[OVERVIEW] Wallet and exchange security review (updated feb. 22 2016)

xqus

full member

Activity: 172

Merit: 100

Quote from: notlist3d on February 14, 2016, 11:32:46 PM

Here are hardware wallets I have done hands on with:
https://bitcointalksearch.org/topic/hands-on-keepkey-hardware-wallet-notlist3d-1283805 - KeepKey
https://bitcointalksearch.org/topic/hands-on-trezor-hardware-wallet-notlist3d-1298917 - Trezor
https://bitcointalksearch.org/topic/hands-on-ledger-nano-hardware-wallet-notlist3d-1305888 - Ledger Nano

Hotwallet
Yubikey physical token with Blockchain.info - https://bitcointalksearch.org/topic/hands-onyubikey-help-secure-your-digital-assets-including-blockchaininfo-1353231

I have become a huge fan of hardware wallets.

I have added a few HW wallets to the list. It is based on information I have found on their official sites, and may be inaccurate. Some of the information is pulled from notlist3ds reviews.

xqus

full member

Activity: 172

Merit: 100

Added coinmotion.

No support for TLS 1.2, which is the only secure protocol version, so stay away. Consider ALL communication with their servers as unencrypted.

Quite ironic since they are writing

Quote

We own and control our servers, whose every component has been configured to be hardened and secure.

xqus

full member

Activity: 172

Merit: 100

Quote from: LTU_btc on February 16, 2016, 10:05:35 AM

Nice review, but I think you should add block.io wallet

Added:
SSL: A+
Securityheaders: A

No 2FA (they say they support it, but e-mail is not 2FA, it is only 2-step).

LTU_btc

legendary

Activity: 3080

Merit: 1338

Slava Ukraini!

Nice review, but I think you should add block.io wallet

xqus

full member

Activity: 172

Merit: 100

Quote from: notlist3d on February 14, 2016, 11:32:46 PM

Here are hardware wallets I have done hands on with:
https://bitcointalksearch.org/topic/hands-on-keepkey-hardware-wallet-notlist3d-1283805 - KeepKey
https://bitcointalksearch.org/topic/hands-on-trezor-hardware-wallet-notlist3d-1298917 - Trezor
https://bitcointalksearch.org/topic/hands-on-ledger-nano-hardware-wallet-notlist3d-1305888 - Ledger Nano

Hotwallet
Yubikey physical token with Blockchain.info - https://bitcointalksearch.org/topic/hands-onyubikey-help-secure-your-digital-assets-including-blockchaininfo-1353231

I have become a huge fan of hardware wallets.

Thank you for the links. I will try to add a security summary of the hardware wallets. I just need to figure out what attack vectors i should list.

notlist3d

legendary

Activity: 1456

Merit: 1000

Here are hardware wallets I have done hands on with:
https://bitcointalksearch.org/topic/hands-on-keepkey-hardware-wallet-notlist3d-1283805 - KeepKey
https://bitcointalksearch.org/topic/hands-on-trezor-hardware-wallet-notlist3d-1298917 - Trezor
https://bitcointalksearch.org/topic/hands-on-ledger-nano-hardware-wallet-notlist3d-1305888 - Ledger Nano

Hotwallet
Yubikey physical token with Blockchain.info - https://bitcointalksearch.org/topic/hands-onyubikey-help-secure-your-digital-assets-including-blockchaininfo-1353231

I have become a huge fan of hardware wallets.

xqus

full member

Activity: 172

Merit: 100

Quote from: shorena on February 14, 2016, 03:56:10 PM

Im missing blocktrail -> https://wallet.blocktrail.com/#/setup/register

Added

Quote from: quentincole32 on February 14, 2016, 01:35:58 PM

i would suggest bittrex and poloniex to be added to the overview list as both have the biggest exchange that accept so many altcoin and huge trade volume around $10,000 combined.
and both are so popular around here for altcoin traders due they provide over 200 altcoin on their exchange each. nice thread btw , goodluck.

Added Bittrex.

Hugroll

hero member

Activity: 756

Merit: 500

hmm it seems coinbase is more secure than i thought lol,maybe i should go back to using it.

really didnt expect coinbase to be the most secure.

shorena

copper member

Activity: 1498

Merit: 1499

No I dont escrow anymore.

Im missing blocktrail -> https://wallet.blocktrail.com/#/setup/register

xqus

full member

Activity: 172

Merit: 100

Fair enough!

kotwica666

legendary

Activity: 2282

Merit: 1035

Very nice review, but Coinbase should also be included as online wallet. Wink

xqus

full member

Activity: 172

Merit: 100

Thanks for the feedback. I will add those very soon. I'm just trying to make sure the securityheaders.io results are correct. Seems like maybe cloudfare and the like are messing up the results.

quentincole32

hero member

Activity: 518

Merit: 500

Quote from: Herbert2020 on February 14, 2016, 02:21:20 AM

Quote from: dollarneed on February 14, 2016, 01:37:39 AM

nice thread and explanation, so far i just using blockchain for stored my bitcoin as online wallet, i just wondering about the exchange can you make a review about c-cex, bittrex, poloniex and yobit so far those exchanger i always used for my daily trading activity
thanks in advance

i agree you should add all the other exchangers to the list. not only famous bitcoin exchanger like bitfinex, btce but also altcoin exchangers like poloniex and bittrex.
here is a good list of them with their volumes: http://coinmarketcap.com/exchanges/volume/24-hour/

i would suggest bittrex and poloniex to be added to the overview list as both have the biggest exchange that accept so many altcoin and huge trade volume around $10,000 combined.
and both are so popular around here for altcoin traders due they provide over 200 altcoin on their exchange each. nice thread btw , goodluck.

xqus

full member

Activity: 172

Merit: 100

Updated.

- Added GreenAddress wallet
- Added priv key access column to wallets
- Added some more exchanges

Herbert2020

legendary

Activity: 1946

Merit: 1137

Quote from: dollarneed on February 14, 2016, 01:37:39 AM

nice thread and explanation, so far i just using blockchain for stored my bitcoin as online wallet, i just wondering about the exchange can you make a review about c-cex, bittrex, poloniex and yobit so far those exchanger i always used for my daily trading activity
thanks in advance

i agree you should add all the other exchangers to the list. not only famous bitcoin exchanger like bitfinex, btce but also altcoin exchangers like poloniex and bittrex.
here is a good list of them with their volumes: http://coinmarketcap.com/exchanges/volume/24-hour/

dollarneed

hero member

Activity: 742

Merit: 500

nice thread and explanation, so far i just using blockchain for stored my bitcoin as online wallet, i just wondering about the exchange can you make a review about c-cex, bittrex, poloniex and yobit so far those exchanger i always used for my daily trading activity
thanks in advance

pooya87

legendary

Activity: 3472

Merit: 10611

good overview but you might want to add https://greenaddress.it/ to the online wallet list. i have never used it so i can not comment on their service but i heard good things.

also, there is something that people usually miss about online wallets and that is the big difference between wallets like blockchain.info, greenaddress with wallets like coinbase, xapo, circle
that big difference is the fact that your Money is controlled by a third party in the second group so you will have no control in case your account gets banned.

xqus

full member

Activity: 172

Merit: 100

reserved

xqus

full member

Activity: 172

Merit: 100

This summary shows a short summary of the security mechanism implemented on a selection of online wallets and exchanges. This is no vulnerability-test on the back end code so it says nothing about how well they are protected from an attack, but it says something about how your account is protected and the general security awareness of the service providers.

The tests are done with SSL server test, and securityheaders.io. The lists are in no particular order.

The list is also available on a dedicated webpage here.

Please keep any feedback and suggestions in this thread, thanks.

Topic: [OVERVIEW] Wallet and exchange security review (updated feb. 22 2016) (Read 1479 times)