Security measures
bitFlyer describes account protection, hot and cold wallet separation, and risk checks. Reserve ratios, addresses, and audits follow what is actually published. This page does not state an unverified ratio.
Four security notes
Only arrangements that can be described are listed. Unverified ratios, fund sizes, and coverage rates are not shown here.
Reserve addresses and audit disclosures
On-chain information you can check
Reserve ratios, addresses, and audit reports follow what is actually published. This page does not turn an unverified redemption ratio into a promise.
- If a reserve address or a Merkle proof is published, you can check it with the method in that disclosure.
- Addresses and audits that have not been published are not described here as completed.
Hot and cold wallet separation
Separate hot and cold wallets, with multi-party signing
Cold wallets and hot wallets are managed separately. The share held offline, the number of signers, and the hardware used follow the operations disclosure. This page does not state an unverified percentage.
- The cold wallet is separate from the hot wallet used for day-to-day withdrawals.
- Signer count, limits, and hardware follow the operations note, not a figure on this page.
Response to risk events
How risk events are handled
Whether a protection fund exists, its size, and what it pays follow a formal announcement. This page does not show an unverified fund size or a promise to cover every loss.
- Whether a protection fund exists, and any amount or payout scope, follows a formal announcement only.
- This page does not display a fund size.
Checks on sign-in, transfers, and withdrawals
Account and compliance checks
The platform runs risk checks on sign-in, transfers, and withdrawals. Rule counts and block rates follow the live policy. This page does not state an unverified metric.
- Sign-in from a new place, a device change, and sensitive actions can be sent to a risk check.
- The exact rules and what they block follow the live policy. This page does not state an unverified coverage rate.
Protect your account
Turn on authenticator 2FA, set an anti-phishing code, and update your password regularly.