#897 Keeping Your Crypto Assets Secure w/ Adam Healy

— BlockFi's comprehensive security approach spans internal infrastructure, cryptographic practices, blockchain engineering, and custodian relationships to protect client and company assets.

— Private key management is identified as a critical and niche competency; most organizations—even government agencies—manage public key infrastructure poorly, making it a core differentiator in crypto security.

— Vendor risk management requires continuous monitoring and deep technical due diligence; BlockFi detected the HubSpot breach in real time through log analysis when a compromised employee accessed their instance.

— Individuals should prioritize two-factor authentication as the single most effective fraud prevention measure and practice operational security (OPSEC) by limiting public discussion of crypto holdings.

— Physical security and kidnapping threats are real risks, particularly for prominent holders; anonymity or misdirection about asset control can reduce personal threat profiles.

— Institutions entering crypto often lack frameworks to assess vendor and custodian security; Adam recommends the CCSS (Crypto Currency Security Standard) as an accessible starting point.

— Enable two-factor authentication immediately on all financial and crypto applications; this single step would reduce fraud rates by double digits industry-wide according to industry data Microsoft has released.

— Establish a personal operational security (OPSEC) plan: decide what information you protect versus what you project publicly, and consider employing misdirection (e.g., claiming professional asset management) to lower your individual threat profile.

— Request that crypto service providers and custodians encrypt your data with customer-managed keys so that vendor breaches do not automatically expose your information without also compromising your encryption keys.