Custody & security

Control

Only on-chain proof moves collateral: a validated price and position set. There is no operator transfer and no self-reporting. CRX holds no key that overrides the proof.

The keys are not held by CRX alone. They sit in a multisig whose signers represent the three parties with something at stake — the investor, the maker, and the whitelabel partner. A move needs a quorum across those parties, so no single one of them, CRX included, can reach the collateral against the proof. The people who could collude to take the funds are the same people the funds belong to.

Segregation

Collateral sits in a segregated, non-rehypothecable account inside the CRX contract. It is not pooled into a house wallet. CRX does not lend it or post it elsewhere.

Audit status

In process. The contracts are undergoing formal review by two independent security firms.

Until those reviews close, treat every guarantee here as a stated property, not yet an audited one.