Quote from: whotookmycrypto on May 16, 2019, 05:20:01 PM

1) Why are they making such disclosures? Wouldn't they make it easier for hackers to get to them? For example, just for the sake of argument (know it's a bad argument because of math, large numbers, publicly visible to begin with but just put that aside) - if you provide the address hackers can begin trying to brute force it. But if you don't disclose it, a hacker would not even know where to start. It's like a robbery victim pointing hackers where to attack next.

Think the question here is: why are they comfortable with hackers knowing such information.

Just for the sake of the argument (just theoretical, because practically you can not bruteforce the private key to a given address):
An attacker could simply download the whole blockchain and look for the address containing the most coins. And then simply try to bruteforce this address.
Or, an attacker could withdraw some coins from binance and then track the origin of these coins. In the end he would also find the cold wallet address.

It is not like you could hide it anyway. So there is no reason to not publicly post it.

Quote from: whotookmycrypto on May 16, 2019, 05:20:01 PM

2) Why do they appear to use only ONE address for BNB cold wallet? Isn't this like putting all your eggs in one basket?

Not really.
Mathematically it is secure. So nothing can be done here.
Regarding physical access etc.. If there would be 10 private keys.. they probably would be secured in the same way.. So with physical robbery (if they could steal the 1 private key to the cold wallet), they could steal all of their private keys.

Quote from: whotookmycrypto on May 16, 2019, 05:20:01 PM

3) Likewise, how many hot wallets addresses do they use? Any way to find out such information?

You could try to estimate the amount with blockchain analysis. But this won't be an accurate number i think.
And additionally they are generating new 'hot wallet addresses' each day.

Quote from: whotookmycrypto on May 17, 2019, 04:00:22 AM

Quote from: r1s2g3 on May 17, 2019, 12:03:31 AM

I am not understanding you point , make one and heavily guard it? Why not make 10 and heavily guard it? To be precise what do you mean by "heavily guard" it? I guess security of cold wallet is due to its offline nature not due to "guarding" it.

Agreed. That does not make sense. Anyone have any ideas?

Look above:

Quote

Not really.
Mathematically it is secure. So nothing can be done here.
Regarding physical access etc.. If there would be 10 private keys.. they probably would be secured in the same way.. So with physical robbery (if they could steal the 1 private key to the cold wallet), they could steal all of their private keys.

It would just create additional effort without gaining much (if anything at all).