[jyu]

Thanks for the overview. It's refreshing to get straight answers.

Which wallet are you guys using? I've heard good things about armory which make it easier to do hot / cold storage. Keeping withdrawals separate from the application server makes a lot of sense; is this using the SSL protocol for JSON-RPC on a non-standard port, and then closing off internet facing ports for that computer/server?

Are you doing any sort of 2 factor authentication to limit hacked accounts getting emptied?

I'd be happy to email or something if you're up for it.