All transfers on BitMEX are protected by transaction rules enforced at a policy level to block potential attacks. BitMEX places significant focus on segregation of duties, ensuring that no single actor in the system can successfully sign a withdrawal on their own.
How does BitMEX protect transfers and withdrawals?
All transfers are additionally protected by transaction rules that are enforced to ensure any attack is blocked at a policy level.
BitMEX places a tremendous amount of focus on segregation of duties within its internal systems. No single actor, whether a person or an automated process, can successfully sign and authorise a withdrawal on their own. The signing process requires co-operation between multiple independent parties, each holding a separate component of the authorisation chain. Even in the event that one component is compromised, whether through an external attack or an insider threat, unauthorised transfers cannot be completed without the participation of additional independent actors.
Segregation of duties extends beyond the signing process itself. The teams responsible for initiating, reviewing, and approving transactions operate independently from one another, with clear role boundaries and audit trails for every action. Combined with the MPC (multi-party computation) hot wallet architecture and cold wallet storage described in the How Does BitMEX Custody My Funds? article, these transaction safeguards form part of a layered security approach that protects user funds at every stage of the withdrawal lifecycle.