Security
Protection at three levels: your account, your money and our own operations.
Your account
- Two-step verification required for withdrawals
- Passkeys supported
- Recovery codes and device approval
- Anti-phishing code in every email we send
- Session and device list you can end at any time
Your money
- A unique wallet per user
- New withdrawal addresses wait 24 hours before use
- Daily and per-transaction withdrawal limits
- Risk screening on every withdrawal, with manual review when flagged
- Customer funds tracked in a double-entry ledger, with no direct balance editing
Our controls
- Large withdrawals need two different approvers
- Signing keys are kept in a separate system, never in the app database
- Emergency stop for each part of the platform
- Every sensitive action is written to an audit log
- Independent security testing before launch
We will never ask for your password, seed phrase or private keys. Staff never need them.
These are the controls we are building to. Independent audits and certifications will be listed here once completed.
Create account