SECURITY & ISO CERTIFICATIONS

The safe choice for institutions

MidChains is independently audited and certified to an internationally recognised standard.

licenses

Dedicated to your security

Security at MidChains is built into how we operate, from access control and incident response to operational governance.

ISO 27001

Information Security Management Certified

We meet internationally recognized standards for risk assessment, access control, incident response, and operational governance. This certification reinforces our institutional operating model and ensures structured controls, continuous monitoring, and the protection of client data and transaction integrity across our platform.

security

Industry leading security

Security at MidChains is built into how we operate, from access control and incident response to operational governance.

Account Security

Two Factor Authentication (2FA) is required by default to transact with your account

Rate limiting is applied to account operations, such as your login attempts in order to thwart attacks

Support for hardware security keys via WebAuthentication to secure your account with the strongest 2FA protection

Wallet address whitelisting that restrict withdrawals only to approved wallet addresses

Internal Controls

Multiple approvals are required to transfer assets

Employees maintain a high standard of integrity, fair dealing and conduct business with due skill, care and diligence

MidChains offices do not contain any private keys. All private keys are stored offsite with approved data centres

Compliance

Based on client requirements and the specific activities essential for MidChains to cater to them effectively, we will ensure compliance with the regulatory standards set forth by VARA.

MidChains engages third parties to perform penetration tests to proactively identify and resolve security vulnerabilities.

Client assets with MidChains are subject to ongoing regulatory checks and industry best practices.

SECURITY Guidance

Acting securely online

To ensure your MidChains account is secure from your side, here are some simple guidelines.

  • Ensure your device software is kept up to date

    It’s common for software companies to release upgrades in three different ways; to introduce new features, to fix known bugs and more importantly to upgrade the security of their products. Keeping your devices software up-to-date will reduce the risks of breaches and increase the protection from security vulnerabilities.

  • Passwords

    Any online account should be protected by a strong password. The longer and more complex the password, the better. Avoid using the same password for multiple accounts. If one password is compromised, all your accounts will be at risk.

  • Avoid clicking unknown links and attachments

    Emails with malicious attachments are the most common source of malware and viruses, so always be cautious opening emails from unknown sources.

  • Beware of phishing

    Phishing is when someone steals your identity or defrauds you by using the information you provide. Be aware of who is requesting your personal information online. A suspicious website that asks for your financial details should be a red flag, as should an unsolicited email asking for personal or account information. Always scrutinize the source of any information you receive and never be afraid to ask for more information from the sender/requester.

  • Avoid accessing MidChains on public WIFI

    In public WIFI, you are connected to a network shared by many other people, and while most public networks have some level of security built in, malicious users could use the same network to capture any information you send/receive over the WIFI. When logging onto your MidChains account, other financial websites or websites that requires sensitive information, use your home or office network whenever possible to avoid unwillingly sharing sensitive information.

  • Don't post financial information online

    Be aware of what you are posting when you use public sites, such as social media. Once that information is uploaded or shared, it is stored for a long time and you have no control over it.