Security & Custody

How we protect your assets and what you're responsible for

Custody Model: What You Need to Know

BMX uses a CUSTODIAL wallet system.

This means:

  • BMX holds your private keys. You do not have direct access to the cryptographic keys that control your assets.
  • Assets are stored in BMX-managed wallets. Your tokens and BMEX are held in our custody systems.
  • You trust BMX to safeguard your assets. This is similar to trusting a bank with your money.

Security Measures We Use

Encryption

All data transmitted between you and BMX is encrypted using TLS/SSL. Sensitive data is encrypted at rest.

Two-Factor Authentication

2FA is available and recommended for all accounts. We send verification codes via email for sensitive actions.

Secure Infrastructure

Our servers are hosted in secure data centers with monitoring, firewalls, and intrusion detection.

Cold Storage

A portion of reserves is kept in cold storage (offline wallets) to protect against online threats.

Your Security Responsibilities

  • 1.Use a strong, unique password. Do not reuse passwords from other sites.
  • 2.Enable two-factor authentication. Add an extra layer of security to your account.
  • 3.Secure your email account. Your email is used for password recovery and 2FA.
  • 4.Never share your credentials. BMX will never ask for your password.
  • 5.Watch for phishing. Always access BMX through our official domain.

Account Recovery

What happens if you lose access?

Password Reset: Use "Forgot Password" to receive a reset link via email.

Email Access Lost: Contact support with identity verification. This process may take 7-14 business days.

2FA Device Lost: Contact support with identity verification to disable 2FA.

Warning: If you lose access to both your email AND cannot verify your identity, account recovery may be impossible and assets may be unrecoverable.

What If BMX Shuts Down?

In the event BMX ceases operations:

  • • We will provide advance notice when possible
  • • A withdrawal period will be offered for users to export assets
  • • On-chain tokens remain on the blockchain regardless of BMX
  • • Off-chain balances (BMEX) may be at risk

Important: There is no guarantee of asset recovery if BMX experiences financial difficulties or security breaches. Only use BMX with funds you can afford to lose.

Report Security Issues

Found a vulnerability? Contact our security team:

security@bitmusicex.com