SwissBorg rolls out time-locked withdrawals amid attack risk

Claims that SwissBorg has launched a feature called “Withdrawal Protection to Safeguard Against Physical Attacks” are circulating. This report examines whether SwissBorg Withdrawal Protection is officially confirmed, explains how physical attack protection typically works in crypto withdrawal security, and outlines practical, non-speculative steps users can take today.

No official confirmation of SwissBorg ‘Withdrawal Protection’ found

As of February 2026, no official announcement using the precise label “Withdrawal Protection” or describing a program “to safeguard against physical attacks” appears on the company’s public channels reviewed for this analysis. The absence of a named policy suggests the claim remains unconfirmed and should not be treated as a launched feature.

At the same time, media coverage has referenced similar ideas. For example, as reported by CryptoDaily, the firm “adds time-locked withdrawals to thwart rising wrench attacks,” a framing that aligns with industry practice but has not been corroborated on the company’s official properties.

For context, this discussion should not be conflated with the September 2025 incident impacting a Solana (SOL) earn program through a partner API compromise. As reported by CoinDesk, roughly 192,600 SOL (about $41 million) was stolen after a third-party provider was breached, while the core application remained unaffected.

What withdrawal protection means for physical-coercion and phone-theft risks

Physical-coercion scenarios, often called “$5 wrench attacks”, and smartphone theft create a distinct threat model from online hacks. In these cases, an attacker may compel a victim to initiate a transfer, or exploit a seized device and saved credentials to execute an unauthorized withdrawal.

In response, platforms commonly combine several controls. Time-locked withdrawals or cooldowns slow the transfer so a victim has time to intervene. Address allowlists restrict payouts to pre-approved destinations. Duress PINs can authenticate access while secretly signaling an alert or lockdown. Device or geolocation binding blocks transactions from unrecognized hardware or unexpected regions.

These protections trade some convenience for risk reduction. Longer cooldowns can impair urgent liquidity needs; strict allowlists require more setup and maintenance; and device/geo checks may increase false positives while traveling. Effective “physical attack protection” therefore emphasizes layered, opt-in controls that users understand and can operate under stress.

Immediate steps SwissBorg users can take to protect withdrawals

Without assuming any unannounced features, users can reduce exposure by leveraging controls already present in the app and by tightening their device posture. Enabling a withdrawal PIN and using passkeys for authentication help ensure an attacker needs more than simple device access to move funds.

Where supported, narrowing the withdrawal surface area is prudent. Using trusted-address features or allowlists, combined with modest default withdrawal limits and strong screen locks/biometrics, lowers the chance that a coerced or opportunistic theft succeeds in one attempt.

Operational habits matter in higher-risk contexts. Minimizing balances kept in hot, mobile-connected environments during travel or public events reduces potential loss from a single-device compromise. Keep notifications on and review any unexpected prompts or new-device requests before approving.

Recovery readiness can mitigate damage if a compromise occurs. Maintaining secure, offline records of recovery steps, and periodically validating that passkeys and PINs can be restored, improves resilience under pressure.

Known SwissBorg controls: withdrawal PINs, passkeys, and app security

The platform has previously highlighted withdrawal PINs designed to add friction at the payout step, and the subsequent introduction of passkeys to harden account access and recovery flows. Together, these measures raise the bar for attackers who rely on device theft or shoulder-surfed credentials.

“Rest assured, the SwissBorg app remains fully secure,” said SwissBorg in a 2025 incident update, distinguishing a partner compromise from the core application. That separation of environments is relevant when evaluating withdrawal protections because it underscores that controls at the app layer can differ from risks in third-party integrations.

At the time of this writing, and for contextual market background only, SwissBorg (CHSB) was quoted around 0.1895 with a 14-day RSI near 45.40, based on data from Yahoo Finance Canada. The figures indicate neutral momentum conditions and should not be interpreted as a forecast or recommendation.