2026 has been a landmark year for our industry.
This year has seen digital assets, especially stablecoins, become an essential part of mainstream finance and daily payments. But despite all the progress made, we’ve also faced incredible challenges. It’s been one of the worst in recent memory for crypto hacks and exploits, with an estimated 750 security incidents putting US$9 billion at risk.
We know that each of our nine million users relies on RedotPay to make their daily life easier: paying bills, sending support back home from abroad, or buying groceries for their family dinner. In the past three years, you have trusted us, topping up your accounts with over US$8 billion in funds.
This represents your hard-earned salary, savings, and spending money. In light of recent security incidents, it’s only natural for users to be concerned about the safety of the technology they use.
We have a responsibility to make sure you’re protected. Here’s how we’re doing that every day.
No single person, device, or system can move user funds on its own. Our wallet infrastructure implements distributed key management, multi-person approvals, and policy-based controls. This ensures that there’s no single key for an attacker to steal, and no one person can change our automated rules by themselves.
Our team of experts monitor on-chain activity 24/7 to identify any unusual transactions and potential risks early. We actively track, flag, and block suspicious wallet addresses as well as collaborate with law enforcement agencies worldwide to ensure we meet our obligations with rigor and transparency.
We’ve completed annual financial audits every year since our founding. The most recent was a clean independent financial audit by a Big Four firm. A Big Four firm also completed an independent review of our anti-money laundering and countering the financing of terrorism (AML/CFT) controls. Having third-party experts check our work holds us accountable to the same standards as traditional financial institutions.
We work with industry-leading custodians and infrastructure providers such as Fireblocks and Circle. We also partner with independent security assurance firms that regularly stress-test our security frameworks, so we can find and fix weaknesses proactively.
We hold two independent key certifications: SOC 2 Type II and ISO/IEC 27001. They confirm that our data privacy and information security practices meet rigorous global benchmarks, vetted by internationally recognized standards bodies.
Security isn’t a one-off achievement. It’s a commitment that requires constant attention, investment, and responsibility. Our security approach is a combination of strong internal architecture and collaboration with credible, trusted external firms. We validate our practices by working with other specialized partners, and believe it’s the best practice to prioritize our users.
As stablecoin payments move toward the mainstream, companies like ours have a responsibility to uphold the highest standards of security, transparency, and regulatory compliance. This is the only way to achieve financial inclusion at scale, responsibly and sustainably.
We aim to lead by example and thank our community for giving us their continuous trust.
Disclaimer: This communication is for informational purposes only and does not constitute legal, financial, investment, or other professional advice. It does not create any representation, warranty, or contractual commitment. This communication does not represent an offer or solicitation to buy or sell any products, securities, or financial instruments or related services, including in any jurisdiction where that activity is restricted, or where RedotPay group (as defined in our Terms and Conditions) does not offer or advertise that product or service. For detailed terms pertaining to this communication and the relevant information, please refer to [Full Disclaimer Link].
