We’ve created this security overview to help you use InfinityX and the AI engine trading bot Tathastu with maximum confidence and cybersecurity best practices while engaging in automated and manual trading.

How InfinityX Works

InfinityX is a non-custodial trading software powered by the Tathastu AI engine trading bot. You can use InfinityX and Tathastu to trigger and orchestrate trading actions on connected exchange accounts.

However, InfinityX and Tathastu do not hold or withdraw funds directly from your exchange accounts. All trade orders are executed via secure API connections under your control.

How InfinityX Connects to Your Exchange Accounts

API Key Integration

InfinityX connects to exchanges using API keys you generate through your exchange account. We implement core pillars of security around API connections:

Sign Center

InfinityX provides a secure API key storage called a Sign Center, isolated at both infrastructure and access levels to safeguard API credentials.

When the Tathastu AI engine trading bot places a trade, InfinityX servers communicate with the Sign Center to sign the transaction — similar in principle to how hardware wallets (like web3 Platform, Ledger or Metamask) work.

IP Whitelisting

When creating an API key on your exchange, you can specify which IP addresses are permitted to use that key.

Configure whitelisted IPs to authorize only InfinityX’s service endpoints, blocking other unauthorized access attempts. Once an API key is bound in InfinityX, it cannot be reused by any other account or system.

Fast Connect (Optional)

Supported exchanges may offer Fast Connect, which allows quicker authorization and automatic API key creation and binding, reducing manual setup steps while maintaining secure authorization flows.

Transactional Access Only

InfinityX’s connection to your exchange is limited to trade execution requests. It cannot withdraw or transfer fiat or crypto assets on your behalf, and it does not store or have access to your exchange login credentials.

There are no backdoors, caches, or mechanisms through which personal information can be extracted.

How InfinityX Protects User Data

To protect user and system data beyond API security, InfinityX uses enterprise-grade security infrastructure and practices, including:

• Web Application Firewall to defend against web-based attacks
• Distributed Denial-of-Service (DDoS) mitigation to ensure service availability
• SSL/TLS encryption between client devices and InfinityX servers to protect data in transit

User Best Practices for Security

Even with strong platform security, users should follow these essential practices when using InfinityX and the Tathastu AI engine trading bot:

When Working With Your Exchange:

• Enable two-factor authentication (2FA) on your exchange account and within InfinityX.
• Store 2FA backup codes in a secure location.
• Use strong, unique passwords for all accounts.
• Treat API keys as confidential; do not store them in shared documents or send them via unsecured channels.
• Use separate API keys for different services or automation tools.
• Enable IP whitelisting where available.
• Be vigilant against phishing attempts — check sender authenticity before interacting with emails claiming to be from exchanges or InfinityX.

Additional Good Practices:

• Hide sensitive account information (balances) when sharing screenshots.
• Log out of InfinityX when others have access to your device.
• Secure your devices (PC, phone) with PINs or biometric locks.
• Do not share internal authorization tokens or messaging tokens used for bots in public or insecure channels.

Official InfinityX Communications

Ensure that you interact only with official InfinityX domains and email addresses when seeking support, receiving updates, or submitting inquiries.

• Official URL: https://infinityx.trade
• Official Support Email: support@infinityx.trade