When they say vaults, they're actually vaults. 98%, according to them, of their funds are stored offline. The only attack vectors are cryptographically, which

When they say vaults, they're actually vaults. 98%, according to them, of their funds are stored offline. The only attack vectors are cryptographically, which you can pretty much rule out (safe for human error), and some kind of human attack. (blackmail, social engineering etc) But there's procedures in place there, too. The offline keys are multi-signature, requiring multiple executives in multiple locations to clear industry security protocols, then come together and commit a crime. The remaining 2% of online funds are insured. If anything goes wrong, it's extremely likely to be on the customer side. They offer the usual secure connections, multisig etc, and the vault adds an extra 48h withdrawal period ontop. If you know the basics of bitcoin's cryptography, it's pretty trivial to store bitcoins on private keys that never saw the light of day, using a bunch of dice and an offline open source bit of software. But if you have to use a service, I'd say Coinbase is pretty damn secure. Just make sure your side's clean. Accessing secure systems from compromised phones/laptops is a losing battle, and as there's no real recourse with bitcoin, that's usually where things go wrong even when using secure services.