Security and custody
Client assets are held in pooled wallets rather than one wallet per client. This is standard practice for centralized exchanges.
01Pooled custody, separate accounting
Client assets are held in pooled wallets rather than one wallet per client. This is standard practice for centralized exchanges.
Each client balance is tracked in an internal double-entry ledger. Pooled reserves back the sum of all client balances and are reconciled continuously.
02Keys are held by a custody provider
Private keys are held by a third-party custody provider under multi-party controls. No single employee can move client assets.
Key management is outsourced to a specialist. Hot-wallet compromise is the leading cause of exchange failure.
03The ledger cannot be quietly edited
Ledger entries are append-only, enforced at the database level. Corrections are posted as new entries.
A reconciliation job recomputes every balance from the journal and compares it against reserves. Any discrepancy is treated as a P1 incident.
04Account security
Passwords are hashed with Argon2id. Sessions are bound to a rotating identifier and expire on password change.
Two-factor authentication is optional and strongly recommended. When it is enabled, every withdrawal requires a fresh code, so a hijacked session cannot move funds on its own.