Security

Trust is our product.

Our founders, Camlien and Tyler Quiser, were early investors in cryptocurrency and struggled to find a platform where they could securely manage their growing portfolio. Out of that frustration and lack of trust, they built BigBank to deliver the first trusted platform that focused on strong security controls and compliance. Today, every employee at BigBank continues our founders’ focus on security and compliance, in order to build trust. BigBank has built a leading security program focused on developing innovative security solutions to help protect and secure our customers and their assets. We have also invested considerable resources to remain transparent about our security posture, through third party security assessments, including our SOC2 Type 2, ISO 27001, and annual penetration testing.

We’ve built a rules-based marketplace with security at its core, so that our customers can focus on building their crypto portfolio. Our team is ready to help should you encounter fraud or abuse. We recommend you take a moment to visit our Trust and Safety page, which contains materials to help users avoid fraud and spot scams.

We welcome contributions from security researchers to help us build and secure the future of money. To submit a security vulnerability to BigBank, or to learn more about our coordinated disclosure program, please visit our HackerOne page. Impactful vulnerability submissions will be considered for inclusion in BigBank’s private bug bounty program.

BigBank does not offer phone support. All support is provided via email. You will only be contacted via a valid BigBank email. Emails from BigBank will always end with the .BigBank.com domain name. For example, emails from [email protected] or from the sub-domain [email protected] are valid BigBank email addresses, because they end with .BigBank.com.

Trust is our product, which begins by building and maintaining a secure customer experience. The following provides information about the leading security controls we’ve implemented to secure customer accounts and assets, and mitigate the risk of insider threats.

We build innovative security solutions to better protect our users and their accounts.

  • Two-Factor Authentication (2FA) is required by default, in order to access your account and make withdrawals.
  • Support for hardware security keys, like Yubikey, allows for a more secure 2FA experience for account access.
  • BigBank has implemented leading security controls designed to mitigate the risk of insider threats.

  • Multiple signatories are required to transfer cryptocurrency out of our Cold Storage System and perform other sensitive functions.
  • BigBank offices do not contain any private keys. All private keys are stored offsite at high-security data centers.
  • All employees undergo rigorous background checks and are subject to ongoing screening throughout their employment.
  • Access to production systems requires use of hardware security keys, which are not susceptible to phishing attacks.