Security

Controls you can read.

How we protect your business, what is already in place, and what is still pending. Audits and monitoring reduce risk. They never remove it.

Our principles

Three rules every product follows.

Your wallet signs

No transfer, drawdown or supply happens without a confirmation from your own wallet.

Preview before you move

Every route and position is shown in full before funds leave your control.

No feed, no number

We show rates from live data or nothing. We never fill a gap with an estimate.

What’s in place

Platform controls, stated plainly.

Where something is still pending, we say so. Read the full security statement.

In development

Protected service access

Sensitive access stays outside browser-delivered code.

In development

Repeated-action protection

Repeated requests do not create repeated financial actions.

In development

Abuse protection

Sensitive routes are rate limited.

In development

Trusted-site checks

Changes are checked against the expected site.

In development

Private analytics

Sensitive financial and identity data is excluded from analytics.

In development

Durable money records

Money records use managed durable storage.

Pending

Public audit report

The public report will be linked when the review is complete.

Pending

Bug bounty scope

Bounty terms will be published with the programme scope.

Lending against digital assets carries market, liquidation and smart contract risk. Read them before you start.

Found a vulnerability?

Tell us privately and we will respond. Bounty terms will be published with the programme scope.

Report an issue

Know the risks

Lending against digital assets carries market, liquidation and smart contract risk. Read them before you start.

Risk disclosure