Security at DUALKEEP

Q: Is DUALKEEP a non-custodial gateway?

No. DUALKEEP is a custodial gateway: that is what makes instant USD crediting possible, because volatility is absorbed by the platform rather than sitting on your books. The trade-off is managed with cold storage sweeps, continuous solvency reconciliation, withdrawal whitelists and limits, and two-factor authentication - and you can withdraw your balance to your own wallet at any time.

Q: Can I restrict where my funds can be withdrawn?

Yes. You can whitelist withdrawal addresses so payouts only go to wallets you have approved, set limits, and protect the account with TOTP two-factor authentication. Large withdrawals pass an additional review step.

A payment platform is only as good as its custody. Here is how ours works.

How funds are protected

Per-invoice addresses

Every invoice gets its own deposit address derived from the platform treasury, so payments are isolated, attributable, and never commingled at the address level.

Cold storage by default

Deposits are swept on a schedule and the bulk of platform funds is moved to cold storage. Hot operating balances are kept deliberately lean and monitored against a hard threshold.

Continuous reconciliation

An automated process continuously compares on-chain holdings against the sum of all merchant balances. Any shortfall triggers an immediate alert - solvency is checked by software, not by promises.

Encrypted key material

Wallet seeds and secrets are encrypted at rest with AES-256-GCM. Production access is restricted, and secrets never appear in logs or client-side code.

Platform security

TLS everywhere. All traffic to dualkeep.com and the API is encrypted in transit.
Signed webhooks. Every webhook is signed with a per-merchant HMAC-SHA256 secret (X-CryptoGate-Signature) plus a timestamp signature for replay protection, so your server can verify each notification really came from us.
Hardened sessions. Dashboard sessions use HttpOnly cookies, CSRF protection on every form, and rate limiting on authentication endpoints against brute force.
Least data. We collect no card numbers and minimal personal data - see the privacy policy. There is simply less to steal.
Finality without chargebacks. Blockchain settlement removes the fraudulent-reversal attack surface that plagues card processing.

Withdrawal protection

Your USD balance is yours to withdraw to your own wallet at any time - and the withdrawal path is the most attacked surface of any custodial platform, so it has its own defenses:

Address whitelisting. Restrict withdrawals to wallet addresses you have explicitly approved, so a compromised session cannot drain funds to an attacker's address.
Limits and review. Withdrawal limits cap how much can leave the account in a window, and large withdrawals pass an additional review step before broadcast.
Two-factor confirmation. Accounts protected with TOTP two-factor authentication require the second factor for sensitive actions, not just at login.
Transparent fees, no surprises. Every withdrawal shows the live network fee for the chosen asset and network before you confirm, and each request is idempotent - a retried submission can never pay out twice.
Signed notifications. Withdrawal lifecycle events are delivered as HMAC-signed webhooks, so your systems can track every payout independently.

Account security

TOTP two-factor authentication with any standard authenticator app.
Verified email on every account, with password resets delivered only as emailed capability links.
In-dashboard notifications for security-relevant events, so changes to your account do not happen silently.

Buyer protections

Checkout pages show the exact amount, address, and network, with QR codes to eliminate copy-paste errors.
Assets that require a destination tag or memo (XRP, XLM, TON) are flagged prominently - payments are only credited when they can be attributed correctly.
Rate windows are explicit: the price a buyer sees is honored for the displayed window, with an optional fix-price lock.

Custody questions, answered plainly

How does DUALKEEP store customer funds?

Every invoice gets its own deposit address derived from the platform treasury. Confirmed deposits are swept on a schedule, the bulk of funds is held in cold storage, and hot operating balances are kept deliberately lean. Automated reconciliation continuously verifies that on-chain holdings cover every merchant balance.

Is DUALKEEP a non-custodial gateway?

No - DUALKEEP is a custodial gateway, and we say so plainly. Custody is what makes instant USD crediting possible: the platform absorbs volatility instead of leaving it on your books. The trade-off is managed with the controls on this page - cold storage sweeps, continuous solvency reconciliation, withdrawal whitelists and limits, and two-factor authentication - and your balance is withdrawable to your own wallet at any time.

Can I restrict where my funds can be withdrawn?

Yes. Whitelist withdrawal addresses so payouts only go to wallets you have approved, set limits, and protect the account with TOTP two-factor authentication. Large withdrawals pass an additional review step.

How do I know a webhook really came from DUALKEEP?

Every webhook is signed with your per-merchant HMAC-SHA256 secret in the X-CryptoGate-Signature header, plus a timestamp signature for replay protection. Verify the signature server-side before trusting any notification.

Reporting a vulnerability

If you believe you have found a security issue in DUALKEEP, email [email protected] with "Security" in the subject. We read every report, respond quickly, and will not take legal action against good-faith research that avoids privacy violations and service disruption.