Security

The majority of user funds are stored in Cold Wallet.

• We store the majority of our customer\'s funds in a secure offline wallet, with only a portion available in a \"hot\" wallet for instant withdrawals.

Two-Factor Authentication (Google Authenticator)

• Customers can set up two-factor authentication for accounts with Google Authenticator to provide an extra layer of security. With 2-Step Verification, you’ll protect your account with both your password and your phone. We strongly recommend that you use the Google Authenticator. If you have not enabled, click here.

Best Security Practices

• Our website traffic runs entirely over encrypted SSL (https). Wallets (and private keys) are stored using AES-256 encryption.
  Our backup is done in real time. A secondary backup is created every 60 seconds.

Firewall

• We use firewalls to only allow authorized access to specific ports.

Server Scanning

• We employ a 3rd party to scan our networks for any security issues.

Application Security

• The wallet system is completely disconnected from the interface. Attempted DDoS attack and others are automatically banned by our CloudFlare layer.
  We use SQL injection filters and verify the authenticity of POST, PUT, and DELETE requests to prevent CSRF attacks.

Authentication

• We hash passwords stored in the database (salted bcrypt).

Protection Against DDoS Attacks

• Our system is fully protected and resistant to DDoS attacks.