Credential protection
Passwords are stored with modern one-way hashing. Sessions are regenerated at sign-in and logout, and repeated failed attempts are throttled.
Trust & safety
Security at every layer
Account protection starts with how the platform is built. Separated admin access, hashed credentials, CSRF-protected actions and compliance review of every transfer are defaults on Musetech, not add-ons.
Form integrity
Every state-changing request carries a per-session CSRF token. Trading endpoints verify the token in a header before touching balances.
Double-entry balances
Available and locked balances are tracked separately. An order can never reserve the same funds twice, and cancellation releases immediately.
Restricted documents
Identity files are stored outside the public web root and streamed only to authenticated compliance staff with an audit trail.
Administrative separation
Admin sessions use a separate cookie and login path from customer accounts. Administrative actions are written to an operation log.
Continuous review
Deposits, withdrawals and verification submissions enter a review queue. Nothing is credited or released without a recorded decision.
Your part
Four habits that protect your account
- Use a unique passwordDo not reuse credentials from email, social media or other exchanges.
- Verify the URLConfirm you are on the official Musetech domain before entering credentials or a deposit address.
- Match networksSend each asset on the network shown in your wallet. Cross-network transfers can be unrecoverable.
- Report anomaliesIf a sign-in or transfer looks unfamiliar, change your password and contact support immediately.
HTTPS enforced
AML review
Audit logging
Found something suspicious?
Send us the details — screenshots, the address you were asked to use, and the time of contact. We investigate every report.