Dear 4M Users,

This notice explains the security measures currently available on 4M and how to use them.

Fireblocks Wallets: Infrastructure for Digital Asset Management

4M has adopted Fireblocks wallets as part of its digital asset infrastructure, supporting the platform’s wallet management and related on-chain operations.

Digital assets are recorded on the blockchain. Wallet security centers on protecting the key material needed to sign transactions and controlling authorization for asset transfers. Fireblocks’ multi-party computation (MPC) wallet technology uses distributed key shares to jointly sign transactions without reconstructing the complete private key during signing. This design helps reduce the single point of exposure associated with storing a complete private key in one place.

In its published MPC security architecture, Fireblocks also uses isolated computing environments to protect key shares and the signing process. Together, key protection and transaction signing mechanisms form the security foundation of the wallet infrastructure, helping reduce the risk of key exposure and unauthorized use. Fireblocks Security Architecture

For 4M, adopting Fireblocks wallets is an important part of its digital asset security measures. Wallet infrastructure primarily protects keys and on-chain operations. Account access, identity verification, and users’ own actions also require complementary safeguards.

Identity Verification (KYC)

4M provides identity verification to check the identity information submitted by users. This supports identity confirmation for relevant services and helps reduce the risk of impersonation and account misuse.

Please complete the applicable verification requirements as prompted on the platform and ensure that the information you submit is accurate and truthful. Submit verification documents only through 4M’s official verification process. Avoid sharing personal identity information through private messages in community groups, unfamiliar links, or unverified third-party channels.

Identity verification is part of account management. Even after verification, you must continue to protect your login and authentication credentials.

AI Assistant: Account Security Checks (Coming Soon)

4M’s AI assistant will provide account security checks to help users review their accounts against supported checks.

Once available, you will be able to access this feature through the AI assistant and view the results. The supported checks and their scope will be shown on the feature page. If the results flag an issue, promptly review and address it in light of your account activity. If you are unsure how to proceed, contact the platform’s official support.

Account security checks are an aid. Results reflect the checks performed at that time and within the supported scope; they do not prove that an account is free of all risks.

Everyday Security Practices

Protecting accounts and assets also requires careful checks during everyday use. Please pay particular attention to the following:

• Protect your login credentials. Use a strong, unique password that you do not reuse on other websites. Never share passwords, SMS verification codes, or other authentication credentials.
• Verify how you access the platform. Access your account through the official 4M website or app. Be cautious of login links in community messages, search ads, and unfamiliar emails.
• Check transfer details carefully. Before depositing or withdrawing, verify the asset, network, recipient address, and Memo/Tag, where applicable. Check the address again after pasting it to avoid losses caused by an incorrect network or a tampered address.
• Watch for support impersonation. Be alert to requests to share passwords or your screen, install remote-control software, or transfer funds to a specified address to “verify your account” or “unfreeze funds.” Verify such requests independently through official channels.
• Keep your devices secure. Update your operating system and browser promptly. Be cautious when installing software, extensions, or apps from unknown sources, and avoid signing in on untrusted devices.

What to Do if You Notice Unusual Activity

If you notice unauthorized actions, unusual account access, suspicious asset movements, or suspected phishing, report it promptly through the official support channel within the 4M platform.

Where possible, retain the time of the incident, relevant screenshots, transaction references, or on-chain transaction hashes to assist the review. Do not include passwords, verification codes, private keys, or seed phrases in your report, and do not post personal identity documents in public groups.

If you suspect that someone has gained control of your device, stop entering sensitive information on it and use a trusted device to contact official support.

Security measures aim to reduce risk but cannot eliminate all technical, operational, or fraud risks. Digital asset trading also involves price volatility and the risk of loss. Please understand the relevant products and rules before participating and exercise caution.

Thank you for supporting 4M.

The 4M Team

September 28, 2026