The Pomp Podcast
#897 Keeping Your Crypto Assets Secure w/ Adam Healy
- BlockFi's comprehensive security approach spans internal infrastructure, cryptographic practices, blockchain engineering, and custodian relationships to protect client and company assets.
- Private key management is identified as a critical and niche competency; most organizations—even government agencies—manage public key infrastructure poorly, making it a core differentiator in crypto security.
- Vendor risk management requires continuous monitoring and deep technical due diligence; BlockFi detected the HubSpot breach in real time through log analysis when a compromised employee accessed their instance.
- Individuals should prioritize two-factor authentication as the single most effective fraud prevention measure and practice operational security (OPSEC) by limiting public discussion of crypto holdings.
- Physical security and kidnapping threats are real risks, particularly for prominent holders; anonymity or misdirection about asset control can reduce personal threat profiles.
- Institutions entering crypto often lack frameworks to assess vendor and custodian security; Adam recommends the CCSS (Crypto Currency Security Standard) as an accessible starting point.