Guten Tag flash10101!
I'm very intrigued about your platform and I'm seriously considering to take a fair amount of my bank account savings and put them into your lending system (my bank gives my <1% in interests, so like millions and millions of other customers I'm effectively losing money by having them there
).
I'm however a bit apprehensive regarding the zero-risk you proclaim to have. You say that:
"Storing your API credentials at Coinlend does not contain any risk. No withdrawal of funds or trading is possible with these credentials. Even with the slight chance that Coinlend gets hacked and your credentials get stolen - the hacker could not do anything harmful with them.
Which platforms are supported?
Currently, we support the exchanges Poloniex and Bitfinex. Further, platforms like Quoine will follow in the future."My old man has always raised me with the expression:
"nothing comes from nothing" . Regarding this example he would say something like:
"there is always risks" 
Say some hackers - hypothetically speaking - actually did hack your system and tried to make a run for it with a bunch of the platforms/lenders crypto.
1) Why are they not able to do anything harmful with them?
2) And even though they with 100% certainty couldn't use them for anything, I suppose that I couldn't stop the lending and withdraw my crypto either. Is that correct?
3) I guess it follows from my questions that I don't quite understand API credentials and their impact on the system. Can you - in brief - explain the principle behind them?
Hi there, as you can see I'm not Flash10101 but I'll try to answer your question the best way I can.
API keys, work the same way but with some little differences between Poloniex, Bitfinex and every supported platform (I can only speak for Polo and Bit).
In Poloniex, you create an API key, and decide what privileges you give to that key; in this case, and if I recall correctly, you have to authorize Trading, but if I were you, I woudn't authorize withdrawals. That way, the service will never be able to withdraw any fnds, because that API key just can't withdraw anything. Never.
In Bitfinex, it's somehow similar; you have to give that API key Lending privileges (or trading, i don't remember at all) and you just don't click on withdrawals. Problem solved in what the API security is concerned.
For you second concern, you can alway delete any API key, so if the page gets hacked or something odd, you just erase the API, cancel every open order (accepted loans can't be canceled until they finish) and you keep on living as if nothing had happened.
Now, the only problem I can see with this, is that when you give access to it to Trade, on Poloniex, is that in the rare event of the website getting hacked, the only thing hackers could do is to create buy/sell orders lower than current market price, so that your balance goes down to 00.000 But those hackers would be very very bad people, because stealing is one thing, but getting people ruined because you can't steal from them, is something far worse
I hope that I was able to help you
