Cybersecurity

How we protect you

• TLS-encrypted connections throughout the site.
• Passwords stored with secure hashing; we never see them.
• Email verification on signup.
• Balances and transactions validated exclusively on the server.
• Per-user access rules: only you and authorized staff can view your data.
• On-chain deposit verification and manual withdrawal review.
• Protection against cross-site request forgery (CSRF).

Best practices

• Use a unique, long password.
• Never share your password; Hashy will never ask for it.
• Always verify the network (ERC20/BEP20) before sending funds.

Report vulnerabilities

If you find a security issue, report it through the support page.