoid popular public services known to be in cooperation with copyright trolls (Google, Apple products, social media, etc.).
Take advantage of already well-established encryption tools for protection (GnuPG, Veracrypt, LUKS if you're on a *nix OS, etc.).
Keep a low profile (not bragging about accomplishments, letting community develop naturally via word-of-mouth instead of advertising, trying not to act conspicuously).
Have a backup plan already in place when you inevitably screw up (releasing anonymized archives + source code).
Be prepared to rapidly and successively switch domain names / hosing services.
Do NOT use real whois info when registering your domain(s). 1
Have clear, secure lines of communication with the community as well as any staff. My recommended setup is: IRC with OTR, SSL/TLS, IP cloaks, and relays aka bouncers (more info). Look into warrant canaries.
Regularly audit your site for leaks (whois lookup protection, server hardening techniques, proper database security, basics like sql injection... ).
Is this a good way to launder bitcoins into your bank account?
Is this a good way to launder your bitcoins? Start a popular website that offers a service like the Internet Archive (which currently accepts Bitcoin for donations). Start a public donation campaign in the style of Wikipedia and Internet Archive saying how you need to keep the servers up and running, with a huge sitewide banner on top of every page, and accept credit card, PayPal, and Bitcoin. Funnel your drug money into your website through tumbled bitcoins. The Erotic Review also accepts Bitcoin. I wonder if they launder any money through that. How fast, how slow should you do it? Should you funnel these bitcoins into your domestic checking account, or should you funnel these bitcoins into an offshore Cayman Islands account?
Our most recent AMA with Marcin Zduniak discussing the latest technological developments at trade.io
AMA with CTO Marcin Zduniak We conduct regular AMA sessions on our official Telegram channel. Join us to ask questions and get the latest news and updates from trade.io. Telegram: https://t.me/TradeToken Marcin, Hello everybody! Q. Are we still on time to get FX, API and App by end of the year (i.e. less than 4 weeks from now)? OK, heavy topics just from the beginning, Let's start with FX: We have an internal commitment for a specific date: Dec. 27th and dedicated team works tirelessly to make it happen. No delays or unexpected events so far, we are on track although it is very tight timeframe, but...Please note this is Phase 1 of a 2 Phase launch. Phase 1 being FX being available to trade.io exchange clients only and crypto only deposits. Phase 2 which we’re expecting completion in early Q1 of 2019 will have stand-alone sites for our FCA & OffShore Entities, TIO Markets UK Ltd. & TIO Markets Ltd... These stand-alone entities will allow clients to register directly from the site and will allow funding in crypto and a variety of fiat methods. Additionally, there will be a complete affiliate program offering top-tier CPA programs with state of the art tracking software. So, back to the topic, mobile experience next: So, you already know we work on a couple of mobile products: iOS and Android mobile native trading applications and also on the mobile-friendly version of our exchange website. The most significant changes related to the mobile-friendly website are planned for the release this Monday and there will be most likely 1-2 subsequent releases improving some smaller UI experience defects on the subsequent Mondays… As for the mobile native apps: iOS is planned to be dev-complete and ready for internal testing next week. We are planning to involve some of our dedicated community members in the Beta testing phase as soon as the app code is signed off by our security experts after the review of the potential security holes… As for the Android, it will come around 2 weeks later, but we still believe we will be dev ready this year. It means that the iOS version should be released to the public by the end of this year and Android in early January after all the alpha, beta and security tests are concluded. Q. Hey Marcin, recently I saw something new in trade.io exchange. It had smooth and have many tuning actions for it. It is ok. But I think our developing speed in trade.io should more rapidly. Update maybe more twice of week and finally result must be perfect. Do use end users are tester for this new main functions: FX, app. A. I disagree, for now. With the size of our team, once-a-week releases seem to be balanced. We can focus the whole 1 week on the delivery and one day on the shipment. If we are going to ship more often we will produce less in this time. Some companies practice daily shipment -- it might be something we will consider some time in 2019, but at this moment it does not really make sense here. Marcin: “You asked about API too, let me finish with your first question please. Some of our institutional partners and liquidity providers already use our API interface since a couple of months, but this was not yet the API we intended to open for the general consumption…” Xalat: “Exactly. Volume is mostly driven by bots, hence APIs are important” Marcin: “We have dedicated team who worked on the trading API and also market data feeds API that we could offer widely. The API is ready, we are now conducting functional tests, load tests and security penetration tests on it…” Q: When can we start using the exchange from the algo-trading tools that would require robust API access? A. The plan is to have all the test steps concluded early next week and if no serious defects found we should be able to release it in the production environment in another 1-2 weeks, i.e prior to the end of this year. We’ve take meticulous care and time to ensure we’ll be offering one of if not the best API solution available, and hope to attract quite a few institutions with its robust functionality. Q. What kind of query/minute can we expect as limits? In market fetching and throwing orders please? A. We are targeting to be able to sustain 100 txs/s for now with our current load tests. But some further scalability improvements are also in making (bit the delivery date early next year). Q. Any news on the fiat trading platform? A. We are in the technical preparation phase of this project, as the business discussions already concluded. No specific release date yet, but it should not take too long (definitely early Q1). Q. Are you planning for bug bounty programs or acknowledgements for reporting security vulnerabilities? A. No formalized bounty program planned so far, but fair security vulnerability disclosures of serious security issues to [[email protected]](mailto:[email protected]) will be definitely appreciated and rewarded. Q. Would different platforms have different websites with various measures of KYC procedures, or will there be a uniform account system behind? A. Can't answer to this yet, compliance related topics to Phase 2 are not 100% ironed out yet. Q. Do you user’s end users as tester for this new main functions: FX, app. A. We have a dedicated QA team, so this is for the manual tests. But we are also concluding work on our. A automation extensive tests suite. It should make our future deploys much smoother and of higher quality, more issues should be discovered before the actual change is deployed to the live servers. Q. Will we start seeing more ERC20 tokens soon? They don't require as much work as the separate blockchains if I've understood correctly? A. Correct, another 4-5 is going to be added next week. Q. Would the market maker bot start working again after the upcoming of APIs? A. Market maker already works, using our private api, no plans to change it in the near future. But the new api will be used by the other 3rd party partners and potentially by other market makers. Q. Marcin what is your plan in relation to the Bitcoin Cash split? A. Generally, exchanges took a side either on the SV or ABC fork. Our initial plan before the fork even happened was to support one or the other depending on which chain would prevail, but we never took any side... Right now it is clear both forks are here to stay, hence the decision is to support both. Before we open the deposits and withdrawal options we need to implement replay attack protection to our internal wallet addresses, as the respective forks did not implement it as part of their own code changes. It is not really something that we wanted to do, as we preferred to focus on the new coins implementation, but as the fork happened we have no option, we took some of our engineering’s off from the other chains integration and work related to the replay attack protection is ongoing. We will most likely resume trading next week, and open deposits and withdrawals for both forked chains in the following week. Though don’t treat it yet a firm commitment. Q. Besides the new stuff, how is the rework of the older code coming along? A. We are not dumping anything, nothing like that. But more automated tests and more code coverage clearly shows where the defects are and where the team focus has to be put. It is an ongoing process, what will in fact never ends (refactoring of the code is part of the development process). Q. How about a simple community voting tool which Tokens / Coins to add to the Exchange? A. Yes, we’re going to be implementing this, once we’ve put all the “basic” chains and additional ERC-20 tokens that are currently missing from the exchange. Q. what about Partner With Fund To Allow US Participation in Liquidity Pool? A lot of Americans waiting for this! A. That’s not necessarily a tech issue, legal will handle this, and obviously everyone will be advised accordingly Q. Can you comment and market predictions Q1 2019 encryption? A. Any market comments, views, will be coming from Dave Hannigan, our Chief Dealer who in addition to his daily market commentary, will start popping onto Telegram from time to time. Q. Besides the new stuff, how is the rework of the older code coming along? Very good, we’ve brought on quite a few blockchain dev’s that have been working through the previous code, and much has been revised respectively. Q. What was the reason for fast-tracking MakerDAO Implementation? It really wasn’t fast tracked per se, but rather part of our weekly deployments. I’m comfortable enough now with the exchange to be more aggressive in adding tokens, and Dai was one of the tokens that we were able to add for the 10th. Q. In your opinion, what would be the best addition to the product to attract the average Joe - FIAT currency or the mobile app? I don’t believe there is any ONE thing that will attract the average Joe, but rather a combination of everything. The average Joe, in our opinion, is looking for the most well rounded exchange offering the most features and configurability. Hence the reason we’re focusing on implementing much as I have discussed.
For Part 1, please visit: Why ICO participants should AVOID ICOs unless they ABSOLUTELY TRUST the issuer.BEWARE all ICOs and ICO issuers!!!!! Part 2 Luvdub Coin recently made a public announcement for our airdrop and in less than 1 week, received submissions ranging in the thousands despite our intense KYC-AML procedure. At this time, I felt compelled to write an article due to the alarming frequency of fraudulent activity and stolen data our verification team has witnessed in these past few days. This article is broken into two parts and you are reading the second part, "What ICO issuers need to be aware of."
Why ICO participants should AVOID ICOs unless they ABSOLUTELY TRUST the issuer.
What ICO issuers need to be aware of.
This is by all means not a comprehensive list and I do not suggest that you rely solely on this article to make any decision that may have an impact on your privacy, security, or life. I, nor anyone at Luvdub Coin or Luvdub Nation Inc. can be held responsible for what you do with the information provided. You are the only person who can make sure your data and privacy is safe. --- What ICO issuers need to be aware of. So you hear all about the ICO craze where massive amounts of capital is being poured into a burgeoning industry. With ICOs like Telegram raising 1.7 billion dollars on its private sale alone or the Venezuelan government raising $735 million dollars for their oil backed cryptocurrency, you think, why can't I do this? https://preview.redd.it/i5gidhsvvk411.jpg?width=3000&format=pjpg&auto=webp&s=c02b315e7380c06674a3dc28e9c7139ea64c0b8b While the allure of starting an ICO may sound endearing, keep in mind there are grave consequences if poorly executed. I'm not just referring to fines or imprisonment from government agencies either but the potential for your ICO to adversely impact the lives of hundreds or thousands of innocent individuals across the world. If you fail in your execution, your ICO participants will suffer too. Assuming that your intentions are pure and that you really are trying to create a solution for an unmet problem, I'd like you to consider several aspects of an ICO that are crucial to your project.
Our Offshore Dedicated Servers are carefully designed to ensure a reliable, robust and incredibly satisfactory hosting experience. With Layerservers you can sign up anonymously to ensure your privacy is protected and you can obtain free DDoS protection, full control over the server including its OS, and hardware. No matter whether your business thrives on a Windows server or a Linux-based ... Bitcoin server Deutschland. Wir respektieren die Privatsphäre unserer Kunden und bieten dedizierte Offshore-Server an. Unsere Kunden können Bitcoin Server Deutschland kaufen und ihr Projekt ohne Risiko ausführen. DHS-32 Server: HP DL160 G8 CPU: 8 Core - 1.8GHz ... Offshore Virtual Private Server Only the most powerful Dell hardware is used to ensure our BitCoin Servers’ superior performance. Customize and utilize our BitCoin servers to fit your needs. Our BitCoin dedicated servers are perfect for someone who needs complete control over their privacy and resources. Get maximum security with our offshore ... Our offshore hosting solution ignores the illegitimate use of copyrights & DMCA claims. In general, we are more tolerant of our clients, more flexible about content and activities on our network. Our servers located in an offshore jurisdiction where it is harder to contact server owner & even much more harder to legally shut down the server ... Offshore dedicated servers, bitcoin accepted, privacy enabled offshore dedicated hosting. Home; Offshore Servers; SiteLock VPN; SSL Certificates; Client Area; Contact Us; Offshore Dedicated Servers Fully Redundant Failover Network. 7 Offshore Data Centers; 24/7/365 Customer Support; 100% Uptime Guarantee; Get Started Now. From $ 149 /mo . Reliable Offshore Servers with DDoS Protection and CDN ...
Cheap Dedicated Server Netherlands by http://www.123dedi.com allows you to choose the hardware and operating system you like. Our company even offers server ... For more information kindly visit the url below http://libertyvps.net/offshore-vps/ Web page to vps go : https://goo.gl/lO37MZ vps hosting cheap linux vps hosting cheap windows vps hosting cheap india vps hosting cheap europe vps hosting che... 123Dedi.Com provides first-rate dedicated servers at an affordable price. We specialized to deliver the Cheap Netherlands offshore hosting Solutions. Choosing an efficient and professional service ... In this video I show you 7 ways to make passive income! Passive income is one of those phrases that I honestly don't care for, because it's been overhyped by...