X4T Logo
ENDEES

X4T will never reach out to you first, give investment advice, or ask for personal data. Protect yourself from scams. Our official sites are listed in our Help Center.

NEW:Perps is live — go long or short on 170+ crypto markets with up to 40x leverage, right in the X4T app.

Security at X4T

Version 1.0 — effective 03.11.2026

X4T takes security seriously. Client assets and accounts are protected on three levels:

  • Custody on Fireblocks MPC. Digital assets are held in Fireblocks wallets secured with multi-party computation (MPC).
  • On-chain monitoring with Chainalysis. We monitor on-chain transactions with Chainalysis.
  • 2FA for all accounts. Every X4T account is protected with two-factor authentication.

Vulnerability Disclosure Policy

How to report a security issue

If you find a security issue in X4T's platform, apps or infrastructure, email security@x4t.com. Encrypted contact is available on request.

What happens next

We confirm receipt within 2 business days and keep you updated on the fix.

Responsible disclosure

Please give us reasonable time to fix the issue before any public disclosure. We don't take legal action against researchers who act in good faith, stay within scope, don't access or alter client data, and don't disrupt the service.

Scope

In scope:

  • x4t.com
  • app.x4t.com
  • the X4T iOS and Android apps
  • our APIs

Out of scope:

  • third-party services (Fireblocks, Chainalysis, etc.)
  • social engineering
  • denial-of-service (DoS) attacks
  • physical attacks

Bug bounty

A paid bug bounty program will follow. Details will be announced on this page.