Your coins, fully backed, always withdrawable.
Rojbit holds every customer asset 1:1 in segregated wallets, publishes proof of reserves daily and never lends, stakes or trades with customer funds.
Proof of reserves
Snapshot 13 Oct 2026 · 00:00 UTC · Merkle-tree proof, verifiable per accountHow Rojbit protects funds
Cold storage
[95%+] of assets in offline, multi-signature wallets. Hot wallets hold only what daily withdrawals need.
Withdrawal controls
2FA on every withdrawal, address whitelist with 24-hour cooldown, email confirmation link, manual review above [threshold].
Account protection
Authenticator 2FA, device trust and new-device checks, anti-phishing code in every email, instant session revoke.
Monitoring
24/7 transaction monitoring, rate limits, automatic freeze on suspicious patterns and a human on call.
Independent review
Penetration tests [twice a year], a public bug bounty and an external audit of reserves.
Insurance fund
[X USDT] set aside from fees to cover losses from a platform failure. Terms published on the Legal page.
Five things you can do in two minutes
- Turn on an authenticator appSet up
- Set your anti-phishing codeSet
- Save your withdrawal addresses and turn on the whitelistOpen
- Review your devices and log out the ones you do not recogniseReview
- Bookmark rojbit.io and never follow links from messagesLearn more
Bug bounty
Found a vulnerability? Report it responsibly and we will pay. Please do not test on other users' accounts or disrupt the service.
- Critical
- [5,000 USDT]
- High
- [2,000 USDT]
- Medium
- [500 USDT]
- Low
- [100 USDT]
Rojbit will never ask for your password, 2FA codes or seed phrase, never call you, and never ask you to send funds to “verify” an account. Real emails show your anti-phishing code.