Financial security of digital currency

1.

Yin Zhentao, deputy director of the law and Finance Research Office of the Financial Research Institute of the Chinese Academy of Social Sciences, said that digital currency faces two risks. The first is the technical level. Digital currency relies on blockchain technology and a system, which will make it suffer from security impact, such as hacker attacks on computer systems. We have seen many practical problems in this process

Zhao Zhanzhan, a special researcher of intellectual property research center of China University of political science and law, believes that digital currency has anonymity, quickness and irrevocability. In addition, bitcoin and other digital currencies have high circulation in the world, so many criminals use digital currency as a new money laundering channel. Moreover, there are many different ways to realize money laundering through digital currency. Generally speaking, the probability of new money laundering being found and investigated is lower than before. Many countries have no effective means and technology to combat money laundering through digital currency. These factors lead to criminals prefer this way of money laundering

2. Legal risks faced by digital currency: (1) at the macro level, there are legal risks, systematic risks and consumer protection. At present, the legislative problems of e-commerce and e-payment have not been solved, the concept of e-currency and related provisions need to be clarified, and many laws and regulations have not been followed up. Secondly, there is a systemic risk caused by the collapse of a single issuing institution. If a certain issuing institution loses confidence in e-money e to its poor management, other e-money issuing institutions will also face run risk. Moreover, in the absence of standardized supervision, it is difficult for the public to effectively identify the qualification and credit level of issuers. How to effectively prompt risks and protect the rights and interests of the public has become a difficult problem. In addition, the concealment, rapidity and cross-border nature of Internet payment make e-money an inevitable money laundering tool for criminals 2 At the micro level, there are technical risks and credit risks in the main body of e-money issuance. The issuers of e-money in China include banks, non bank financial institutions, Internet enterprises and other enterprises. Due to the weak financial professional foundation of some issuers, especially the lack of mandatory technical security standards in China, there are serious management loopholes and security risks in e-money issuers. System software or hardware failures will affect the availability of e-money. Secondly, the unreasonable structure of assets and liabilities and high concentration of investment will lead to the lack of liquidity and the risk of default. In addition, the payment and circulation of e-money rely heavily on all kinds of networks, and there are all kinds of operational risks, such as deliberate embezzlement of other people's accounts, internal crimes of issuing institutions and malicious intrusion of hackers, which will damage the interests of e-money holders. Bitcoin, Ruitai and other digital currencies are suitable.

3. The following is for reference only:
very large
in the field of blockchain and virtual currency, such cases of losses caused by the security of exchanges occur frequently, causing great economic losses to users. The security experts of Juhui ggfx also gave a hint: there are still many loopholes in the current digital currency trading platform, for example, the most common are the following six kinds:
the first kind: denial of service attack
denial of service attack is the most important attack against the digital currency trading platform at present. Through denial of service attack, the attacker makes the trading platform unable to access normally, Because users can not accurately distinguish the degree of attack, it often causes panic asset transfer, which brings some loss
the second kind: phishing
even the best technical measures at present can not make the digital currency trading platform avoid phishing attacks. Some hackers and outlaws can confuse digital currency investors by means of fake domain names or fake pages, while ordinary investors can't identify the authenticity, so it's easy to cause asset losses
the third: Hot wallet protection
many digital currency trading platforms use a single private key to protect the hot wallet. If hackers can access a single private key, they can crack the hot wallet related to the private key. For example, in the attack on yapizon of Seoul stock exchange in 2017, the attackers stole hot wallets from the trading platform twice in a year, resulting in a total loss of nearly 50% of the assets of the trading platform and eventually leading to the bankruptcy of the trading platform
Fourth: internal attack
e to the lack of perfect risk isolation measures or ineffective supervision on the authority of employees, the digital currency trading platform also has employees' self-monitoring and stealing, and some employees with operating authority of the platform use internal trust to seek ill gotten gains for themselves. For example, in 2016, the event of employees stealing bitcoin on shapeshift caused a total loss of US $230000 to the trading platform by stealing and reselling sensitive information to others
the fifth: software vulnerability
the software vulnerability of digital currency trading platform includes single sign on vulnerability, OAuth protocol vulnerability, etc. At present, all countries have laws requiring banks or other financial institutions to implement information security measures to protect customers' deposits. However, e to the fact that the blockchain field is still in its infancy, there is a lack of such specifications for encrypting digital assets. Therefore, it is not accidental that many trading platforms have a large number of loopholes in the absence of security constraints
sixth: transaction malleability
Technical supporters of blockchain often think that blockchain transactions are highly secure because they are recorded on records that are said to be unchangeable, but each transaction needs to have a corresponding signature, and the records can be temporarily forged before the final confirmation of the transaction. Mt. GOx, which once accounted for 80% of the world's total transactions, was hacked to submit code changes to the public ledger before the initial transaction was released, resulting in a loss of 473 million US dollars< br /> &# 160;

4. China's digital currency is relatively safe because it is promoted at the national level. According to Li Lihui, head of the blockchain working group of China Internet Finance Association and former president of Bank of China, our country has the largest population in the world, so the scale of our payment market is also the largest in the world. When we issue China's legal digital currency in such a market, we must ensure the reliability and security of digital currency tools in such a high concurrency market. The security of other areas is not necessarily, even if there are audit reports
hope to help you.

5.

The contract transaction of digital currency is not safe. There are still many loopholes in the digital currency trading platform, for example, the most common are the following six kinds:

1. Denial of service attack

denial of service attack is the most important attack against the digital currency trading platform at present. Through denial of service attack, the attacker makes the trading platform unable to access normally, Because users can not accurately distinguish the degree of attack, it often causes panic asset transfer, which brings some loss

2. Phishing incident

even the best technical measures at present can not make the digital currency trading platform avoid phishing attacks. Some hackers and criminals can confuse digital currency investors by means of fake domain names or fake pages, while ordinary investors can't identify the authenticity, so it's easy to cause asset losses

Many digital currency trading platforms use a single private key to protect the hot wallet. If hackers can access a single private key, they can crack the hot wallet related to the private key. For example, in the attack on yapizon of Seoul stock exchange in 2017, the attackers stole hot wallets from the trading platform twice in a year, resulting in a total loss of nearly 50% of the assets of the trading platform and eventually leading to the bankruptcy of the trading platform

Fourth, e to the lack of perfect risk isolation measures, or ineffective supervision on the rights of employees, some employees who have the operation rights of the platform use internal trust to seek unjust wealth for themselves. For example, in 2016, the event of employees stealing bitcoin on shapeshift caused a total loss of US $230000 to the trading platform by stealing and reselling sensitive information to others

Fifth, the software vulnerability of digital currency trading platform includes single sign on vulnerability, OAuth protocol vulnerability and so on. At present, all countries have laws requiring banks or other financial institutions to implement information security measures to protect customers' deposits. However, e to the fact that the blockchain field is still in its infancy, there is a lack of such specifications for encrypting digital assets. Therefore, it is not accidental that many trading platforms have a large number of loopholes in the absence of security constraints

6. Transaction malleability the technical supporters of blockchain often think that blockchain transactions are highly secure because they are recorded on records that are said to be unchangeable, but each transaction needs to have a corresponding signature, and the records can be forged temporarily before the final confirmation of the transaction

extended data:

rules of contract transaction

1. Transaction time

contract transaction is 7 * 24 hours transaction, which will be interrupted only ring the settlement or delivery period of 16:00 (UTC + 8) every Friday. In the last 10 minutes before delivery, the contract can only be closed, not opened

Transaction types are divided into two types, opening and closing. Opening and closing positions are divided into two directions: buying and selling:

buying open long (bullish) refers to buying a certain number of contracts when users are bullish and bullish on the index. Carry out "buy open more" operation, match success will increase long position

selling pingo (multi order closing) refers to the selling contract that the user makes up for when he is no longer bullish on the future index, offsets with the current buying contract and exits the market. Carry on "sell flat much" operation, match after success, will rece long position

short selling (bearish) refers to the new sale of a certain number of certain contracts when the user is short or bearish on the index. Carry out the operation of "sell short" and increase the short position after successful matching

buy close (short single close) refers to the buy contract that the user will not be bearish on the future index market and make up for, offset with the current sell contract and exit the market. Carry out "buy short" operation, after matching successfully, short position will be reced

3. Order method

limit order: the user needs to specify the price and quantity of the order. Limit order can be used for opening and closing positions

order at opposite price: if you choose to order at opposite price, you can only enter the order quantity, not the order price. The system will read the latest competitor price at the moment of receiving the entrustment (if the user buys, the competitor price is the selling price of 1); If it is a sell, then the counter price is buy 1 price). Issue a price limit order for this counter price

4. Position

the user owns the position after opening and trading, and the positions in the same direction of the same contract will be merged. In a contract account, there can only be 6 positions at most, that is, multiple positions of current week contract, short positions of current week contract, multiple positions of next week contract, short positions of next week contract, multiple positions of quarterly contract and short positions of quarterly contract

5. Order restriction

the platform will restrict the number of single user's positions in a certain period of contract and the number of single open / close positions, so as to prevent users from manipulating the market

when the number of positions or entrustments of users is too large, the platform has the right to require users to take risk control measures, including but not limited to cancellation of orders, closing positions, etc. The platform has the right to adopt measures including but not limited to limiting the total number of positions, limiting the total number of consignments, limiting the opening of positions, withdrawing orders, forcibly closing positions, etc. for risk control

6. Digital currency does not worry about counterfeit money. If it is paper money, it worries about counterfeit money. I don't worry. I didn't take any money with me.