Security reviews, wallet clearances and what you can check yourself
Where the academy stands with the security providers that screen websites and dapps for wallet users. Each notice below was sent to BTC24Hours by the provider named on it and is published here exactly as it was received, with what it covers — and what it does not — stated beside it. Underneath them are the checks that need no notice at all: the contracts, the treasury and every transfer the academy has ever sent, all readable on chain by anybody.
Security review completed — incorrect flagging confirmed and modified
Blockaid — Web3 security for a safer tomorrow
Blockaid had flagged btc24hours.com, the academy appealed it, and the Blockaid Security Team wrote back to say the review was finished: the flagging was found to be incorrect and has been modified accordingly. Blockaid’s screening is what a number of wallets and browsers read before they show a warning on a site, so the flag being lifted is what stops members meeting one on the way in.
- Security review completed
- Incorrect flagging identified
- Flagging modified accordingly
Dapp whitelisted by the Bitget Wallet Security Team
Bitget Wallet — Trust builds a stronger Web3
Bitget Wallet support confirmed that its relevant team has whitelisted the dapp, and that the link can be opened again from the wallet. It means the site is no longer held back by that wallet’s own screening — nothing more than that, and nothing about the course, the token or anybody’s rewards.
- Bitget Wallet support confirmed the dapp has been whitelisted
- Members may open the dapp link again from the wallet
- The clearance covers access to the site, not what the site does
The code, and where to read it
The contracts are self-contained Solidity with no external dependencies, and they are published: the course contract and the BTC24 VIP Gift Card collection can be read line by line on BscScan, and so can every transaction either of them has ever processed. That is what the academy can point at about the code — published and verifiable, read by whoever wants to read it. Where the academy runs in direct mode there is no course contract at all: fees move as plain token transfers between wallets, and each one is re-read from BNB Chain before it counts for anything.
- Course contract
- Direct BTCB mode
- Not used — fees move as plain token transfers, each one re-read from BNB Chain
- Payment token
- 0x7130d2A12B9BCbFAe4f2634d864A1Ee1Ce3Ead9c
- BTCB on BNB Smart Chain, the token a course fee is paid in
The BTC24 VIP Gift Card collection is an ERC-721 a member claims for gas alone and it holds no price, no fee routing and no withdrawal — its address is on the card page for anybody who wants to read that one too.
What you can check yourself
A notice is somebody’s word. These are not: each one is readable on chain or on a public page, by anybody, without asking the academy for anything.
Every transfer the academy sends is published with its hash
Referral rewards, the Spillover draw, the Royalty Income shares, the BTC24 gifts, the study rewards and the collaboration claims each have their own ledger, and every row carries the transaction it was actually paid in. A row and a hash that disagree is something anybody can catch without asking the academy anything.
Open the withdraw proofsThe token is readable on chain, supply included
The BTC24 contract address is printed at full length on the whitepaper page, and the supply shown there is read off the contract rather than typed in. Paste the address into BscScan and the same figure is there.
Open the whitepaperThe fee goes to an address you can watch
The treasury, the payment token and the course contract are linked in the footer of every page on the site. A fee arrives as an ordinary token transfer to that address, so the payment you make is visible on chain the moment it confirms — and the academy grants a membership only after re-reading that transfer from BNB Chain.
Nothing on the site can move tokens out of your wallet
Enrolling is one transfer of the exact fee, approvals are for the exact amount and never unlimited, and the marketplaces settle wallet to wallet with the academy on neither leg. No page asks for a seed phrase or a private key — nobody at the academy will ever ask you for either, for any reason.
What the academy keeps, and what it cannot delete
The Privacy Policy lists what is stored against a wallet address, which of it is public by design and what cannot be removed because a ledger row is the proof it exists for. The Terms set out the risks in longer form, including the ones no security review touches.
Read the TermsWhat this page is not
These are notices the academy received and published, not certificates the academy issued and not an assurance about anything. A security provider can re-screen a site or change a rating at any time, so a notice describes the moment it was sent rather than the state of things now — check the provider’s own tooling if what you need is the current rating. Nothing here changes the risks of enrolling: the course fee is spent rather than deposited, referral rewards depend entirely on purchases made by people you introduce and can be zero, and on-chain payments are irreversible whatever any provider says about the website.