You're doing it. Not bad, but I miss the concept of security. How will you protect users?
We store 95% of our 24 hours in a cold wallet and partner with major custodians for segregated management. In addition we pool 5% of our monthly profits. We will use the pool funds to compensate for user assets in case of damage such as hacking. With this, we aim for 100% asset protection.
I think that the hacking required more funds than 5%. If hackers will find the vulnerability of the exchange, and will often crack it is not enough money to pay off all traders.
Indeed, looking at only 5% of the month may not be enough money to pay off.
However, it is possible to repay because the amount of pool increases by pooling 5% every month.
Perhaps it makes sense to insure the assets of users of the exchange? Because your deductions in the amount of 5% of the amount of profit may not be enough, for example, if the exchange is hacked several months after the exchange starts.
As you say, if the exchange opens and gets hacked immediately, it will be difficult to compensate enough. That's why we outsource to an external security company, pay the cost, and undergo thorough inspections so that there is no platform vulnerability.
Of course, this alone does not mean that 100% hacking can be prevented.
The above are just some of our security measures.
Our hot wallet is extremely difficult to hack in a three-tiered construction.
In addition, the time when funds are pooled in the hot wallet is short, and when a certain quantity is pooled in the hot wallet, it is automatically transferred to the cold wallet.
Although it is stated that 95% or more of the time is stored in the cold wallet, actually the time when the money is pooled in the hot wallet is shorter and it is a small amount.
Do you know the news that Cold Wallet has been hacked?
Of course, we have created an environment where internal unauthorized remittances can not be made.