01MFA
Multi-Factor Authentication
Adds a layer of verification beyond the password, reducing the risk of credential leaks. Recommended for every account that supports it.
Asset Protection / Asset Safety
Security is not a single feature — it is a set of constraints that run continuously.
According to the company, Kalvoq uses cold and hot wallet segregation, multi-authorization, abnormal transfer monitoring and withdrawal risk checks, and applies permission tiers and segregation of duties to reduce the risk of unauthorized operations.
Wallet Architecture
Segregation puts most assets where they are harder to reach.
Hot wallets serve day-to-day liquidity needs; cold wallets are used for long-term storage. Separating the two means that if one link fails, risk does not automatically spread to all assets.
On that basis, the platform applies multi-authorization and permission tiers. Critical actions require confirmation from multiple responsible roles, and segregation of duties prevents any single person from controlling the full chain of operations. The point of these arrangements is not to add steps, but to reduce the chance of single-point error or misuse.
01Cold and hot wallet segregation
02Multi-authorization for critical actions
03Permission tiers and segregation of duties
04Operation records and audit trails
Outflows are where risk checks matter most.
Abnormal transfer monitoring and withdrawal risk checks ask whether a given action fits the account's normal pattern. Price volatility, changes in the login environment and high-frequency activity within a short window can all be signals that trigger review.
01
Abnormal Transfer Monitoring
Transfer activity is continuously observed to identify operations that clearly deviate from an account's historical pattern.
02
Withdrawal Risk Checks
At the withdrawal stage, account status, operating environment and risk rules are combined to require additional confirmation.
03
High-Risk Action Verification
Sensitive actions require additional verification steps, reducing the chance of unauthorized account use.
04
Segregation of Duties
Permission boundaries prevent a single role from holding initiate, approve and execute rights at the same time.
On the account side: extending security responsibility to users.
The platform provides multi-factor authentication, device management, unusual login alerts and additional verification for high-risk actions. These features only take effect when users enable them and keep them in use.
02DEVICE
Device Management
Review and manage signed-in devices, and remove devices that are no longer used or cannot be recognized.
03ALERT
Unusual Login Alerts
Receive alerts when the login environment changes unexpectedly, buying time for prompt action.
Limits
No single technical control can eliminate all risk.
The platform states clearly that these protections require continuous maintenance. Technical controls face new attack methods, and business processes change with products. Security therefore requires regular review, testing and updates rather than a one-time launch that stays unchanged.
For users, understanding this boundary matters too: the platform provides tools and processes, but account credentials, device environment and operating habits remain the user's responsibility. If you notice an unusual login, a delayed withdrawal or an unexplained account change, confirm through official customer service channels promptly.
SECURITY TIP
Never disclose your password, verification codes or private key to anyone. The platform will not request such information through unofficial channels. Be wary of requests that offer to "trade on your behalf" or "guarantee returns".