Hacker Read top | best | new | newcomments | leaders | about | bookmarklet login

It relies on you having a BTC wallet with coinbase - where coinbase controls the private key.


sort by: page size:

So with coinbase you have no control over your private key? You can only spend your btc through coinbase?

You need to transfer the funds from your Coinbase account to Coinbase wallet. You’ll never have access to the private keys on Coinbase.

At that point, Coinbase wallet is the equivalent of Metamask et al


Interesting point. I have some BTC at Coinbase. Not sure how I proceed to own the keys?

TL;DR: Store your bitcoin on Coinbase, without giving up control of your private keys.

It doesn't: coinbase owns the keys, so they own your crypto.

Coinbase lets you control your own private keys: https://www.coinbase.com/multisig

That doesn't seem correct. It's pretty simple to buy BTC on Coinbase and then transfer it to another wallet. Then you can do anything you want with it.

So if I understand correctly, coinbase creates a private internal "wallet" for you, "hidden" from the public ledger, and owns the private key to it?

Thank you, it's funny how GP talks about an "open, interoperable network" then...


Yes, Coinbase would control the private keys for any bitcoin stored there. So the issue is most likely that Coinbase hold's the majority of it's digital currencies in cold storage - essentially stored on air-gapped computers.

To redeem your bitcoin cash (BCH), you have to import your private keys into a new bitcoin cash wallet, and then transfer them. If you do not transfer your BTC to a new wallet before importing your private keys to the BCH wallet, a malicious wallet could then have access to both your BCH and BTC. With replay protection, the solution is to move your BTC to a new wallet, then import the old private keys (with a balance of 0 BTC, but still has BCH associated) to the BCH wallet.

Hopefully you can see all of the failure points here. I have coins stored in cold storage and haven't yet bothered to claim any BCH due to the hassle, and lack of exchanges where you can sell it.


You don't own Bitcoin if you don't control the keys. If you read the Coinbase ToS,

> Coinbase securely stores all Digital Currency private keys in our control in a combination of online and offline storage.

And if you read the whole thing,

> supported Digital Currency

is mentioned multiple times.

[1] https://www.coinbase.com/legal/user_agreement?locale=en-US#1....


FWIW this applies to any coins you don't personally hold the private key for not just BTC on Coinbase.

Coinbase has no control over any cryptocurrency accounts besides their own.

Each cryptocurrency user generates a private key that becomes a wallet and is used to sign transactions. These signed transactions are then broadcast to the internet for balance keeping nodes to keep track of. They do it in a globally distributed manner (no central entity) and earn rewards for their work (like collecting a tiny fraction of the transaction as a fee).

The private key is never disclosed to anyone.


So how does Coinbase do it?

Coinbase or any other exchange can certainly steal your coins, just like a bank can steal your money. Hosting your own private key is like having your money in your mattress -- it's as secure as you allow it to be, and once stolen it's gone forever.

CoinBase didn't say how they did it anywhere, did they? It would be good to get clarification though.

There is a "Coinbase Wallet," though, which is somewhat confusingly a separate app where you actually do hold your own private keys.[0]

You can seamlessly link your exchange account and your Wallet account so you can move the money right into your own Coinbase Wallet with your own private keys as soon as you're done with the exchange.

I'm not sure the parent comment meant that wallet, but Coinbase does "give you a wallet" if you want, complete with your own private keys.

[0] https://wallet.coinbase.com/faq/


There's something I don't quite get (being a cryptocurrency newbie). Why can coinbase users not simply import their private key into some other wallet that supports both Bitcoin and Bitcoin Cash?

My understanding is that Bitcoin Cash recognises the old Bitcoin blockchain as their own up to the point of the fork. So as of Aug 1st all Bitcoin balances are Bitcoin Cash balances as well. Or is that not how it works?


The irony being of course is that Coinbase is literally a financial instution

but given confirmation time inherent to the network, I don't see a way around doing something similar to what coinbase have done here (minus the egregious part where they hold your private key)


Exactly. Coinbase is a web service, not a 'true' wallet.
next

Legal | privacy