oincBank-Grade Security
Your assets are protected by multiple layers of cutting-edge security protocols and industry-leading infrastructure.
Your Account Security
We've implemented multiple layers of protection to keep your account secure at all times.
We enforce high-entropy passwords with a minimum of 12 characters, requiring a mix of uppercase, lowercase, numbers, and special characters. Our advanced password strength meter helps you create a truly secure password.
Our system monitors login attempts and automatically flags suspicious activity. If we detect a login from an unrecognized location or device, we'll require additional verification and notify you immediately.
Enable MFA to add an essential layer of security. We support authenticator apps, SMS verification, and hardware security keys. MFA is required for all sensitive account actions, not just logins.
Critical actions like changing bank accounts, withdrawal addresses, or transferring assets require additional verification through MFA. This prevents unauthorized access even if your password is compromised.
Every account is provided with a unique 12-word recovery phrase. Store this securely offline—it's your backup access method if you lose your other authentication factors. Never share this phrase with anyone.
View a comprehensive log of all account activities, including logins, transactions, and setting changes. Receive real-time notifications for all account activities via email, SMS, or push notifications.
Institutional-Grade Asset Protection
Your crypto assets are secured by the same technology trusted by the world's largest financial institutions.
The vast majority of digital assets are stored in air-gapped, geographically distributed cold storage vaults. These offline systems are physically isolated from the internet and protected by military-grade encryption.
> 98% of assets stored in cold storage at all times
Your digital assets are covered by an extensive insurance policy that protects against theft, security breaches, and insider threats. This policy is backed by some of the world's leading underwriters, providing an additional layer of protection beyond our security measures.
Protection against theft, fraud, and cybersecurity breaches
Our custody solution is SOC 1 Type 2 and SOC 2 Type 2 certified, meeting the highest standards for security, availability, processing integrity, confidentiality, and privacy. Regular audits ensure continuous compliance with these rigorous standards.
Industry-leading compliance and security certifications
All transactions require multiple independent approvals before execution. This distributed authorization system ensures that no single point of failure exists and prevents unauthorized access even in the unlikely event of a security breach.
M-of-N signature scheme with distributed key management
Security Best Practices
While we implement the highest security standards, we recommend these additional steps to maximize your protection:
- Use a unique password for your oinc account that you don't use anywhere else
- Enable MFA on both your oinc account and your email account
- Store your recovery phrase in a secure, offline location
- Verify all email communications come from official oinc domains
- Never share your account credentials or recovery phrase with anyone
Advanced Security Technology
Our platform is built on cutting-edge security technologies that protect your assets and data.
AES-256 Encryption
All sensitive data is encrypted using AES-256, the same encryption standard used by governments to protect classified information.
Biometric Authentication
Our mobile app supports fingerprint and facial recognition for an additional layer of security that's both convenient and highly secure.
DDoS Protection
Enterprise-grade DDoS mitigation ensures our platform remains available even during sophisticated distributed denial-of-service attacks.
Our Security Commitment
Security is not a one-time implementation but an ongoing process. Our dedicated security team works around the clock to monitor, update, and enhance our security measures. We regularly conduct penetration testing, security audits, and vulnerability assessments to ensure your assets remain protected against evolving threats.