bitFlyer
bitFlyer
  • Markets
  • Rewards hub
Log inSign Up
Asset and account protection

Security measures

bitFlyer describes account protection, hot and cold wallet separation, and risk checks. Reserve ratios, addresses, and audits follow what is actually published. This page does not state an unverified ratio.

Four security notes

Only arrangements that can be described are listed. Unverified ratios, fund sizes, and coverage rates are not shown here.

Reserve addresses and audit disclosures

On-chain information you can check

Reserve ratios, addresses, and audit reports follow what is actually published. This page does not turn an unverified redemption ratio into a promise.

  • If a reserve address or a Merkle proof is published, you can check it with the method in that disclosure.
  • Addresses and audits that have not been published are not described here as completed.

Hot and cold wallet separation

Separate hot and cold wallets, with multi-party signing

Cold wallets and hot wallets are managed separately. The share held offline, the number of signers, and the hardware used follow the operations disclosure. This page does not state an unverified percentage.

  • The cold wallet is separate from the hot wallet used for day-to-day withdrawals.
  • Signer count, limits, and hardware follow the operations note, not a figure on this page.

Response to risk events

How risk events are handled

Whether a protection fund exists, its size, and what it pays follow a formal announcement. This page does not show an unverified fund size or a promise to cover every loss.

  • Whether a protection fund exists, and any amount or payout scope, follows a formal announcement only.
  • This page does not display a fund size.

Checks on sign-in, transfers, and withdrawals

Account and compliance checks

The platform runs risk checks on sign-in, transfers, and withdrawals. Rule counts and block rates follow the live policy. This page does not state an unverified metric.

  • Sign-in from a new place, a device change, and sensitive actions can be sent to a risk check.
  • The exact rules and what they block follow the live policy. This page does not state an unverified coverage rate.

Protect your account

Turn on authenticator 2FA, set an anti-phishing code, and update your password regularly.

Open security settingsRead the phishing guide