BitGo, a Palo Alto-based bitcoin startup known for its multi-signature wallet technology, has announced the quiet launch of a dynamic fraud filtering service earlier this year. According to Mike Belshe, co-founder and CEO of BitGo, the service has already prevented a loss of over $10,000 USD (more than 18 BTC) for one customer.
Multi-Signature Security at the Core
BitGo has been one of the first multi-signature wallets on the market, designed to protect bitcoin from theft and loss. Unlike single-key wallets that are vulnerable to a single point of failure, BitGo employs a 2-of-3 multi-signature scheme. Each user receives three keys: one on their device, one on BitGo's server, and one stored offline as a backup. Transactions require two keys to be co-signed, adding an extra layer of security.
Dynamic Filtering Against Clipboard Hijackers
The new fraud filtering service specifically targets a new breed of malware that hijacks the user's clipboard. Discovered by Symantec in February, the Trojan.Coinbitclip malware monitors the clipboard for copied bitcoin addresses and replaces them with the attacker's address when pasted. BitGo's dynamic fraud detection analyzes transaction requests in real time and compares them against user-defined criteria. If a request appears fraudulent, BitGo refuses to co-sign and reports an error to the user.
Belshe explained that the fraud checks are applied both in the wallet interface and via the BitGo API, providing comprehensive coverage. Previously, the only reliable defense against such malware was using a hardware wallet, which stores private keys offline. BitGo's solution integrates anti-fraud directly into the online wallet, making protection accessible for everyday users.
Enterprise-Grade Protection for All
Beyond personal wallets, BitGo offers an enterprise suite for bitcoin portfolio management, corporate treasury, and enterprise enablement. The dynamic fraud filtering complements these services by adding a real-time security layer. BitGo continues to refine its security features, aiming to set a new standard for fraud prevention in the cryptocurrency ecosystem.