Security & Privacy

Since users rely on SOEX to connect to exchanges for trading, it’s important to emphasize that the platform does not hold users' funds. SOEX solely provides optimized connections to the exchanges.

An AK/SK secure storage scheme has been implemented for the safekeeping of sensitive information, and it includes techniques like:

  • Local storage and encryption, not on a remote server

  • End-to-end encryption of communications

This means users enjoy wallet-like security and are safe from any leakage of personal data.

Here’s how Soex's AK/SK secure storage scheme works:

AK/SK creation: When users authorize SOEX to access third-party CEX trading permissions through FastAPI, SOEX and the third-party CEX will create AK/SK using end-to-end encryption, and only the SOEX client can decrypt them.

AK/SK storage: After the SOEX client decrypts AK/SK, the current mnemonic code encrypts it with ECC and stores it in the local database, meaning only the user's private key can decrypt it.

AK/SK usage: When the users trade on the platform, the SOEX client will use their AK/SK to sign the transaction data and forward it to the third-party CEX service through the whitelist service (Soex Cex Proxy).

The SOEX client will also employ users' AK/SK to create a read-only Listen Key to help them subscribe to relevant updates and update the order status changes in real time, boosting their trading strategy.

SOEX enhances security through its decentralized social nodes. By leveraging a distributed network rather than a single centralized server, the platform achieves strong protection against security threats such as DDoS attacks, data breaches, and single points of failure.

Last updated