Improving security for users of decentralized exchanges through multiparty computation

Abstract

Decentralized cryptocurrency exchanges offer compelling security benefits over centralized exchanges: users control their funds and avoid the risk of an exchange hack or malicious operator. However, because user assets are fully accessible by a secret key, decentralized exchanges pose significant internal security risks for trading firms and automated trading systems, where a compromised system can result in total loss of funds. Centralized exchanges mitigate this risk through API key based security policies that allow professional users to give individual traders or automated systems specific and customizable access rights such as trading or withdrawal limits. Such policies, however, are not compatible with decentralized exchanges, where all exchange operations require a signature generated by the owner's secret key. This paper introduces a protocol based upon multiparty computation that allows for the creation of API keys and security policies that can be applied to any existing decentralized exchange. Our protocol works with both ECDSA and EdDSA signature schemes and prioritizes efficient computation and communication. We have deployed this protocol on Nash exchange, as well as around several Ethereum-based automated market maker smart contracts, where it secures the trading accounts and wallets of thousands of users.

Trade or Trick? Detecting and Characterizing Scam Tokens on Uniswap Decentralized Exchange

“…For example, Kim et al [54] analyzed vulnerabilities of cryptocurrency exchanges and individual user wallets and Ji et al [52] demystified the fake deposit vulnerability related to exchanges and tokens. Others are take efforts to evaluate or improve the effectiveness and reliability of decentralized cryptocurrency exchanges [31,35,40,56,69]. Lo et al [56] verify the effectiveness of decentralized exchanges and Annessi et al [31] are exploring ways to improve security for DEX users through multiparty computation.…”

“…Others are take efforts to evaluate or improve the effectiveness and reliability of decentralized cryptocurrency exchanges [31,35,40,56,69]. Lo et al [56] verify the effectiveness of decentralized exchanges and Annessi et al [31] are exploring ways to improve security for DEX users through multiparty computation. DeFi Security.…”