Security & Trust

We get it — security is the first question on your mind. Here's how Mullet is built to keep your money yours.

Self-custody, always

Your funds live in your own account, controlled by keys that belong to you. Mullet never takes possession of your money. The one-tap approval you grant at onboarding is narrowly scoped — it lets Mullet automate the boring parts, but you control withdrawals, and you can revoke the approval from Settings anytime.

Account protection

• Two-factor security. Protect your account with a passkey (Face ID / Touch ID) or an authenticator app. You'll be asked for it before anything sensitive happens.
• Verified withdrawal addresses. Withdrawals only go to addresses you've registered and confirmed yourself — adding a new one requires an extra identity check.
• Extra checks on big moves. Sensitive actions like withdrawals and transfers trigger a step-up verification, so a stolen password alone can't move your money.

Never locked out

You can back up your account's recovery key at any time from Settings. The reveal happens in a secure, isolated window and is protected by your second factor — so you're never locked out of your own money, and nobody else can peek.

Provably fair rewards

Prize draws in the Mullet Machine use Chainlink VRF, a verifiable random number generator — outcomes can't be tampered with, by anyone.

Audits