BLEDEXS
Home Swap Markets Fees Security Contact

Language

EN ID MS
Launch app
Page

Security & Transparency

Layered defenses, non-custodial architecture and a fee model you can verify on-chain.

Last updated November 3, 2026

Security is not a feature we bolt on — it is the architecture. BLEDEXS is fully non-custodial: your wallet signs every transaction and your tokens never leave your control.

What we protect

  • Admin accounts use Argon2id password hashing plus optional TOTP two-factor authentication.
  • API keys and secrets are encrypted at rest with AES-256-GCM.
  • Every form is protected by CSRF tokens, strict validation and output escaping.
  • Content Security Policy, HSTS and anti-framing headers defend against XSS and clickjacking.
  • Login and API endpoints are rate-limited and every sensitive action is audit-logged.

What we never collect

We never ask for seed phrases, private keys, or wallet exports. Anyone requesting them is impersonating us.

Platform protections

If you believe you found a security issue, include clear reproduction steps. Please do not test against other users or public infrastructure.

  • Argon2id admin authentication
  • AES-256-GCM encrypted secrets
  • CSRF on every state-changing request
  • Strict CSP, HSTS and anti-framing headers
  • Rate limiting and audit trails
  • Non-custodial by architecture

Still have questions?

Our team is one message away.

Start swapping Contact us