I was so close to ask for your help   I don't know what your user name means but if you are good on promoting stuff, please PM me.

shoot a price on PM please, for:

www.twitter.com/cryptoworld202  and IG, thanks!

I want to give a bump to this post, which goes overlooked, so that to announce that today we moved the paltform to a new infrastructure. I would like to underscore a few things:

- we DO NOT STORE PRIVATE KEYS
- all crypto transactions need to be co-sgned by BitGo
- this week we will add dynamic fee feature, which
- the core lays on a true trading engine
- main coins secured with BitGo
- live funds audit, allowing real time vefirycation of exchange solvency. Users can verify the coins' amounts in order to make sure the funds are in
- clustered instances hosted in US, redundant backed up database
- a copy of each crypto transaction mirrored on BitGo
- live trading with possibility of cancelling any order, anytime before the transaction being completed
- users are market makers, bids not depend on any external exchange (except BitGo API, which acts as a security instance)
- multiple HD wallets, renewable at your choice after each transaction
- simple yet efficient KYC, once you are approved you may trade freely
- a robust API, allowing plugin of trading bots
- free deposits on fiat and crypto
- low trading fees (both maker and taker): 0.16%
- low withdrawal fees 0.16% (BitGo ads 0.25%)
- USD, EUR and GBP as fiat currencies
- PayPal accepted
- low deposit limits on fiat: 10 units (USD, GBP, EUR)

We are in a partnership with a new coin, which we listed on the exchange as well, you may be interested in it too.

register here and we can start trading:
tradebtc.eu
if you want we can provide you as many btc as you want.

My friend, first of all our platform is not a simple "website". It is nor a php script thrown on the web, it is a million dollars trading engine, protecting users by scammers like you. You said you were "not satisfied" with the services. You are dumb, stupid or both. This is Belgium, not Nigeria, here investors can gather fast as many crypto as you like, but you don't have any money, simply said, you are a scammer.

And guess what? You haven't been even allowed to access the members area because you cannot bypass the KYC area

I invite you to be a market maker on our trading platform. You will be thus a lot more protected, as all paypal payemtns are done via an invoice. Deposits are free and withdraw fees low. You make the price, you are not bound to any external platform, any crypto deposit is secured by bitgo with a multi-signature key, you may activate an SMS pretection for each transaction and more.

I am very interested in this type of trades. The proceedure is simple: you deposit the coins or fiat. Crypto is protected by bitgo, we don't own any private key, any outgoing transactions need to be co-signed in order to be processed. So once you make the deposit you can transact it whatever you like at whatever price you like with your partner(s). You find the web address in my profile.

And, of course, before that you must prove your identity.

I am very interested in this type of trades. The proceedure is simple: you deposit the coins or fiat. Crypto is protected by bitgo, we don't own any private key, any outgoing transactions need to be co-signed in order to be processed. So once you make the deposit you can transact it whatever you like at whatever price you like with your partner(s). You find the web address in my profile.

https://us.newz.app/media/e9498980bbd2bd20905427377c4784fc.jpg

I have seen lots of topics where people try to trade krypto using paypal. You may now SEND and RECEIVE funds via Paypal.

Our trading platform is partially descentralized, you may sell or buy at any price you get a deal with your trading partner. Paypal currencies available: USD, GBP and EUR. Once the trade. We are bot market makers, we don't trade against you, you are the market maker.

NOTICE: all transactions are done via BitGo API, so scammers will face a proof out of any doubt. Records are also kept inside the platorm, for all trades, deposits and transactions.

A paypal deposit is initiated via an invoice we issue on your address. You will find on invoice the basic TOS. KYC and AML in place. Minimum fee on fiat, 15 units or 1% on larger amounts, 0.16% on krypto plus 0.25% bitgo, all deposits free.

https://tradebtc.eu/

Yes, SMS auth working, sure!

register to our exchange, make a paypal deposit and then you can buy kryptos.

well, the solution I am currently testing is to issue an invoice to the client. Then, he pays the invoice and then a hard copy of all transactions are stored on the exchange. A copy of the withdrawal is also kept on a 3rd party API. But we are quite new on the market so few transactions so far, the system works well though.

Thanks, man. In fact, after reading the comments I decided to encrypt all sensitive data (not only DB), which makes a lot of sense, as then if there is a breach the only thing an attacker could do would be to mess the instance, but won't be able to transfer coins.

No, I am not over-confident, only stupid people would be so. But speaking about the bounty offered to hackers, you would be amazed that we did it, via a shared testing of the platform. We learned then the weakness (very few though) and then took measures to fill gaps.

As I explained on a different topic, at this point not the code itself might be faulty for most of online exchanges, but their architecture. You cannot expect a poorly written php code running on a VPS to withstand a serious attack. Same if the host machine can communicate directly to the blockchain, then any insider can run code from that instance on shell do things.

So, basically, hacking  a server is a complex orchestred attack on several (sometimes one major) vulnerabilities. This is why as hacker techniques evolve so must the security do, to keep up with latest realities.

I am giving you a simple example: let's assume (though, as I have said, it is basically imposible seeing how paranoid AWS engineers are) a hacker gets access to the main instance: looks for wallets (without them cannot steal coins) and find them encrupted. Let's say he finds the key and decrypt them and start sending cURL commainds to the API that processes the requests. All requests are manually appoved by 2 admins at API level. The hackers must take small amounts in order to not withdraw attention. But within a day somebody should see that the account has been hacked (as the API post back the transactions so the amounts are deducted from users accounts) and the damage is limited. But again assuming that a hacker gets access to the server is a very extreme scenario.

I might open a topic on this subject, on how an exchange could prevent such unwanted events. For the moment I could say that most of the actual web applications are poorly secured. The bottom line at this point is this: if a server (instance, container) serving as the main OS can directly communicate to the blockchain then that server is doomed, because an insider can run commands from shell and make whatever transaction he wants. We assume at this point that the access to the server is very well tighten and an attacker could not gain accesss to it in any circumstances. Therefore, if the theft was done by an authorized person, the architecture itself is faulty. Between the machine running the exchange and blockchain processing the transactions it should stay an intermediary layer, supervised by some admins, which are supposed to approve (or not) transactions. You would be amazed to learn that only few exchanges use this extra-protection layer. Sure, individual accounts are still exposed by hacking the owners themselves, not the exchange. But even so, an SMS confirmation along with email notification of any login would cut 99% of hacking attempts on individual accounts.

OK guys, I had this account for a few months, when I first tested the exchange. Meanwhile we kept testing and hold it before integration of oracol coin. I didn't want to trully go live before all security aspects being crystal clear.

We opted for a delay in going live so that all might be thoroughly tested. I have been working for an year and 3 months on this platform, which started with the security in mind, seeing the large number of later hacking incidents on various exchanges. I personally found bitgo not only very usefull when it comes to securing the exchange, but also keeping the record clean, as everything is mirrored within their interface.

I have been extremly concerned about a secure trading envorinment, I constantly strived to cover all known issues, we put the code on separate redundant instances on a private subnet, separating DB and making it unreachable directly from outside. The final step will be to put on top of it a WAF, which will filter extremely tight inbound and outbound traffic.

With bitgo withdraw filters in place, even if (absurdly speaking) somebody would gain access to the instance (though it is impossible, seeing that the access is made via private ssh keys), it would be impossible to steal coins as bitgo offers an exra layer of security by setting the API to manually approve the withdrawals. The SMS authentication of transaction would require a phone number to be stealed in order to even think to hack an individual account.

We closed a deal with our ING Belgium bank for fiat, so here the things are straighforward, we do not take money into 3rd countries as even largest exchanges do, creating a vulnerability.

I would like to udnerscore once again that this is not a simple exchange, but trading platform, whicn means at OS level there is a trading engine working according to any stock exchange rules: if an user sells let's say for 1.000 units and buyer offers 1.100, the deal is closed at 1.000, as the SEC actually requires. Additionally, the bids and asks can be cancelled any time before transaction being completed, a user and a seller will finally agree on their own price, without depending on 3 party quotations. The wallets are generated via bitgo (HD wallets) and not depend on any other external provider.

Overall, tradebtc.eu offers all services, from wallet creation and management, new wallets for each transaction if user choose so, a strong real time trading platform, secured storage if needed (but users can withdraw money right away in their own external wallets), free deposits on everything, 0.16% trading and withdrawal crypto fees (on bitgo coins there is their fee, 0.25%, but it does fully worh for the extra security layer it adds), we hope to lower bitgo fees in the future. For fiat the minimum deposit is 10 units (usd, gbp, eur) paypal accepted but if you want to withdraw fiat you may expect 1% flat fee or 15 units flat fee if the 1% is lower than 15, becaause all fiat transactions are done manually and signed with a digipass.

I can tell you a few things:
- a simple exchange it is easy to get, but it relies on 3rd parties wallets
- if you aim toward a real trading platform, the things are more complex (and expensive)
- if you want to generate and handle wallets, the things are extremely difficult

I worked about one year along with other developers to build our own exchange. We picked the best core we could find and moved on. Initially I though it would take about 1 month (max) to have it ready, it finally took me an year.

What is important to notice, as I though a lot about this before starting the project: we do not store private keys. We rely on the bitgo api to secure the coins and to have a backup record of each transaction. So if you want to store wallets, that it's a huge challenge.

I have worked for more than 10 years as a developer so I understood pretty well the security requirements from the very start. If you are not a developer yourself, you will need to trust other people for dealing with sensitive code parts, which potentially can leave the door open to hackers. So be extremely aware.

IMO, at this point you could buy a PHP based exchange script, which relies on 3rd parties wallets. The disadvantages of such an approach are obvious though: you depend on a centralized exchange rate and pay fees to the wallet providers. But even in this scenario you need a lot of security, as you will still store some personal data that could potentially could leak funds in case of hacking.

what amount do you want to sell? I could buy it and wire you money via PP but need to know the amount and price.

The first thing to understand about the margin calls is related to the nature of the assets you are trading. Many brokers deals in fact with contracts based on underlying asset, as it's the case with derivatives, so you may find out that in fact you are not trading real coins but contracts.

Due to its very nature, which is extremely volatile, cryptos are extremely vulnerable to any leveraged trading strategy. A margin trading account contains often clauses that could ruin you in a matter of days or hours.

Another aspect which is disregarded by most traders, including forex and other types of centralized trading, is that the broker has the possibility to see clients strategies and to manipulate the market in such a manner that finally will wipe out all their money. Don't forget that a broker's job is to make money, which is take your money.

If you want to trade cryptos, you need to make sure you:
- own the asset (having it in your own wallet)
- trade it then on a low fee trading platform
- learn what are the smallest withdraw limits of that exchange
- do the trades
- eventually put your coins into your safe wallet

So my advice is: don't go on margin trading!  Even if you are a good trader, the fees and interests are going to eat you alive!

Using a bot under certain circumstances may be a good idea but you should not let it run alone for a tool long time. Then just trading on reversals, a form of trading implied by your strategy is not a good option. Why choosing double instead of 20% or 300%?

I also realize that algorithmic trading is obsolete, AI replaces algorithms. Sure, Ai itself is based on standardized functions in interpreting the data but it is totally different from traditional algos, because it allows you to train the machine and refine the code.

My point is that one needs to combine different methods for successful trading. You cannot expect a bot seeing certain things that you can. Same with AI, you cannot see some correlations, which a machine, fed with proper data, can analyze with better results.