Quote from: tradebtcEU on March 31, 2019, 02:21:16 AM

OK guys, I had this account for a few months, when I first tested the exchange. Meanwhile we kept testing and hold it before integration of oracol coin. I didn't want to trully go live before all security aspects being crystal clear.

We opted for a delay in going live so that all might be thoroughly tested. I have been working for an year and 3 months on this platform, which started with the security in mind, seeing the large number of later hacking incidents on various exchanges. I personally found bitgo not only very usefull when it comes to securing the exchange, but also keeping the record clean, as everything is mirrored within their interface.

I have been extremly concerned about a secure trading envorinment, I constantly strived to cover all known issues, we put the code on separate redundant instances on a private subnet, separating DB and making it unreachable directly from outside. The final step will be to put on top of it a WAF, which will filter extremely tight inbound and outbound traffic.

With bitgo withdraw filters in place, even if (absurdly speaking) somebody would gain access to the instance (though it is impossible, seeing that the access is made via private ssh keys), it would be impossible to steal coins as bitgo offers an exra layer of security by setting the API to manually approve the withdrawals. The SMS authentication of transaction would require a phone number to be stealed in order to even think to hack an individual account.

We closed a deal with our ING Belgium bank for fiat, so here the things are straighforward, we do not take money into 3rd countries as even largest exchanges do, creating a vulnerability.

I would like to udnerscore once again that this is not a simple exchange, but trading platform, whicn means at OS level there is a trading engine working according to any stock exchange rules: if an user sells let's say for 1.000 units and buyer offers 1.100, the deal is closed at 1.000, as the SEC actually requires. Additionally, the bids and asks can be cancelled any time before transaction being completed, a user and a seller will finally agree on their own price, without depending on 3 party quotations. The wallets are generated via bitgo (HD wallets) and not depend on any other external provider.

Overall, tradebtc.eu offers all services, from wallet creation and management, new wallets for each transaction if user choose so, a strong real time trading platform, secured storage if needed (but users can withdraw money right away in their own external wallets), free deposits on everything, 0.16% trading and withdrawal crypto fees (on bitgo coins there is their fee, 0.25%, but it does fully worh for the extra security layer it adds), we hope to lower bitgo fees in the future. For fiat the minimum deposit is 10 units (usd, gbp, eur) paypal accepted but if you want to withdraw fiat you may expect 1% flat fee or 15 units flat fee if the 1% is lower than 15, becaause all fiat transactions are done manually and signed with a digipass.

If you are so confident why don't you offer a bounty for hackers?