Our success depends on keeping your assets safe
We maintain our own PCI DSS / SOC 2 compliant facility for the storage of your assets. No crypto assets are stored in any cloud service providers. No cloud employees have access to our secure asset storage servers. Multiple Signature technology is utilized from the moment you make your deposit, and we only keep our own funds in our hot wallet until you request a withdrawal.
If a single user finds out that we haven’t included their particular balance in the report, they can publicly call us out.
LEARN MOREIPS / IDS | Database Encryption | HTTPS / VPN | Log Alerting | Security Training | Penetration Testing | Multi-Signature Wallets | Web Application Firewall | CDN | Systems Monitoring | UNIX O/S | Storage Encryption | Vulnerability Scanning | Two-(or more)-Factor Authentication | Egress Firewalls |
Network Segregation | Bare Metal Hardware | Proven Permissions Management | Kernel Auditing
Many modern exchanges were built and launched in a hurry, depending on insecure bleeding edge cloud technology to provide all the services.We have taken our time and paid special attention to building an exchange that uses time tested and proven technology to correctly handle the basics.
The IT team at BlocPal has over a century of collective experience in securely building and protecting internet applications. With roots in Military Communications, Banking, Datacenter Operations, Credit Cards, and Crypto processing, our team has been hand picked to deliver on our security promise.
A primary tenant of information security is the reduction of your attack surface. So if your crypto keys are stored in a cloud provider, you’ve already failed. You’ve opened yourself up to hypervisor holes, potential root kits pre-built into your operating systems, traffic sniffing by rogue actors, and the entire IT staff of the cloud provider having access to your system internals.
Decentralized Exchange Built for Real-World Assets
