Security
Security that works as hard as you do.
Lunobase is built around one principle: your money should only move when you want it to. Here's how we make sure of that.
2-step verification on every login
After your password, we email a single-use 6-digit code that expires in 10 minutes. Admin accounts follow exactly the same rule.
Anti-phishing code
Choose a secret phrase that appears in every genuine Lunobase email. If it's missing, you know the email isn't from us.
Reviewed withdrawals
Every withdrawal requires your password and is checked by our security team before release. Funds stay on hold during review.
One-tap account freeze
Suspect something? Freeze trading and withdrawals instantly and sign out of every device, then contact support to restore access.
Breached-password protection
We check new passwords against billions of leaked credentials using k-anonymity, so your password never leaves our servers.
Login history & new-device alerts
See every sign-in with device and IP address. We email you whenever a new device accesses your account.
Bot & abuse protection
Human verification on sign-up and login, plus rate limits on every sensitive action to stop credential stuffing and brute force.
Server-side money movement
Balances can only change through audited server functions. Trade prices are fetched by our servers, never taken from your browser.
Immutable ledger & audit trail
Every balance movement is written to a permanent ledger, and every staff action is recorded in an audit log.
Hardened infrastructure
TLS everywhere, strict Content-Security-Policy, HSTS, clickjacking protection and row-level data isolation per customer.
Approval on every withdrawal
There is no waiting period, but no withdrawal is automatic. Each request is approved by our team before funds leave, which protects you if someone else gets into your account.
We'll never ask for your code
Lunobase staff will never ask for your password, login code or recovery phrase, by email, phone or chat.
Found a vulnerability?
Help us keep Lunobase safe
We welcome responsible disclosure. Email info@lunobase.com with details and we'll respond within 48 hours.