The security framework implemented by the MAX platform is as follows:
1. Platform and System Security
MAX minimizes the impact of external threats on the platform and systems through multi-layered security defenses and continuous monitoring.
- International Information Security Certification: We have achieved the ISO/IEC 27001 Information Security Management System international standard certification and continuously implement information security management in accordance with relevant standards.
- Threat Monitoring and Defense:A dedicated information security team continuously monitors system activities and deploys the following safeguards:
- Web Application Firewall (WAF) and Distributed Denial-of-Service (DDoS) protection to identify and block abnormal traffic.
- Intrusion Detection and Prevention Systems (IDS / IPS) to detect, monitor, and prevent malicious attacks.
- Site-Wide Encrypted Transmission: The platform utilizes SSL encryption to protect data transmitted during your operations, reducing the risk of data interception or tampering.
- Regular Penetration Testing: We regularly commission third-party white-hat hackers and cybersecurity experts to conduct penetration testing, proactively identifying and remediating potential vulnerabilities to continuously enhance our platform defenses.
- Cybersecurity Community Collaboration: Through our Bug Bounty Program, we invite security researchers and white-hat hackers to report potential vulnerabilities and provide rewards for qualified reports, collaborating with the cybersecurity community to strengthen platform security.
2. Asset Security
MAX employs a hot and cold wallet separation architecture combined with internal approval workflows to mitigate asset custody and management risks.
- High Cold-Wallet Storage Ratio: The vast majority of cryptocurrencies are stored in offline cold wallet systems, physically isolated from network connections to significantly reduce exposure to online cyberattacks.
- Multi-Approval Mechanism: All transfers and disbursements of cold wallet assets require multi-party administrative authorizations and internal approvals to minimize the risk of unauthorized operations and internal operational risks.
3. Account Security
MAX helps you monitor account activity and protect account security through verification mechanisms, real-time notifications, and proactive risk detection.
- Mandatory Two-Factor Authentication: All users are required to enable Two-Factor Authentication (2FA) and enter verification codes during login, withdrawals, or other sensitive operations, adding a critical identity verification safeguard.
- Instant Login and Withdrawal Notifications: Whenever a login occurs or a withdrawal request is submitted, the system immediately notifies you via email to keep you informed of all account activity.
- Withdrawal Address Whitelist: You must configure and verify trusted addresses in advance before withdrawing cryptocurrency to those addresses, reducing the risk of unauthorized asset transfers.
- Proactive Breach Detection: We actively monitor external data breach leaks to verify if any user registration details appear in credential exposures. If your password is found to be potentially compromised, we will prompt you to change it and may take preventive risk control measures to minimize the risk of unauthorized logins.
Please visit How MaiCoin and MAX Protect Customers' Digital Assets to learn more.