Security
Please read this document carefully. By using our platform you agree to the terms outlined below.
Last updated: June 2, 2026
Our Commitment
Bitrex Digital LLC (a Colorado limited liability company, with registered office at 1500 N Grant St, Ste N, Denver, CO 80203, United States of America, LLC Certificate No. 20261668852, Colorado Secretary of State; "BitRex", "we", "us", "our") is committed to the security of the personal data, balances and assets we hold on behalf of our Users. We welcome responsible disclosure of security vulnerabilities by independent researchers.
Scope
In-scope assets include the bitrex.digital domain and any sub-domain on which the Platform is hosted, the public API surface, and the mobile-web experience. Out-of-scope are third-party services we integrate with, social-engineering attacks against our employees, and physical attacks against our data centres.
Responsible Disclosure Guidelines
- Provide a detailed report including reproduction steps and any proof-of-concept code;
- Allow us a reasonable window (typically 90 days) to remediate before public disclosure;
- Do not access, modify or delete data that does not belong to you;
- Do not perform tests that could degrade Platform availability for other Users;
- Do not extort or attempt to monetise the vulnerability outside of the disclosure programme.
Safe Harbour
Research conducted in accordance with these guidelines will be considered authorised, and BitRex will not pursue legal action or refer the matter to law enforcement. Where appropriate, we recognise security researchers in our Hall of Thanks and may, at our discretion, grant ex-gratia rewards.
Corporate Information & Notices
All notices, service of process and correspondence in respect of this policy or any matter arising out of your use of the Platform should be directed to:
Bitrex Digital LLC
1500 N Grant St, Ste N
Denver, CO 80203, United States of America
LLC Certificate No. 20261668852, Colorado Secretary of State
Service tickets may also be opened through the support panel within your account dashboard. Where this policy refers to "BitRex", "we", "us" or "our", it shall be deemed to refer to Bitrex Digital LLC.