Protected settlement wallet

Changing where your funds go requires your password and sends an email alert. A hijacked browser session cannot silently redirect your money.

Least-privilege API keys

Keys can create and read payments only. They cannot withdraw, edit settings or rotate themselves. Roll a key in one click and the old one is revoked instantly.

Signed, replay-safe webhooks

Every event carries a timestamped HMAC-SHA256 signature. Webhook URLs must be public https endpoints — internal and private addresses are blocked to prevent server-side request forgery.

Keys encrypted at rest

Deposit-address private keys are stored encrypted. Deposit addresses are per-order and are consolidated or settled by the platform, with gas sponsored.

Brute-force protection

Login, registration and password-reset endpoints are rate limited, reset codes expire in 15 minutes with limited attempts, and sign-in errors never reveal whether an email exists.

Auditable by design

Every payment, settlement and withdrawal is recorded with its Solana transaction hash, and every webhook attempt is logged so you can reconcile end to end.