Decentralized cryptocurrency exchanges offer compelling security benefits over centralized exchanges: users control their funds and avoid the risk of an exchange hack or malicious operator. However, because user assets are fully accessible by a secret key, decentralized exchanges pose significant internal security risks for trading firms and automated trading systems, where a compromised system can result in total loss of funds. Centralized exchanges mitigate this risk through API key based security policies that allow professional users to give individual traders or automated systems specific and customizable access rights such as trading or withdrawal limits. Such policies, however, are not compatible with decentralized exchanges, where all exchange operations require a signature generated by the owner's secret key. This paper introduces a protocol based upon multiparty computation that allows for the creation of API keys and security policies that can be applied to any existing decentralized exchange. Our protocol works with both ECDSA and EdDSA signature schemes and prioritizes efficient computation and communication. We have deployed this protocol on Nash exchange, as well as around several Ethereum-based automated market maker smart contracts, where it secures the trading accounts and wallets of thousands of users.

翻译：中央化的外汇交易通过基于API的关键安全政策减轻了这种风险,这种政策允许专业用户向个体交易商或自动系统提供具体和可定制的准入权,如交易或退出限制等。但是,这种政策与分散化的交易所不兼容,因为所有交易所业务都需要由业主秘密钥匙生成的签名。本文介绍了一项基于多式计算的协议,允许创建API钥匙和安全政策,可以适用于任何现有的分散化交易所。我们的协议与ECDSA和EdDSA的签名计划一起工作,并优先考虑高效计算和通信。我们实施了关于纳什交换的这一协议,以及一些基于Eieum的自动市场制造商智能合同,它保障了成千上万用户的交易账户和钱包。