STA does not hold funds: they stay in your OKX account. The API keys are encrypted on our servers and each permission has a single use. And the history of the cards is public and cannot be edited.
When a card is born, its fixed data (coin, direction, entry, stop, target, time) become a 64-character code: its hash, a unique digital fingerprint. The hashes are published every hour on GitHub and timestamped every day on the Bitcoin blockchain. Anyone can recalculate the hash of a card in the history and compare it with the one published on the day it was born.