Security
Money protected at every step
Signed requests
Every API request is signed with the shop’s secret key and valid for five minutes. The key is shown once and stored encrypted.
Two-factor authentication
Log in with a password and a code from an authenticator app. 2FA is required for payouts and address changes, and always for staff.
Payout protection
A new address becomes active after 24 hours. The first payout to it and large amounts are reviewed manually, the largest by two different employees.
Isolated signing
The service that sends USDT accepts no incoming connections and only runs jobs with a verified signature.
Ledger without gaps
Every money movement is a double-entry posting. The database rejects an unbalanced operation and any change to a recorded one.
Audit log
Every action of staff and merchants goes to an append-only log together with the action itself, not separately.