Security Policy
Last Updated: September 30, 2026 • Institutional Vault Standards
1. Multi-Signature Cold Storage Vault Architecture
To protect user capital against online security vectors, over 95% of all platform liquidity reserves are maintained in geographically distributed, air-gapped cold storage vaults. Moving funds requires threshold cryptographic multi-signature authorization across hardware security modules (HSM).
2. 256-Bit Cryptographic Encryption
All data transmission between client browsers, mobile devices, and server nodes is encrypted using TLS 1.3 protocol with 256-bit AES cryptographic ciphers. Database records containing user profile details, password hashes, and session tokens are protected by HSM-backed key rotation systems.
3. High-Availability & DDoS Mitigation
Crow Fx is hosted across redundant multi-region cloud centers with Cloudflare Enterprise Web Application Firewall (WAF) integration. Our trading engines and API gateways feature automated volumetric DDoS mitigation capable of handling multi-terabit attacks without service disruption.
4. Anti-Phishing Safeguards & Official Domains
Always verify that you are visiting our official domains: crowfx.app.
★ Security Notice:
Crow Fx support staff will NEVER ask for your account password, private wallet keys, or seed phrases. Any communication requesting your credentials is a phishing attempt.
5. Vulnerability Disclosure & Continuous Audit
Our core trading engine, smart contracts, and database layer undergo routine third-party penetration testing and vulnerability audits. Security researchers who discover potential vulnerabilities are encouraged to submit reports to our security response team under our responsible disclosure program.
Report a Security Concern?
Contact our security operations center directly at support@crowfx.app.