Originally Posted by
TheGooner
As I understand the storage solutions :
Online wallets and exchanges are nominally secure (especially the big brands) - rating 4/10
As they are online that are constantly hackable 24x7x365. They are a target with a big payload - so we will see breaches from time to time. Mt Gox, and Coincheck just recently (NEM). You also run the risk of being caught by login/password sniffing trojans when sending data.
I am assuming that there is little real risk of employee fraud and/or software backdoors at the best places.
Software wallets on Phones are nominally secure. rating 5/10
The phone is dropable, prone to being misplaced, and (usually) always online.
While it's not a big target - if someone knows you a have a phone wallet - then you might be targetted. There is also the issue that many people have quite weak passwords on mobile apps.
Software wallets on connected Desktops are somewhat secure. rating 7/10
It's physically secure (unless stolen from home).
But you run the risk of contracting malware during your browsing that might be hunting for software wallets.
Good security software can help you - as can intelligent browsing habits - but there is a risk.
Paper Wallets are mostly secure. Rating 8/10
But it's like a "bearer bond". If it gets stolen then the holder has access to the funds.
Software Wallets on unconnected computers (unless sending) - Rating 9/10.
Again they can be stolen so store securely, but even then the funds are safe unless they can break the software encryption.
Hardware Wallets are highly secure. Rating 9.9/10.
These can of course be stolen - but if you have them physically hidden / secure then this is minimal.
There is "almost zero" software risk due to the limited software interface.
------------------------
What I wonder is where the lightning network sits for security? Isn't like having something on a lightening node - a bit like an online exchange?
You have to be online / connected to use, the wallet software is new / buggy and possibly prone to early targeting within the network?