WhiteBIT Australia prioritizes safety, transparency, and constant development. Our main priority is the safety of our customers' personal data and the security of their funds.

What are the security measures on our exchange?

We leverage advanced methods and technologies. We have implemented:

• Two-factor authentication (2FA): to protect your account from unauthorized access.
• Passkey: a unique identifier that is used to confirm the legitimacy of your actions on our platform. It serves the same purpose as 2FA and can be used as an alternative to ensure the security of your account.
• Anti-phishing: helps to ensure the reliability of communication from our exchange.
• Identity verification and AML checks: to ensure the transparency and security of our platform.
• Logout time: automatic logout from your account in the absence of activity.
• Address management: help protect your assets by allowing them to be withdrawn only to addresses on the Allowlist
• Device management: cancel individual or all active sessions across all devices.

How secure are users’ funds?

According to data from cer.live, we hold the highest AA rating and are firmly ranked among the three most secure crypto exchanges.

In addition, we received the highest rating based on the results of an audit conducted by Hacken. This audit covered an analysis of our platform’s architecture, security level, and other key metrics. The detailed report is available here.

In addition, we:

• Store 96% of the digital assets on cold wallets and use a WAF to detect and block hacker attacks. The assets stored in cold storage are protected with the multisignature access system.
• Have an insurance fund to protect users’ assets; it is replenished with contributions from transaction fees. The fund currently insures the assets in WhiteBIT's cold storage under the coverage plan, which amounts to 30 million U.S. dollars.

FAQ

What is 2FA, and why is it important?

Two-factor authentication (2FA) is an additional layer of protection for your account. It ensures that you are the only one who can access your account, even if a hacker knows your password. Once 2FA is activated, when logging into your account, you will need to enter a six-digit authentication code in addition to your password, which changes every 30 seconds in an authenticator app.

What is Passkey?

Passkey is another method of two-factor verification and functions on the same level as TOTP (Time-based One-Time Password) authentication, which works with Google Authenticator or other similar applications. 
Instead of using the authenticator application for 2FA verification, you can choose to enable Passkey on our platform. Various types of devices or platforms can act as a Passkey. Each device or platform generates two keys: a private key, which is used for confirmation, and a public key —  a unique identifier of the authenticator and is used to identify the key within the service on which it will be used.

How does the anti-phishing feature work?

Anti-phishing allows you to add your own personal anti-phishing code, which will be attached to system emails sent from the domain whitebit.au and to system emails regarding KYC etc from the email address: support@whitebit.au

What is the identity verification procedure like on our exchange?

Identity verification on our exchange is called “KYC” verification. It is the abbreviation for “Know Your Customer” or “Know Your Client”. It helps to secure accounts and keep funds safe. It is worth remembering that online verification shows the reliability of the exchange. Identity verification also assists with reducing money laundering, terrorist financing, etc.

Can I use the exchange services without identity verification?

A user without KYC can only use Demo tokens.

• access to deposits, withdrawals, and trading.
• creation and activation of WhiteBIT Codes.
• account recovery in case of 2FA code loss.

What are AML checks?

Anti-money laundering (AML) checks allow you to check the address for involvement in money laundering. Our users can check the address of the following currencies: BTC, LTC, TRX, USDT(ERC20), ETH (ERC20), and BCH (forks; if the address format is the same, it can also be checked).

Has WhiteBIT been independently audited?

WhiteBIT has passed penetration testing and is in the top 3 on cer.live.

WhiteBIT has also passed ISO 27001 certification and is currently being audited by PCI DSS.