USDT and USDC deposited by users are transferred to onchain deposit wallets managed by Infini.

The platform assigns deposit addresses to individual or business accounts. These addresses are used to identify the account associated with each deposit.

Once an onchain transaction reaches the required number of confirmations, the system credits the corresponding amount to the user's internal account balance based on the deposit address and transaction record.

For example, if a user transfers 100 USDT to their assigned deposit address, the internal ledger records the deposit after the transaction is confirmed, and the account balance is updated accordingly.

Personal and Business users share the same underlying wallet technology. However, balances and fund movements are recorded separately for each account.

Whether onchain funds remain at the original deposit address or are transferred to other wallets for consolidated management depends on the platform's treasury management arrangements.

Infini currently uses MPC wallet technology provided by Safeheron.

Safeheron provides digital asset self custody infrastructure for businesses. Its publicly described capabilities include MPC, trusted execution environments, or TEE, wallet APIs, permission policies, API Co-Signer, and offline recovery.

Safeheron has also published some of its cryptographic and MPC code and has undergone third party security audits covering certain algorithms and code components.

These audits cover only the code and scope specified in the relevant reports. They do not mean that Infini's entire wallet system has undergone an equivalent audit.

Personal and Business use the same underlying wallet infrastructure. The account system records balances and fund movements separately for individual and business accounts.

Using the same wallet technology does not mean that the accounts share the same balance.

Earn subscriptions and redemptions are recorded and processed through the internal ledger.

A hot wallet is a wallet connected to an online environment and capable of processing daily receipts and payments.

MPC describes the method used to protect private key material and authorize signatures.

The two concepts can be used together. A wallet secured using MPC may still operate as a hot wallet.

The platform assigns a deposit address to each individual or business account to identify the owner of an incoming deposit.

After the funds are credited, the platform may transfer assets from multiple deposit addresses to designated wallets for consolidated management, depending on its treasury management arrangements.

A fund transfer may be initiated by a user or by an authorized business workflow.

After a request is initiated, the system checks information such as the initiator, sending wallet, receiving address, asset type, and transaction amount against preconfigured policies.

Transactions that meet the conditions for automated approval may proceed through the system. Transactions requiring manual approval enter the applicable approval workflow.

After approval, the system proceeds to MPC signing.

Approval determines whether the transaction is permitted to proceed. MPC signing generates the transaction authorization that can be verified by the relevant blockchain. These are separate stages of the process.

Safeheron's policy engine supports approval rules based on conditions such as the initiator, address, asset, and amount. It also supports manual approval and automated approval through API Co-Signer.

Under the current permission and approval design, a fund transfer must pass through predefined system controls and the applicable approval process.

The design is intended to prevent one individual from independently completing the entire fund transfer process.

Infini uses MPC wallet technology to support transaction signing through distributed key management and predefined approval mechanisms.

Specific details concerning key shares, backups, approvals, and disaster recovery configurations are security sensitive and are not disclosed publicly.

Safeheron provides the relevant wallet infrastructure and recovery capabilities. The actual configuration is determined by Infini's current security architecture.

The system links onchain assets to internal accounts using the following information:

Onchain wallets record blockchain transactions that have occurred. The internal ledger records the balance and fund movements associated with each account.

Together, these records are used to identify deposits, record account entries, and display balances.

Subject to security and disclosure review, specific wallet addresses, their corresponding onchain balances, and transaction records may be disclosed for verification through a blockchain explorer.

The relationship between a user's identity and deposit address will not be disclosed because doing so could expose user privacy and account information.

Treasury consolidation rules, internal wallet tiers, and security configurations are also outside the scope of public disclosure.

Infini currently plans to launch its Proof of Reserves mechanism in Q4, subject to implementation progress and the required reviews.

Safeheron supports backing up three key shares using recovery seed phrases.

If the relevant seed phrases and wallet recovery materials remain complete and usable, an enterprise may use an offline recovery tool to reconstruct the wallet's private key and import it into another compatible wallet.

From a technical perspective, the asset holding address, signing controls, and internal accounting relationship can be confirmed.

These technical facts do not, by themselves, determine legal ownership of the assets.

Legal ownership must be assessed by considering the user agreement, transaction structure, contracting entity, use of funds, and applicable law.

Operating a wallet or holding a customer side key share does not, by itself, establish a custody relationship as a matter of law.

Infini's specific role must be determined separately for Personal, Business, Earn, and other products based on the applicable contracts and fund arrangements.

A single legal classification should not be applied across all products without considering their respective structures.

Separate account records, assigned deposit addresses, or technical separation between wallets do not, by themselves, establish legal segregation of assets.

Whether legal segregation exists must be assessed by considering the account structure, contractual relationships, accounting treatment, asset registration, and applicable insolvency laws.

The treatment of user assets in an insolvency depends on the legal ownership of the assets, whether effective segregation has been established, the contractual relationships between users and the relevant entities, and the insolvency laws of the applicable jurisdiction.

The wallet architecture alone is not sufficient to determine whether users could recover their assets directly or would need to participate in insolvency proceedings as creditors.

Safeheron currently provides MPC wallet technology and related infrastructure.

The responsibilities of banks and other third parties must be determined separately based on the applicable contracts and the services actually provided.

These services may include accounts, payments, asset safekeeping, technical connectivity, or other functions.