Built so the money can't slip sideways.
Escrow is only worth using if the operator is harder to attack than the counterparty. These are the concrete controls that hold BM Escrow together — not marketing adjectives.
Escrow addresses are admin-only
Only an authenticated administrator can write platform wallet addresses. No support agent, counterparty or chat message can change where you send funds — and the address is frozen onto each deal at creation, so later changes never rewrite a live deal.
The browser cannot write to deals
Every transition — create, join, fund, deliver, release, dispute, refund — runs through an authorised server routine that re-checks who you are and what state the deal is in. Tampering with the page does nothing.
Roles live in their own table
Administrator rights are stored separately from user profiles and are read through a privileged check. An account cannot promote itself by editing its own profile row.
Row-level isolation
Database policies scope every read to the deals you are party to. Even a leaked API key cannot list other users' trades, documents or balances.
On-chain verification, not trust
Deposits are confirmed by reading the chain explorers and matching amount, asset and destination address. A pasted transaction hash on its own never funds a deal.
Payout limits on the hot wallet
Automatic payouts are capped at an administrator-defined ceiling. Anything above it queues for manual review and is signed off by a human before it leaves escrow.
Append-only audit trail
Every state change writes an immutable event with actor and timestamp. Both parties read the same log, which is also the evidence base for dispute resolution.
Nothing sensitive to steal
We hold no identity documents at all. There is no KYC store to leak — only deal records, wallet addresses and on-chain transaction hashes.
What we ask of you
Most losses in crypto trading are social, not technical. Verify the deposit address on your deal page inside this site — never from a screenshot, a chat message or an email. BM Escrow staff will never ask for your password, your seed phrase, or for funds to be sent to a "temporary" address.
Use a strong unique password, and treat any site that looks like BM Escrow on a different domain as hostile. The only legitimate domain is bmescrow.com.
Reporting a vulnerability
If you believe you have found a security issue, report it privately through your account's support channel with reproduction steps before disclosing it anywhere else. We do not take action against good-faith researchers who avoid touching other users' data or funds.
Read the operational rules that go with these controls.