User
/dashboard /wallet /deposit /withdraw /transactions /profile /security
Admin (/admin)
/admin/users /admin/coins /admin/deposits /admin/withdrawals /admin/transactions /admin/settings /admin/audit-logs — create/suspend/archive users, never hard-delete financial history
Security
2FA • Rate limit • IP/device logs • Roles • CSRF • Audit logs — private keys never stored