Settings reference
Every setting on Admin → Settings, what it does, and what changes when you turn it on or off.
Everything on Admin → System → Platform Settings, tab by tab. Changes take effect immediately — no rebuild, no restart.
Require 2FA to Withdraw, Verify 2FA on Every Withdrawal, Auto-Approve Withdrawals and all four TransFi switches are refused for ordinary admins. They decide whether money leaves without review.
General
| Setting | What it does |
|---|---|
| Default Site Theme | Light, dark, or follow the visitor's OS preference. |
| Theme Switcher | Lets visitors override that themselves. Off pins everyone to your default. |
| Navbar Logo Display | Square logo only, or the full logo with your name. |
| Landing Page Type | DEFAULT uses the built-in home page; CUSTOM uses the one you build in the page editor. |
| News Section | Shows or hides the news area. |
| Floating Live Chat | The support bubble in the bottom corner. |
| Registry Verification Badge | Shows a Registered mark in your public footer, linking to your entry in the public register of licensed deployments. Off by default. It appears only while your domain is registered, and shows nothing otherwise. Your server makes no outbound request — the check runs in the visitor's browser. The register is currently served from a MashDiv address, so leave this off if your platform is white-labelled. |
| Addon Display Names | Rename addons as customers see them — "Ecosystem" can read "Exchange" in the menus. Cosmetic only; nothing internal changes. |
Features
| Setting | What it does |
|---|---|
| Investment | Master switch for investment features. Off hides them everywhere. |
| KYC Verification | Turns identity verification on. Off means nobody is ever asked. |
| Enforce KYC Feature Access | Applies the per-feature switches configured on each KYC level. |
Off by default, and it should stay off until you have opened the KYC level builder and reviewed every level. Once on, a user whose level does not list a feature is refused that action — including customers who were using it yesterday.
Security
Sign-in
| Setting | What it does |
|---|---|
| Google OAuth Login | Adds "Sign in with Google". Needs the Google client id configured. |
| Email Verification Required | New accounts must confirm their address before they can use the platform. |
Two-factor
| Setting | What it does |
|---|---|
| Two-Factor Authentication | The master switch. Off disables 2FA everywhere, including for withdrawals. |
| Authenticator App 2FA | Allow TOTP apps. The strongest of the three. |
| Email 2FA | Allow codes by email. A compromised inbox compromises the account. |
| SMS 2FA | Allow codes by SMS. Needs an SMS provider configured, or it is ignored. |
Withdrawals
| Setting | What it does |
|---|---|
| Require 2FA to Withdraw | Blocks withdrawals for anyone without an accepted 2FA method enabled. |
| Verify 2FA on Every Withdrawal | Asks for a fresh code on each withdrawal, so a hijacked session cannot drain an account. |
| Accept Authenticator App | TOTP satisfies the requirement above. |
| Accept Email 2FA | Email codes satisfy it. Weaker — a compromised inbox also compromises the withdrawal. |
| Accept SMS 2FA | SMS codes satisfy it. Ignored unless Twilio is configured. |
While Two-Factor Authentication is off, Require 2FA to Withdraw is ignored entirely — withdrawals go through unchallenged however it is set. Turning on withdrawal 2FA without turning on 2FA itself protects nothing.
Bot protection
| Setting | What it does |
|---|---|
| Captcha Provider | Which captcha guards registration, login and password reset: Cloudflare Turnstile, Google reCAPTCHA v3, hCaptcha, the built-in Proof of Work, or none. |
| Site Key | Public key for the selected provider. Rendered into the page, so it is not a secret. Hidden unless a hosted provider is selected. |
| Secret Key | Server-side key used to verify tokens. Never sent to the browser. Super Admin only. |
| reCAPTCHA Score Threshold | reCAPTCHA v3 only. It grades 0.0–1.0 rather than passing or failing; anything below this is refused. 0.5 is Google's own starting point. |
| PoW Difficulty | Proof of Work only. low, medium or high. Raising it slows your real customers far more than it slows a bot — leave it on medium. |
Proof of Work is the shipped default because it needs no account, but it only imposes a CPU cost — it cannot tell a person from a script. Cloudflare Turnstile is free, unlimited and invisible to nearly every real visitor.
Bot protection and captcha walks through every provider, explains what happens when one is unreachable, and covers the signup and login rate limits that do more than any captcha.
Wallet
What customers can do
| Setting | What it does |
|---|---|
| Fiat Wallets | Enables fiat balances alongside crypto. Off makes the platform crypto-only. |
| Deposits | Master switch. Off hides deposits and refuses them server-side. |
| Withdrawals | Same, for withdrawals. |
| Transfers | Same, for transfers between wallets. |
| Withdrawal Processing Time | Shows an estimated completion time on the withdrawal page. |
| Deposit Expiration | Expires deposit addresses after a period rather than leaving them live forever. A sweep the platform makes from a customer's own address is exempt while the exchange is still confirming it. |
| Spot Deposit Attribution | How a deposit to the shared exchange address finds its owner. The options read Hash claim (the hardened default), Exact amount (no hash) and Own address (the customer's Ecosystem address, swept to the exchange by the platform). Super Admin only; affects new deposits only. See Spot deposit modes. |
Withdrawal approval
| Setting | What it does |
|---|---|
| Auto-Approve Withdrawals | On, spot withdrawals execute with no human step. Off, each waits for admin review. |
There used to be a second switch here, Auto-Approve Withdrawals (Legacy),
for the older withdrawApproval key. It is gone: two switches for one decision
could show opposite positions, and the legacy one silently won on any install
where the newer row had never been saved. Saving the switch above now writes
both rows. If you are upgrading, see
Withdrawal policy — there is a
one-line migration to run.
With it on, a compromised account withdraws immediately and irreversibly. Most operators leave it off and work the approval queue. If you do turn it on, turn on Verify 2FA on Every Withdrawal as well.
TransFi
Only relevant if you use TransFi. All four need a Super Admin.
| Setting | What it does |
|---|---|
| TransFi Virtual IBANs | Gives each customer a permanent EUR account to pay into, instead of a checkout per deposit. |
| TransFi Buy Crypto (Onramp) | Customers buy crypto with local currency. |
| Buy Crypto Delivery | Where it lands. Customer wallet means you never hold it and carry no custody risk. Platform wallet is not available yet. |
| TransFi Sell Crypto (Offramp) | Customers sell crypto for local currency paid to their bank or mobile wallet. |
| Sell Crypto Source | Who sends the crypto. Customer sends means you never touch it. Platform sends is not available yet. |
Fees
| Setting | What it does |
|---|---|
| Wallet Transfer Fee | Percentage taken on a transfer between wallets. |
| Wallet Transfer Spread | Margin against mid-market on cross-currency transfers, covering rate-feed lag. |
| Spot Withdraw Fee | Percentage taken on a spot withdrawal. |
Pool backing
What the exchange owes against what it holds, and whether the platform moves coins to close the gap. Pool backing explains each; the labels here are the screen's.
| Setting | What it does |
|---|---|
| Pool Backing Mode | Off, Monitor (the default), Manual or Auto. Super Admin only. |
| Backing Cap (USD) | The most a currency's unsettled ECO → Spot and FIAT → Spot transfers may add up to before further ones are refused, in Manual and Auto. Empty refuses nothing. Super Admin only. |
| Settle Threshold (USD) | The smallest net obligation worth a settlement movement. |
| Max Settlement (USD) | The largest single movement the engine plans, whoever pressed the button; a bigger net goes in instalments. Empty removes the bound. Super Admin only. |
| Gap Alert (USD) | Notify admins when a currency's gap exceeds this. Empty alerts on persistent drift only. |
| Drift Confirmation Runs | How many consecutive reconciliations an unexplained residual must survive to become drift. |
| Pause Settlements | The kill switch: no settlement starts or is marked settled while it is on. Super Admin only. |
| Exchange Conversions | Let the engine buy, on the exchange, a currency it owes but never received. Super Admin only. |
| Custody Addresses Read Per Run | How many customer custody addresses per currency and chain each reconciliation reads on chain. |
| Master Wallet Reserve | JSON, keyed by ecosystem chain name, of what the master wallet must keep after a settlement draws on it. Super Admin only. |
Social & Links
| Setting | What it does |
|---|---|
| Social Links | The links and icons shown in the footer. |
| App Store Link | Your iOS app. Leave blank and the button does not appear. |
| Google Play Link | Your Android app. Same. |
Branding
Image uploads only, no behaviour attached. The sizes are what browsers and app stores expect — upload the wrong size and it gets scaled, sometimes badly.
| Group | Files |
|---|---|
| Site logos | Square light/dark (96×96), full light/dark (350×75), card logo (256×256) |
| Favicons | 16×16, 32×32, 96×96 |
| Apple touch icons | 57, 60, 72, 76, 114, 120, 144, 152, 180 |
| Android icons | 192, 256, 384, 512 — 512 is the one PWA installs use |
| Microsoft | 144×144 Windows tile |
The square logo shows in the navbar when Navbar Logo Display is set to square, the full logo otherwise. Each theme needs its own file, or the logo disappears against a matching background.
One thing worth knowing
Settings are stored in the database as text, so an off switch is the string
"false", not a boolean. That only matters if you query the table directly —
if (value) is true for "false". The admin screen and the platform handle it
correctly.
Environment variables are a separate system, for values that must exist before the database does: credentials, ports, API keys. See Environment reference.