Security
- No private keys on the public server
Where do you keep the private keys then?
Do you pull out deposing addresses for users from file? What is the file get replaced on the server then?
No websites is 100% secure if it is connected to the Internet. When user deposits the digital currency, exchanges are providing a deposit address and controls the private key. But if the website is hacked, the hacker can change the source code and replace the deposit address.
Deposit address file contains all the deposit addresses. When user requests depositing, one unused address is provided. Users can verify if this address is in the deposit address file. The MD5 hash of the deposit address file is published on our website. Users can download the deposit address file and calculate the MD5 hash to verify the integrity. A custom software monitors the web page which publishes the MD5 hash. If this hash is changed, the website will be shut down for safety.
No private keys of deposit addresses are on the server, and hence digital currency won't be lost. So these addresses can be considered as cold wallets. Private keys are stored offline. We do not have hot wallet at all. The deposit and withdraw information are pulled from websites and processed offline.
The goal here is to make digital currency safe. We add these new features, so deposits are guaranteed to be safe, and no digital currency will be lost even if our online servers are hacked.
- Your idea is great and looks pretty safe. You separate the home page and the client account. Although the home page is hacked, the hacker can not access the client account and steal it. It is important for you now to build a community. Hope your project will be successful.
- You can explain more clearly "Circuit breaker". I do not understand yet?