Quote from: Daparski on October 12, 2016, 11:57:26 AM

Quote from: weirdgod on October 12, 2016, 10:10:27 AM

Quote from: p4xil on October 12, 2016, 09:02:07 AM

Quote from: Daparski on October 10, 2016, 09:16:20 AM

Hi @Iconomi team

few questions regarding platform security:

1. Did you have external expert/company auditing the platform from security point of view? Have any penetration tests been made?

2. Who is the company CSO?

3. Will ICN tokens be held in an offline storage, just like the funds? That is for people who choose to keep their tokens on the platform. Will it be multisig as well?

4. Do you plan on any type of funds insurance?

I think clarifying the above questions will make non technical and non crypto investors much more confidant. It will also help attract new investors

thanks a lot, you are doing AMAZING job. Keep up with setting new standards for all other projects outthere

PS' and may all bounty crybabies won't break your spirit

Still waiting for answers to these great questions ...

Hi guys! Very good questions in deed.

1. Fund management platform will come in 2017... Auditing the platform before the public launch is planned. We will communicate details, once there...

2. Our infrastructure lead Domen Skalar is acting CSO.

3. We will apply both. Everything we do is multisig and we will hold majority of ICN tokens left on the platform in the offline storage.

4. We are strongly evaluating this possibility. With every insurance company we talked so far, we got stuck at "blockchain, crypto, whaaaat?" ...

Jaka Mele
ICONOMI

Jaka, thanks for respond.

Quote

1. Fund management platform will come in 2017... Auditing the platform before the public launch is planned. We will communicate details, once there...

What about Performance fund? It is schedule to go live this year and it is quite healthy already. Will it be audited as well? Please elaborate on that a bit more, if you can.

Quote

3. We will apply both. Everything we do is multisig and we will hold majority of ICN tokens left on the platform in the offline storage.

Joining ttookk question: This probably means that withdrawing ICN from the platform will be a semi-automatic process, right? So, it would take a while, let's say 1-2 days?
and would like to add: Will it be possible to withdraw part of the tokens from the platform, or just the entire bulk?

another security-related question: Are you keeping hashed values of credentials on the server or you have implemented client-side solution, such as Firebase?