Security

Security at Aivora

Aivora protects user assets through two complementary layers: active safeguards on every account, and institutional-grade custody infrastructure for platform reserves. This page explains how both work together.

User Asset Protection

Beyond platform-level custody, Aivora runs continuous monitoring on user-facing accounts — watching for abnormal login behavior, suspicious withdrawals, and policy violations before they escalate.

These controls are designed to reduce the impact of security incidents on individual accounts, complementing the protections you enable such as 2FA and withdrawal whitelists.

Wallet Monitoring

Automated systems track unusual balance movements and flag patterns that deviate from normal account activity.

Withdrawal Review

High-risk or high-value withdrawals may pass through additional verification steps before execution.

Multi-Layer Account Security

2FA, device checks, and session controls add independent barriers against unauthorized access.

24/7 Risk Operations

Security operations review alerts around the clock and coordinate responses when anomalies are detected.

User asset protection focuses on what happens at the account level — helping contain risk events before they affect your holdings.

Cold Storage Architecture

Cold storage at Aivora means platform reserves are held in air-gapped, multi-signature wallets managed by separate authorization roles. Roughly 95% of reserves live in this offline layer — isolated from the trading engine and routine network traffic.

Every outbound transfer from cold storage requires coordinated approval across independent signers, removing single points of failure from the custody chain.

Distributed Signing

No one operator holds full signing authority. Withdrawals need consensus across multiple key holders.

Air-Gapped Reserves

Core reserves sit on systems with no direct internet link, cutting off common remote attack paths.

Redundant Recovery

Encrypted backups across geographically separate sites support continuity if one facility is disrupted.

Physical Key Segmentation

Signing materials are split across secure physical locations — never stored in one place.

Technology controls, human process, and physical safeguards form a single custody model where each layer covers what the others cannot.

Hot + Cold Wallet Layers

Full offline custody is safest for reserves, but traders still need fast deposits, withdrawals, and margin. Aivora uses a tiered wallet model — a small hot layer for liquidity, and a much larger cold layer for long-term holding.

The two tiers run under different risk profiles and monitoring standards:

Cold tier: bulk reserves, offline signing, manual approval workflows
Hot tier: operational float for deposits, withdrawals, and near-term settlement
Threshold-based rebalancing moves excess hot funds back to cold automatically
Dedicated security team reviews cross-tier movements around the clock

Whether you trade daily or hold long term, your assets benefit from the same underlying standard — reserves locked offline, with just enough liquidity online to keep the platform responsive.