Pages:
Author

Topic: Storing cyrpto for clients - page 2. (Read 551 times)

legendary
Activity: 2968
Merit: 3684
Join the world-leading crypto sportsbook NOW!
February 23, 2019, 01:47:47 PM
#21
There's no ideal situation here.

You can do 2-of-2 and hope that your client never loses their key/seed, but if they lose them, the money is gone.

You can do 2-of-3 where you hold two keys (in separate physical locations to prevent compromise) and your client holds one, but this effectively places the funds in your sole custody. That raises liability issues if the funds are ever stolen.

You can do 2-of-3 where you hold one key and your client holds two (in separate physical locations) but again, this opens the possibility that your client has his keys/seeds compromised.

Whatever you do, I would avoid any liability in case things ever go awry. You don't want to be on the hook for a 20 BTC loss.

You could also consider an institutional custody service like Bitgo. I'm not sure exactly how their setup and pricing works but lots of services use them for multi-sig storage.

This was my point and OP I hope you pay attention to this. Forget all the complexities of multisig and all the litigation risk plus extra vulnerabilities of custodial service (meaning, you should never, ever take care of their bitcoin for them).

You've repeated it that you only want to manage it for them, and advising them to hold. So a simple hardware wallet, seeds owned only by them. You can get them to store the seed in their safe/vault/wherever they store their most precious thing. They can even write it down along with their Amex for all you should care, that is their choice and their risk. Tell them of their responsibilities to seek their own custodial services if they don't trust themselves.

You simply don't want liability, why spoil a great and profitable relationship?

Hardware wallet. You know the address, that's all you need to manage and report. Good luck!
legendary
Activity: 1666
Merit: 1196
STOP SNITCHIN'
February 23, 2019, 01:03:12 PM
#20
The benefit of the 3rd signature would be that it can stay sealed somewhere for emergencies (your death).
Again, it's 2 of 3. So you can use the 2 signatures in the way you use now and the 3rd is for the case one of the usual signatures gets out of reach.

But who would hold the 3rd co-sign?

If I die (as I have already stated) there is a PoA.

I am leaning more towards a 2 of 3 multisig - but more in case my clients lose their keys or seed words.  But that would mean me holding 2 out of the 3 co-signs. 

Unless I set up a company specifically for this or have my lawyer be a co-sign for all of my clients too. That way a 2 out of 3 is the best solution maybe.

There's no ideal situation here.

You can do 2-of-2 and hope that your client never loses their key/seed, but if they lose them, the money is gone.

You can do 2-of-3 where you hold two keys (in separate physical locations to prevent compromise) and your client holds one, but this effectively places the funds in your sole custody. That raises liability issues if the funds are ever stolen.

You can do 2-of-3 where you hold one key and your client holds two (in separate physical locations) but again, this opens the possibility that your client has his keys/seeds compromised.

Whatever you do, I would avoid any liability in case things ever go awry. You don't want to be on the hook for a 20 BTC loss.

You could also consider an institutional custody service like Bitgo. I'm not sure exactly how their setup and pricing works but lots of services use them for multi-sig storage.
legendary
Activity: 3668
Merit: 6382
Looking for campaign manager? Contact icopress!
February 23, 2019, 11:50:35 AM
#19
Yes, you need a 3rd party. Either you get in the position you can't sign (illness, death, whatever), either the customer lose his key (good point!). The 3rd party has to be somebody you and your customer has access to. The lawyer is a pretty good option.
newbie
Activity: 14
Merit: 2
February 23, 2019, 08:17:39 AM
#18
Why 2 of 3 multi-sig?  What benefit does that have over 2 of 2 multisig?  That's just adding an extra layer of effort and complications.  Who would be the 3rd co-sign?  Its just adding more potential cost and complication.

The benefit of the 3rd signature would be that it can stay sealed somewhere for emergencies (your death).
Again, it's 2 of 3. So you can use the 2 signatures in the way you use now and the 3rd is for the case one of the usual signatures gets out of reach.

But who would hold the 3rd co-sign?

If I die (as I have already stated) there is a PoA.

I am leaning more towards a 2 of 3 multisig - but more in case my clients lose their keys or seed words.  But that would mean me holding 2 out of the 3 co-signs. 

Unless I set up a company specifically for this or have my lawyer be a co-sign for all of my clients too. That way a 2 out of 3 is the best solution maybe.
legendary
Activity: 3668
Merit: 6382
Looking for campaign manager? Contact icopress!
February 23, 2019, 06:49:36 AM
#17
Why 2 of 3 multi-sig?  What benefit does that have over 2 of 2 multisig?  That's just adding an extra layer of effort and complications.  Who would be the 3rd co-sign?  Its just adding more potential cost and complication.

The benefit of the 3rd signature would be that it can stay sealed somewhere for emergencies (your death).
Again, it's 2 of 3. So you can use the 2 signatures in the way you use now and the 3rd is for the case one of the usual signatures gets out of reach.
newbie
Activity: 14
Merit: 2
February 23, 2019, 06:19:48 AM
#16
with the way you are describing your "clients" here it seems to me like you are dealing with a bunch of elderly incapable of making their own decisions while having money they don't know what to do with! which makes me wonder whether they should even be investing in cryptocurrencies in first place!
you see one of the first things about bitcoin is the fact that it gives the person full control and if they give that up then why are they even bothering getting involved with bitcoin? there are less riskier investments out there.

Well my clients (no speech marks required) certainly aren't elderly nor incapable of making their own decisions. Honestly, they don't have the time nor inclination to give a fuck about crypto as you or I would.  They are only interested in it from "this is the future of money" POV.  They haven't made their millions ( and I do mean millions) sitting around looking at the finer details of something.  Do you think they ask me on a daily or weekly basis how I trade for them?  No they couldn't give a shit as long as the return is there.  That's how these people operate.  They PAY PEOPLE TO MAKE DECISIONS FOR THEM.

Do you honestly think HNWI understands everything they invest in?  HINT: THEY DON'T.
That's the whole point. So yes they should be investing in Crypto, why, because I have advised them to.

The discussion isn't about whether my clients should invest in btc or not. It's how I should manage that for them.

I appreciate that you took the time to reply to my post, but I don't think you have grasped it.


newbie
Activity: 14
Merit: 2
February 23, 2019, 06:08:32 AM
#15
I would really appreciate any comments/suggestions.

Your idea sounds pretty good, at least from Bitcoin point of view.

Since your customers are not tech people and it's risky to handle the private keys, they can clearly see their funds based on the address, on any block explorer. So you can handle the keys as you think it's best.
Because we talk about others' funds, a solution is 2-of-3 multisig, with key 1 at the owner, key 2 at you and key 3 in your testament. Or, if you are allowed to spend at any time, you can also have a copy of key 3.

Why 2 of 3 multi-sig?  What benefit does that have over 2 of 2 multisig?  That's just adding an extra layer of effort and complications.  Who would be the 3rd co-sign?  Its just adding more potential cost and complication. No?

The only benefit of using 2 or 3 that I can think of is in case my client loses his private key or seed words.  But that would mean me being the custodian of the 3rd seed words or keys - which isn't problematic to store on a usb in a safety deposit box, but that would effectively give me full control over his wallet. probably not a major issue, but it's not ideal (perhaps)

In that instance, I might as well just hold his coin on a hardware wallet on his behalf.  Which again isn't ideal longer term, if I start doing this for multiple clients I have, I will end up owning and looking after a dozen or so hardware wallets for clients - hastag nightmare



newbie
Activity: 14
Merit: 2
February 23, 2019, 05:56:02 AM
#14
So far the comments are not understanding your point of view but i do.

The security online is a really tricky subject this days and they are paying you precisely for you to do all the learning and tests so they can be comfortable and just give the money they want to invest. I understand how VIP services work.

I personally don't think that you are on the wrong approach in that aspect since it's the nature of the service you provide, rich people moves different than everyone else and if they are not interested in learning about Bitcoin it's your responsibility to offer them a solution and you seem pretty good at it.

One thing you could do is when they have a determined amount of time(decided by your observations in their reactions with their assets inside Bitcoin or Ethereum) when they kinda notice how that kind of market work you could see if some of them is interested enough in learning and when the time comes, you can tell him/her that they can store a part of their coins inside a hardware wallet if they would like to use it for some transactions and one part for security.

They better know how unstable it is. The whole point of it is for any of them interested in learning more to do it. That is the kind of people with a lot of resources who can bring the market up.

That is just one idea for you to think about it. Your approach even when criticized is extremely good for Bitcoin's future and you better know that you're helping shape that future.

Thanks.  I don't understand half of what you have written to be honest, its just words. As I said in the original post MOST clients will NOT be spending the coin, just HODL.  I am not sure why I would have a hardware wallet & set up a co-sign wallet.  That's just confusing, pointless and unnecessary  IMO.

legendary
Activity: 3668
Merit: 6382
Looking for campaign manager? Contact icopress!
February 23, 2019, 05:23:37 AM
#13
I would really appreciate any comments/suggestions.

Your idea sounds pretty good, at least from Bitcoin point of view.

Since your customers are not tech people and it's risky to handle the private keys, they can clearly see their funds based on the address, on any block explorer. So you can handle the keys as you think it's best.
Because we talk about others' funds, a solution is 2-of-3 multisig, with key 1 at the owner, key 2 at you and key 3 in your testament. Or, if you are allowed to spend at any time, you can also have a copy of key 3.
newbie
Activity: 14
Merit: 2
February 23, 2019, 05:21:11 AM
#12




They are NOT going to learn or educate themselves about bitcoin.  I am not going to teach them either.  For the average Joe bitcoin is too technical, and for a HNWI  he really isn't going to be interested in being technical.  As I have said, he probably has someone dial numbers on his mobile for him.  
member
Activity: 322
Merit: 20
Donating 10% to charity
February 23, 2019, 04:59:13 AM
#11
So far the comments are not understanding your point of view but i do.

The security online is a really tricky subject this days and they are paying you precisely for you to do all the learning and tests so they can be comfortable and just give the money they want to invest. I understand how VIP services work.

I personally don't think that you are on the wrong approach in that aspect since it's the nature of the service you provide, rich people moves different than everyone else and if they are not interested in learning about Bitcoin it's your responsibility to offer them a solution and you seem pretty good at it.

One thing you could do is when they have a determined amount of time(decided by your observations in their reactions with their assets inside Bitcoin or Ethereum) when they kinda notice how that kind of market work you could see if some of them is interested enough in learning and when the time comes, you can tell him/her that they can store a part of their coins inside a hardware wallet if they would like to use it for some transactions and one part for security.

They better know how unstable it is. The whole point of it is for any of them interested in learning more to do it. That is the kind of people with a lot of resources who can bring the market up.

That is just one idea for you to think about it. Your approach even when criticized is extremely good for Bitcoin's future and you better know that you're helping shape that future.
legendary
Activity: 1638
Merit: 1163
Where is my ring of blades...
February 23, 2019, 04:42:20 AM
#10
with the way you are describing your "clients" here it seems to me like you are dealing with a bunch of elderly incapable of making their own decisions while having money they don't know what to do with! which makes me wonder whether they should even be investing in cryptocurrencies in first place!
you see one of the first things about bitcoin is the fact that it gives the person full control and if they give that up then why are they even bothering getting involved with bitcoin? there are less riskier investments out there.
hero member
Activity: 1022
Merit: 503
February 23, 2019, 04:25:52 AM
#9
And your clients agree on this? I mean if I am the client I won't permit this, I don't want there's someone that can interfere my account, though not totally but I'll be worried.

I suggest encourage them to educate themselves about bitcoin and etc. That should be able to potect their funds quite well.

It's sad that they don't know the risk of it and just rely everything on OP, good thing OP seems trusted.
legendary
Activity: 2968
Merit: 3684
Join the world-leading crypto sportsbook NOW!
February 23, 2019, 04:05:27 AM
#8
Wait - if you are transferring them their BTC by the end of each month, why do you need to hold funds for them? I'm terribly confused.

But if you do need to hold funds for them, I think that they will obviously appreciate control over their funds to the fullest possible extent. Multisig in this instance could certainly work.

I still think that a hardware wallet should be discounted. I don't think that it's that technical intensive given ledger/trezor's intuitive UIs. In this case, you'd only have to worry about sending the BTC to the correct address at the end of each month, instead of actually holding a key in a multisig. They would have full responsibility of securing the BTC which I don't know if they would be comfortable with. Please do correct me if I got your scenario totally wrong.

Exactly my thoughts.

You want to advise your clients to buy and HODL. Please teach them to use their own wallets (ledger/trezor as magneto says, come on 5 minutes is all they need), I would recommend you charge them only to teach them how to use it, and perhaps to monitor their holdings using watch only, so you can provide full reports and updates.

You don't want to diversify into custodial services, not if you're doing this on your own. Multisig is a workaround but I seriously don't recommend it - why do you need control over their funds? Seems like a drawback to me.
newbie
Activity: 14
Merit: 2
February 23, 2019, 04:03:09 AM
#7
Wait - if you are transferring them their BTC by the end of each month, why do you need to hold funds for them? I'm terribly confused.

But if you do need to hold funds for them, I think that they will obviously appreciate control over their funds to the fullest possible extent. Multisig in this instance could certainly work.

I still think that a hardware wallet should be discounted. I don't think that it's that technical intensive given ledger/trezor's intuitive UIs. In this case, you'd only have to worry about sending the BTC to the correct address at the end of each month, instead of actually holding a key in a multisig. They would have full responsibility of securing the BTC which I don't know if they would be comfortable with. Please do correct me if I got your scenario totally wrong.


I don't want to be responsible for their seed words. Plus I need a safety net in case my client ( who isn't technically minded) gets phished or dodgy browser extensions or malicious software on his computer ends up stealing his coin. I know using a hardware wallet its unlikely BUT.. I guess I am saying I don't trust my client to keep his seed words safe for himself and want to make sure there is another step required to move his coin.

he isn't technically minded enough to deal with firmware updates etc etc.  One of the big factors for this to work, is to minimise any work required for him.  It needs to be simple and straightforward from his perspective, even if its more technical behind the scenes

I have been working with one client for over 5 years, and we have a great trust relationship (and I earn a shit load of money for him and me) I wouldn't want to blow that trust (and him lose money/coin) just because he isn't technically minded enough to understand about keeping his seed words etc safe. (This is the type of guy who has his Black Amex card PIN written on the back of a photo in his wallet !!!!!)
newbie
Activity: 14
Merit: 2
February 23, 2019, 03:41:11 AM
#6
you don't need to store cryptocurrencies "for" clients because unlike fiat, transferring cryptos is easier, fast and a lot cheaper. and that would be also a lot safer. since you already claim it is to "buy and hold" then you must ask for their addresses and pay them right away. then it is their responsibility to learn how to properly secure their coins.
if i were you i would worry about more important matters such as getting involved with altcoins that can get dumped hard since they are pump and dumps even though they may seem like a big deal!

Thanks for the response but where in my post does it mention other altcoins?  I am not interested in shitcoins.  Seriously though, my client really isn't interested in learning about bitcoin - that's why I made my post.
sr. member
Activity: 910
Merit: 351
February 22, 2019, 10:43:14 PM
#5
I already have a PoA (power of attorney) if anything happens to me, they can get their funds back, so I can just add a codicil covering the Private Keys etc - and have those stored in a Safety Deposit Box, so I am not worried about that.  I want your opinion on the method I am looking to implement and whether you think its a good option.


I tend to believe you should not hold their key. As other mentioned, your clients only need to make an address and then you can simply tansfer the money there. If you want to make sure they can secure it, I suggest encourage them to educate themselves about bitcoin and etc. That should be able to potect their funds quite well.
legendary
Activity: 3472
Merit: 10611
February 22, 2019, 10:25:52 PM
#4
you don't need to store cryptocurrencies "for" clients because unlike fiat, transferring cryptos is easier, fast and a lot cheaper. and that would be also a lot safer. since you already claim it is to "buy and hold" then you must ask for their addresses and pay them right away. then it is their responsibility to learn how to properly secure their coins.
if i were you i would worry about more important matters such as getting involved with altcoins that can get dumped hard since they are pump and dumps even though they may seem like a big deal!
hero member
Activity: 1666
Merit: 753
February 22, 2019, 06:19:39 PM
#3
Wait - if you are transferring them their BTC by the end of each month, why do you need to hold funds for them? I'm terribly confused.

But if you do need to hold funds for them, I think that they will obviously appreciate control over their funds to the fullest possible extent. Multisig in this instance could certainly work.

I still think that a hardware wallet should be discounted. I don't think that it's that technical intensive given ledger/trezor's intuitive UIs. In this case, you'd only have to worry about sending the BTC to the correct address at the end of each month, instead of actually holding a key in a multisig. They would have full responsibility of securing the BTC which I don't know if they would be comfortable with. Please do correct me if I got your scenario totally wrong.
legendary
Activity: 4466
Merit: 3391
February 22, 2019, 01:50:25 PM
#2
2-of-3 multisig is a good solution. You hold one key and your client holds two, one of which is kept in a secure location. This setup prevents anyone with your key as well as anyone with only one of the client's keys from stealing the coins. This setup requires both you and your client to approve any movement of the coins, though the secured key ultimately gives the client full control over the coins if they need it.

These people can help you: https://thirdkey.solutions/
Pages:
Jump to: