Abstract
After the original publication of the Bitcoin paper, cryptocurrency exchanges emerged to connect the fiat currency world to the cryptocurrency world. Although many users of cryptocurrency exchanges demonstrate confidence in this simple role for an exchange, recent security incidents suggest that a gap exists between the perception of users and the reality. That is, operations, informational assets to be protected, and security postures should be clarified. In this paper, we summarize the results of an investigation of 16 registered and 16 semi-registered cryptocurrency exchanges by Japanese regulators, then analyze the reality of functionalities, implementation, and operations of cryptocurrency exchanges. Then, we propose short-term directions and long term works to fix pitfalls through building technology and management standards to secure the cryptocurrency exchange and custodian, which are essential building blocks toward healthy blockchain ecosystem.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Nakamoto, S.: Bitcoin: a peer-to-peer electronic cash system (2008). https://bitcoin.org/bitcoin.pdf
Decker, C., Wattenhofer, R.: Bitcoin transaction malleability and MtGox. In: Kutyłowski, M., Vaidya, J. (eds.) ESORICS 2014. LNCS, vol. 8713, pp. 313–326. Springer, Cham (2014). https://doi.org/10.1007/978-3-319-11212-1_18
Shane, D.: \$530 million cryptocurrency heist may be biggest ever, CNN Tech (2018). https://money.cnn.com/2018/01/29/technology/coincheck-cryptocurrency-exchange-hack-japan/index.html
GURUBARAN, \$60 Million Worth Cryptocurrencies Stolen Hackers From Japanese Cryptocurrency Exchange, GBHackers on security (2018). https://gbhackers.com/60-million-cryptocurrencies-zaif-exchange/
Binance: Binance Security Breach Update (2019). https://binance.zendesk.com/hc/en-us/articles/360028031711
Wolfie, Z.: Bitpoint Exchange Hacked for \$32 Million in Cryptocurrency (2019). https://www.coindesk.com/japanese-exchange-bitpoint-hacked-by-32-million-worth-in-cryptocurrencies
International Organization for Standardization, Information Technology - Security Techniques - Information Security Management Systems - Requirements, ISO/IEC TR 27001:2013 (2013). https://www.iso.org/standard/54534.html
International Organization for Standardization, Information Technology - Security Techniques - Code of practice for information security controls, ISO/IEC TR 27002:2013 (2013). https://www.iso.org/standard/54533.html
Sato, M., Shimaoka, M., Nakajima, H.: General Security Considerations for Cryptoassets Custodians (2020). https://www.ietf.org/id/draft-vcgtf-crypto-assets-security-considerations-06.txt
International Organization for Standardization, Blockchain and distributed ledger technologies - Security of digital asset custodians, ISO/IEC TR 23576 (2019). https://www.iso.org/standard/76072.html
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2020 Springer Nature Switzerland AG
About this paper
Cite this paper
Suga, Y., Shimaoka, M., Sato, M., Nakajima, H. (2020). Securing Cryptocurrency Exchange: Building up Standard from Huge Failures. In: Bernhard, M., et al. Financial Cryptography and Data Security. FC 2020. Lecture Notes in Computer Science(), vol 12063. Springer, Cham. https://doi.org/10.1007/978-3-030-54455-3_19
Download citation
DOI: https://doi.org/10.1007/978-3-030-54455-3_19
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-54454-6
Online ISBN: 978-3-030-54455-3
eBook Packages: Computer ScienceComputer Science (R0)