Exchange Security: From 2FA to Cold Storage

Real crypto exchanges implement defense-in-depth:

Layer 1 — Network perimeter: - DDoS protection (Cloudflare, AWS Shield) - Web Application Firewall (WAF) - Rate limiting per IP and per user - Geographic blocking of sanctioned countries

Layer 2 — Application security: - Parameterized queries (SQL injection prevention) - Content Security Policy (XSS prevention) - CSRF tokens, CORS restrictions - JWT with short expiry (15 min access + refresh)

Layer 3 — Authentication: - bcrypt/Argon2 password hashing (12+ rounds) - TOTP 2FA (authenticator app, not SMS) - Hardware security keys (FIDO2/WebAuthn) for high-value accounts - Anti-phishing code (user-set string in every real email)

Layer 4 — Authorization: - RBAC for employees (support cannot access signing) - Multi-party approval for large withdrawals - 24h hold for new withdrawal addresses

Layer 5 — Cryptographic custody: - HSM key management (AWS CloudHSM, Thales Luna) - Multi-signature wallets (M-of-N threshold) - Cold storage for 90-98% of assets - Geographic distribution of signing keys

TOTP (Time-based One-Time Password) — RFC 6238:

The shared secret + current Unix time / 30 → HMAC-SHA1 → 6-digit code extracted via dynamic truncation.

Server-side verification: ``typescript const totp = new OTPAuth.TOTP({ issuer: 'NexChange', label: user.email, algorithm: 'SHA1', digits: 6, period: 30, secret: OTPAuth.Secret.fromBase32(user.twofa_secret), }); // window: 1 allows previous+next 30s window for clock drift const delta = totp.validate({ token: userCode, window: 1 }); if (delta === null) return error('Invalid 2FA code'); ``

Why not SMS? SIM-swapping attacks: attacker contacts the carrier, social-engineers a SIM swap, intercepts SMS codes. This has been used to steal millions from crypto users.

Hardware keys (FIDO2): Physical USB key (YubiKey) generates a cryptographic challenge-response. Immune to phishing because the key verifies the domain — a fake binance.com clone cannot trigger the key.

Hot wallet: Online, for real-time withdrawals. Contains 2-10% of total assets.

Cold wallet: Completely offline. Private keys stored in: - HSMs (Hardware Security Modules): Tamper-resistant hardware — the key never leaves the device. Even exchange engineers cannot extract it. - Air-gapped machines: Never connected to internet. Requests transferred via QR code. - Multi-location storage: Keys split using Shamir's Secret Sharing, stored in bank vaults across countries.

Withdrawal signing flow: 1. User requests withdrawal → risk engine approves 2. If amount < hot_wallet_threshold → HSM auto-signs 3. If amount > threshold → cold signing queue → two authorized signers in different locations must approve via HSM 4. M-of-N threshold signature computed → broadcast

Coinbase custody: 98% in cold storage, $320M insurance (Lloyd's of London), SOC 2 Type II audited, distributed across 5+ countries.

Mt. Gox (2014) — 850,000 BTC stolen (~$450M): Cause: No cold storage, single hot wallet, no multi-sig. Lesson: Cold storage became industry standard.

Bitfinex (2016) — 119,756 BTC stolen (~$72M): Cause: Compromised multi-sig via third-party custody (BitGo). Lesson: In-house HSM custody.

Binance (2019) — 7,000 BTC stolen (~$40M): Cause: Phishing + API key compromise. Binance covered the loss from SAFU (Secure Asset Fund, $1B reserve). Led to enhanced API key security.

FTX (2022) — $8B+ missing: Cause: Internal fraud — customer deposits lent to Alameda Research without authorization. Not a hack. Lesson: Proof of reserves became critical.

Modern practices born from these events: - SAFU-style insurance reserves - Monthly proof of reserves (Binance publishes Merkle tree proofs) - Independent security audits - Bug bounty programs ($250K+ rewards) - Mandatory 2FA for all withdrawals