Custody and security
A vault set up only for you.
Your pledged crypto sits in its own vault. Boxwind CR does not mix it with anyone else's, lend it or re-pledge it. Our transaction policy requires at least two authorised approvers for any transfer out. The price of that is no yield. We say so plainly.
How collateral moves
In, held, approved, returned
Select a step to see what happens at that point. The diagram is a simplified picture of the promises below.
Select a step to read what happens there.
Simplified. Network confirmations apply before collateral counts as received, and the exact timing is set out in your Advance Confirmation and the agreement.
The promises
What the agreement says about your collateral
Each of these is a term of the agreement you sign. The signed agreement and your Advance Confirmation govern; this page is a summary.
A vault only for you
Your vault is on the Fireblocks platform. It is set up solely for you and identified as holding your collateral.
Never commingled
Your collateral is never mixed with Boxwind CR's own assets or with any other client's.
Never put to work
We do not lend, re-pledge, rehypothecate, stake or delegate your collateral. We do not put it into a protocol or use it for anyone's account.
Two approvers, by policy
Our transaction policy requires at least two authorised approvers for any transfer out of your vault. That is a policy, not a guarantee.
A statement on request
We keep records that identify how much of each asset is in your vault at all times. Ask and we give you a statement of your collateral.
The right address, the right network
We issue a deposit address for each asset and network, and you are responsible for sending to the right one: see where each asset is sent. We are not liable for assets sent to the wrong address or network.
Replacement custody
We may move your collateral to a replacement segregated custody arrangement of equivalent or better security. We give at least 10 business days' notice, or act at once where security requires it. The promises not to mix, lend or re-pledge your collateral continue to apply.
Our control while it is pledged
While your collateral is in the vault, Boxwind CR has exclusive possession and control of it. You remain the owner, subject to our security interest. You also authorise us in advance to sell it in the circumstances the agreement sets out.
Limits on our liability
We are not liable for losses from price changes, sales made under the agreement, or failures of networks or providers outside our control. That excludes losses caused by our gross negligence, fraud or wilful misconduct. Our total liability is capped at the market value of the collateral the claim relates to, except where the law does not allow a limit.
The trade-off: no yield. Because Boxwind CR has agreed not to lend, stake or put your collateral to work, it earns nothing while pledged. For assets that can be staked, such as ETH, SOL and BNB, that includes staking rewards. You give up any yield you might have earned on it.
When collateral counts
Confirmations come first
Collateral you send, or add later, counts only once the transfer has the confirmations, or the finality, that its network requires. Until then it does not support an advance, and it does not count as a top-up.
The confirmations or finality each network requires are stated in your Advance Confirmation.
Risk
Custody and technology risk
Your collateral is held in a Boxwind CR vault. Failures of technology, networks, providers or security could delay or prevent access to it. If Boxwind CR became insolvent, you could be delayed in getting your collateral back or could lose some or all of it. Read how that risk works in Risk to Boxwind CR as your counterparty.
Read the full risk disclosure and see what happens if the price falls on the ladder.
Responsible disclosure
Found a weakness? Tell us.
If you find a security weakness in this website or our client-facing systems, this is how to report it, and what we ask of you.
How to report
Send your report to hello@boxwind.io.
Please report in good faith, as soon as you find the problem, and keep the details private until we have had a chance to fix it.
What to include
- A clear description of the weakness and where it is (page, address, system).
- The steps to reproduce it, and any tools or scripts you used.
- What you think the impact is.
- Your contact details, so we can ask questions. You may report without giving a name if you prefer.
Please do not include other people's personal data, client data or credentials in your report beyond the minimum that proves the problem.
Scope
In scope: this website and the client-facing systems we run.
Out of scope: services run by other companies, including our providers, unless the weakness is in how we use them; physical attacks; and social engineering of our staff or clients. Please report weaknesses in another company's service to that company. See also the website terms.
Safe harbour
If you follow this page, act in good faith and report promptly, we will not take legal action against you for your research, and we will not ask the authorities to do so. This does not cover anything outside this page, and it does not bind anyone else.
What not to do
- Do not access, change, copy or delete data beyond what is needed to show the problem. If you reach personal or client data by accident, stop and tell us.
- Do not run denial-of-service attacks, or tests that degrade the site or its systems.
- Do not use social engineering, phishing or physical attacks against our staff, clients or premises.
- Do not use a weakness to move into other systems, or to keep access.
- Do not share details publicly before we have fixed the problem, or have agreed a date.
What we will do
- Acknowledge your report and reply as soon as we can.
- Look into it and keep you updated.
- Tell you when we have fixed it.
- Credit you if you want to be named, if we agree.
We use your report only to fix the weakness and to answer you. See the privacy notice.
Documents
The paper behind the promises
The Master Crypto-Backed Advance Agreement, the Risk Disclosure Statement and each Advance Confirmation are the documents that bind. We show samples of the documents and emails, with hypothetical figures, so you can read them before you sign.
Every application is subject to due diligence, and we may decline any application or request. Nothing on this site is an offer.