Security and custody
What exists, how it works and what is still being built — with no marketing badge.
| Custody | Every person has their own deposit addresses, derived per user and per network (HD wallet). Withdrawals leave hot wallets whose balance is rebalanced automatically across networks; what is not needed for the day is not exposed. |
| Futures | Futures positions live in segregated accounts, one per user — and one per copied leader in Copy Trading. Futures balances never mix with anyone else's. |
| Access | App-based 2FA and passkeys. Every withdrawal requires a confirmation code (from the app or by e-mail), can be restricted to an address whitelist (with a 24-hour cooldown for new addresses) and respects the daily cap. |
| Controls | Daily withdrawal cap, one withdrawal every 5 minutes and at most US$ 20,000 per hour; hot-wallet eligibility checked on every request. Active sessions can be listed and signed out under Security. |
| Monitoring | Continuous watchdogs on hot-wallet balances, ledger invariants and liabilities, with reconciliation between the database and the networks. A discrepancy pauses payouts before it becomes a loss. |
| Proof of reserves | A snapshot of reserves × liabilities is generated every hour. Publishing it is still in development — we say so instead of showing a badge nobody audits. |
Vulnerability reports: security@offcode.pro. Reports involving money are triaged first.