Security & Proof of Reserves
Your assets, protected by design
Cold-first custody with MPC key management, 1:1 reserves you can verify with a Merkle proof, and a liquidation waterfall that protects every account from someone else’s losses.
95%+
of client assets in cold storage
MPC
threshold signing, no single private key
1:1
reserves verified by Merkle tree
24/7
security operations monitoring
Custody architecture
Cold vaults (95%+)
Air-gapped, geographically distributed. Withdrawals from cold require multi-party approval and a time lock.
Warm wallets
MPC-controlled buffers that top up hot wallets under strict velocity limits.
Hot wallets (<5%)
Only what’s needed for day-to-day withdrawals. Balances are rebalanced automatically every hour.
MPC key shards
Keys are split into shards held by independent signers — a full private key never exists in one place.
Proof of Reserves
Every month we publish a Merkle root of all client liabilities alongside on-chain wallet balances. You can verify that your balance is included using your personal leaf hash — without revealing anyone else’s data.
BTC104.2%
ETH102.8%
USDT101.5%
USDC100.9%
SOL103.1%
BNB101.7%Reserve ratios shown are illustrative while the platform runs in demo mode. Live attestations will be published here at launch.
- 1. Your balance + a unique salt are hashed into a leaf.
- 2. Leaves are paired and hashed up to a single Merkle root.
- 3. Recompute the path from your leaf to confirm it matches the published root.
Account protections
Two-factor authentication
TOTP codes for logins, withdrawals and API key creation.
Anti-phishing code
Your personal code appears in every genuine email we send.
Withdrawal whitelist
API withdrawals only reach whitelisted IPs and addresses.
Device & session control
Review active sessions and sign out other devices instantly.
Liquidation waterfall & insurance fund
Part of the Unified Margin pillar: risk is reduced gradually and in a fixed order, so a single bad trade never wipes out an account in one print — and never costs other users.
- 1
Margin call at 80% utilisation
You get an in-app and email alert. New risk-increasing orders are blocked until you add collateral or reduce exposure.
- 2
Incremental de-risking at 100%
The engine cancels open orders, then reduces the largest-risk position in slices through the book — not the whole account at once.
- 3
Collateral auto-conversion
Non-USDT collateral is converted by haircut order (lowest weight first) to cover the shortfall, using TWAP to limit market impact.
- 4
Insurance fund
If a position closes beyond bankruptcy price, the insurance fund absorbs the deficit so other users are never socialised.
- 5
Auto-deleveraging (last resort)
Only if the fund is exhausted, profitable opposite positions are reduced by priority ranking. Historically never triggered.
Bug bounty program
We reward researchers who responsibly disclose vulnerabilities in our web platform, APIs and custody infrastructure.
Stay safe from phishing
- We will never ask for your password, 2FA code or API secret — by email, phone or chat.
- Always check the address bar before logging in, and bookmark the official site.
- Genuine emails always show your anti-phishing code.
- Staff will never ask you to move funds to a “safe” wallet.