Security and custody
How client assets are held, how access is controlled, and what we expect from you.
Platform controls
Segregated custody
Client assets are held separately from operating capital, with reconciliation performed daily.
Hardware key management
Withdrawal authority requires multiple independent approvals on hardware security modules.
Continuous monitoring
Settlement paths, deposit addresses and withdrawal requests are screened in real time.
Least-privilege access
Internal access to client data is role-scoped, logged and reviewed.
What we ask of you
Enable two-factor authentication
An authenticator app is required before your first withdrawal.
Whitelist withdrawal addresses
Whitelisted destinations reduce the risk of misdirected settlement.
Verify every request
The desk will never ask for your password, codes or seed phrase.
Report a security concern
If you believe your account has been compromised, contact the desk immediately and we will freeze withdrawal activity pending review.