# 安全守则与操作规范

StampDEX 安全最佳实践：私钥防护、签名审查与非托管安全须知。

> Source: bitcoinuniverseio/stampdex (private application source), legal/custodyClaims, escrow key handling, terms of service copy. Applicable release continuous deployment, verify with GET /api/version. Last verified 2026-09-01. Chain bitcoin/mainnet.

> [!NOTE]
> **简体中文官方文档**：在比特币网络上进行资产交互时，请务必严格遵守非托管安全原则，审查每一步签名内容。 核心交易规则为非托管模式，买卖双方按标准费率收取服务费，并于比特币主网进行原子结算。



## Your keys stay yours

StampDEX never asks for a private key or a recovery phrase. It builds transactions;
your wallet shows them and signs them, or refuses. Nothing spends from your address
without your signature made in your wallet.

## The claim StampDEX refuses to make

StampDEX is not a 非托管 exchange, and it does not describe itself as one. The
application repository carries a test that fails the build if product copy calls it a
非托管 marketplace or a trustless exchange, so the claim cannot creep back in
through a marketing edit.

What it says instead, in its own terms:

> StampDEX is a software interface. We never hold your private keys, your seed phrase,
> or your Stamps.
>
> An SRC-20 purchase is different. Your payment goes to a trade address StampDEX
> controls and is released to the seller when the tokens move to you. If the token
> transfer fails, that payment stays in the trade address until an operator finishes
> the trade or returns it.

Both halves are true at once. That is why
[Where your funds are](/docs-stampdex/zh-cn/concepts/custody/) exists as its own page.

## Where funds sit during a trade

**SRC-20:** tokens and payment sit in escrow addresses created for that one listing.
StampDEX generates and holds those keys server side, encrypted, for the trade's
duration; they are never sent to a browser and never returned by any API, and they are
discarded when an unsigned draft expires.

**Bitcoin Stamps:** nothing sits with StampDEX. A dispenser purchase is one Bitcoin
transaction between you and the seller's dispenser.

## What you sign is what you see

Before any signature, StampDEX shows the asset's identity, the amount, the unit price,
the total, the fees, and the addresses involved. The unit price never contradicts the
total: the API refuses to serve a listing whose stored numbers disagree.

If your wallet shows numbers that differ from the review screen, sign nothing and
report it. See [Review a 部分签名的比特币交易 (PSBT) before signing](/docs-stampdex/zh-cn/guides/psbt-review/).

## Honest numbers

- A value the source did not answer shows as unknown, never as 0. See
  [Unknown is not zero](/docs-stampdex/zh-cn/concepts/unknown-is-not-zero/).
- Every market number names its source, and the source map is in the API response. See
  [Data provenance](/docs-stampdex/zh-cn/concepts/data-provenance/).
- No fake urgency, no fake viewers, no invented volume. A quiet market looks quiet.
- A market cap that arithmetic makes absurd is reported as unknown rather than
  repeated.

## Verify the deployment yourself

```bash frame=none
curl https://stamp.api.bitcoinuniverse.io/api/version
```

Returns the exact commit running in production. The code that commit points to is what
serves you.

```bash frame=none
curl https://stamp.api.bitcoinuniverse.io/api/v1/indexer/status
```

Names the index source, its operator, and how far behind the Bitcoin tip it is.

## What StampDEX cannot promise

- **Bitcoin confirmation times.** Fees and network demand set them.
- **The completeness of third-party index data.** The
  [provenance page](/docs-stampdex/zh-cn/concepts/data-provenance/) says which reads are
  third party.
- **That a token or stamp is a good purchase.** StampDEX shows identity and market
  facts. The decision is yours, and nothing here is financial advice.
- **That every action has been exercised on mainnet.** Read
  [Release evidence](/docs-stampdex/zh-cn/project/release-evidence/) before trusting an
  action with something valuable.

## Report a problem

- **A suspected security problem:** email `legal@bitcoinuniverse.io`. Do not open a
  public issue.
- **Anything else:** open a
  [GitHub issue](https://github.com/bitcoinuniverseio/stampdex/issues).
- **A mistake in these docs:** see
  [Contributing](/docs-stampdex/zh-cn/project/contributing/).

## Related

- [Where your funds are](/docs-stampdex/zh-cn/concepts/custody/)
- [Recovery](/docs-stampdex/zh-cn/concepts/recovery/)
- [Wallets](/docs-stampdex/zh-cn/reference/wallets/)