....
How do we ensure the safety of the private keys if they are all generated online? How do we protect the private key info or if we are going to install them in a server db, how do ensure it will not be copied or altered?
Safety of online keys does not exist if the bytes of the private key are transmitted between computers or through networks.
How does exchange ensure the safety of the coins then? Do they encrypt the private keys (and does it work?)?