4 ms·
Thanks @narush for the support and the great questions! 1. We completely believe in the DEX thesis, and we plan for our custodial solution to integrate with ha
by cadillion 5y ago
Thanks @narush for the support and the great questions!
1. We completely believe in the DEX thesis, and we plan for our custodial solution to integrate with hardware wallets so that we can immediately return your funds to your own cold storage, and take advantage of DEX aggregators that already exist like 1Inch, Totle, or Slingshot.
However, no one is aggregating the much larger (for now) pools of liquidity on centralized exchanges, and additionally, the usability story for DEXs is really tough for mainstream users. We want to address both of these problems by providing a simplified interface for interacting with smart contracts, and providing the best execution requirement that already exists in traditional finance for the world of cryptocurrency.
2. We completely understand your security concerns, and we take our duties here with utmost seriousness. Thanks for the feedback!
We just brought on a dedicated security hire who contributed to the EMV chip standard for credit cards as well as the Global Platform standard for secure enclave, and he is helping us to ensure we have processes and procedures in place using the Mitre Att&ck framework. We intend to release audit details once they are complete.
For now, we do rely on Heroku to do a lot of the heavy lifting on the secure server management, but we also have internal processes and procedures for encrypting sensitive information using AES-256 and reducing attack surface.
Hope that answers your questions, and please tell us any additional concerns!
- landemva 5y ago> "rely on Heroku to do a lot of the heavy lifting on the secure server management" You trust all the employees and contractors of the hosting firm who have the VM hypervisor login of the machines where your code runs.
- cadillion 5y agoAgreed, this was a necessary step when we were a team of 3 at the beginning of the year, and we are transitioning as quickly as we can to self-managed infrastructure now that we have additional help. If you have more concerns or recommendations, we'd love to hear them!