4 ms·

Have you ever built a trading platform before? What if somebody gains access to your database and changes the financial transactions records? Do you store them

by rorrr 15y ago

Have you ever built a trading platform before? What if somebody gains access to your database and changes the financial transactions records? Do you store them in a way they can't be modified? Do you have a cron that constantly checks the historical consistency of your transactions, and if there's a problem, shuts the system down? Do you have a mirror DB or a transaction log running on an independent server, so you have a chance to compare if your DB got hacked?

zhoutong 15y ago
No, never. This is the first time, that's why I built BTCUSD not EURUSD. Changes in transaction records do not directly result in financial losses because all the money is stored in more reputable exchanges and banks. Yes, integrity check of transactions is a must and we have it along with the generation of candlesticks (which also checks the integrity of quotes). Databases are automatically replicated and backed up. Application (transaction and request) logs have log drain set up and will be pushed to a syslog server for archiving. The databases are only accessible by the instances running this application. The filesystem of the application is read-only.