Security

Security at Atex Hub

Your keys stay yours. Here is how Atex Hub is built, and how to keep yourself safe before, during, and after a swap.

Non-custodial by design

Atex Hub never holds your funds, private keys, or seed phrase, and there are no accounts to hack. Swaps are executed by third-party exchange Partners and sent straight to the wallet address you provide.

Verify the website

Always check that the address bar shows atexhub.io before you connect, copy an address, or send funds. Bookmark the site and use the bookmark, rather than links from ads, search results, emails, or direct messages.

Check before you send

Before sending, confirm the coin, network, amount, and deposit address shown on your swap page. Blockchain transfers cannot be reversed. If anything looks different from what you expected, stop and contact support.

Address poisoning and clipboard malware

Attackers send tiny transactions from look-alike addresses, or use malware that swaps the address you copy. Compare the whole address, not just the first and last characters, and never copy an address from your transaction history.

Memo and destination tag

Some networks, such as XRP, XLM, and EOS, need a memo, tag, or extra ID. If the deposit instructions show one, include it exactly. If your receiving wallet needs one, enter it in the swap form. A missing memo can delay or lose your funds.

Track your swap

Every swap gets an exchange ID. Keep it safe and use the Track page to follow progress. Recent swaps are also saved in your browser on this device. Support will ask for the exchange ID, never for your keys.

Watch for impersonators

We will never ask for your private keys, seed phrase, or remote access to your device, and support never messages you first. Fake support accounts, giveaways, and "refund recovery" offers are scams. Reach us only through atexhub.io.

Third-party services

Exchange and payment Partners process your transaction and may run their own verification checks. Network congestion or Partner issues can delay a swap. Only trust Partner pages opened from the Atex Hub swap or buy flow.

Responsible disclosure

If you believe you have found a security vulnerability in the atexhub.io website or its API routes, please report it to support@atexhub.io with a clear description and steps to reproduce. Do not include private keys, seed phrases, or other people's data in your report.

Out of scope: systems operated by our exchange and payment Partners, social engineering, physical attacks, and denial-of-service or load testing. Please do not access data that is not yours, and give us reasonable time to fix an issue before disclosing it publicly.

We will not pursue legal action against good-faith research that follows these guidelines. We do not currently run a paid bug bounty program.

Something looks suspicious?

Tell us about a suspicious message, fake website, or possible security issue through the Contact page or at support@atexhub.io. Include the relevant link or exchange ID when available. Never include private keys or seed phrases.