Security
Trust, but verify.
Every security claim on this page is something you can check yourself — which is the only kind of guarantee worth publishing.
Proof of reserves, every 24 hours
We publish a Merkle root of all customer balances alongside signed attestations of every on-chain reserve address. Your account page hands you your own leaf and the sibling hashes, so you can prove inclusion without trusting Trust Base — or the auditor.
See the current attestationLatest attestation
- Reserve ratio
- 104.2%
- Customer liabilities
- $184.0B
- On-chain reserves
- $191.7B
- Accounts included
- 41,206,884
root: 0x9f2c4a1e8b73d05f6ae2c9b481d37f0c5a6e29b4d81f7c03ae5b962d174f80cb
98%
Assets in cold storage
$250M
Insurance fund
99.997%
Uptime over 5 years
Defence in depth
Six layers, none of which trust the others
A control that only works when every other control is healthy is not a control.
Cold storage
98% of customer assets sit in HSM-backed vaults. Every movement needs quorum approval from key holders in three separate jurisdictions.
FIPS 140-2 Level 3
Hot wallet policy
The hot float is capped at 2% of custody and rebalanced hourly by an automated policy engine with a hard ceiling no operator can raise.
Capped at 2%
Account security
Passkeys by default, hardware 2FA supported, device attestation on every session, and a 24-hour lock on new withdrawal addresses.
Phishing-resistant
Infrastructure
Immutable infrastructure, signed builds, no standing production access. Every privileged action requires a second approver and lands in an append-only log.
Zero standing access
Insider risk
Dual control on all treasury operations, mandatory leave rotation for key custodians, and background re-screening every 24 months.
Dual control
Adversarial testing
Continuous bug bounty up to $2M, four external penetration tests a year, and a red team that reports to the board rather than to engineering.
$2M max bounty
Regulation
Licensed in 14 jurisdictions
Six of them are listed below. The full register, including passporting notices, is in the legal centre.
European Economic Area
MiCA — CASP authorisation
Ref CH-4419
Singapore
Major Payment Institution
Ref PS20210418
United States
FinCEN MSB registration
Ref 31000217412
United Kingdom
FCA cryptoasset registration
Ref 928471
Japan
JFSA Crypto Exchange Operator
Ref 00042
Segregated client money
Fiat balances are held at tier-1 banks in accounts titled to customers, never on the Trust Base balance sheet.
Questions
Security questions we get asked
Open an account and check the maths yourself.
Verification takes about two minutes. Verifying our reserves takes about thirty seconds.
No minimum deposit · Cancel anytime · Available in 46 currencies