Hacken

BACKGROUND

Please describe your company and your position there.

Biki is a global blockchain technology service provider and one of the top-20 cryptocurrency exchanges on CoinMarketCap. The users of the exchange can trade more than 150 cryptocurrencies and 250 trading pairs. Biki serves more than 3 million users worldwide and is focused on making their trading experience as convenient and safe as possible.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

We realized that the frequency of cyberattacks against major cryptocurrency exchanges increased dramatically in the previous year. Hacken is a leading cybersecurity expert with deep expertise in web application security assessment whose professionalism is recognized in the market.

What were your goals for this project?

Hacken performed the web application & API security assessment. Hacken carried out vulnerability scanning to identify the application’s security weaknesses. Hacken has checked the system configuration and whether the required patches were installed to ensure the security of the system. The company’s specialists investigated web applications, customer scripts, and programs to find any loopholes. Based on the results of the testing, Hacken provided a list of identified vulnerabilities and the recommendation by implementing which Biki would strengthen its security.

SOLUTION

How did you select Hacken?

We realized that the frequency of cyberattacks against major cryptocurrency exchanges increased dramatically in the previous year. Hacken is a leading cybersecurity expert with deep expertise in web application security assessment whose professionalism is recognized in the market.

Describe the project in detail.

We have conducted a few strategic calls with the Hacken team to discuss the goals of our cooperation, its scope, and the required timeline. Based on the information received Hacken team distributed tasks among its members and started testing our product.

What was the team composition?

The team working on the security assessment of the exchange encompassed the Hacken project manager and two penetration testers who were in constant contact with our specialists. Hacken team performed the security assessment within 10 days.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Based on the results of the web application & API security assessment, Hacken specialists determined that the level of risks for Biki was low. The cooperation with Hacken has allowed us to identify and eliminate system vulnerabilities that may have been exploited by hackers to commit cyberattacks.

How effective was the workflow between your team and theirs?

The cooperation process was highly effective since our team was open to any suggestions and recommendations made by Hacken specialists while security engineers of Hacken immediately informed us of any updates and progress.

What did you find most impressive about this company?

Structured and highly professional approach to security testing and focus on communication with the customer so that Hacken did not miss any details when performing security assessment

Are there any areas for improvement?

I strongly believe that Hacken specialists provided the services of the highest quality and I do not have any complaints about the company’s work. Hacken team has confirmed its high level of professionalism in practice!

BACKGROUND

Please describe your company and your position there.

XT.com is the first socialized digital asset-trading platform that was created in 2018. There are more than 7,000,000 users in our ecosystem while 2,000,000 users are registered. The list of services provided by XT.com includes OTC trading, contract trading, margin trading, exchange trading, and other services. The exchange allows users to perform trades in more than 100 currencies and there are more than 300 trading pairs on the platform.

The company has operation centres in Japan, South Korea, Spain, Singapore, and other countries. The list of our partners includes many leading and highly reputable brands such as CoinGecko, Coinhills, Xangle, and others.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

Cybersercurity

What were your goals for this project?

We want to make our exchange more safe .

SOLUTION

How did you select Hacken?

It was recommend by friends in crypto industry

Describe the project in detail.

In 2020, we started cooperating with Hacken to strengthen our cybersecurity. We realized that the higher the volumes of assets and information the platform accumulated, the more lucrative it became for hackers. We decided to work with Hacken on making our platform secure for users since this company had deep market expertise and other highly reputable brands were leaving positive feedback about the quality of services provided by Hacken. It was a great honour for us to appoint Hacken as our cybersecurity expert.

What was the team composition?

We were focused mainly on protecting users’ funds and information from the risk of being stolen by criminal groups through cyberattacks. We strived to make the trading experience of our users more secure so that they would be able to focus solely on trading instead of worrying about security risks.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The Hacken team performed external penetration testing for a web application and an Android app. Hacken specialists reviewed our internal policies governing crypto exchange cybersecurity. The company provided us with a report containing the list of identified vulnerabilities and recommendations on fixing them.

How effective was the workflow between your team and theirs?

The communication process between our team and Hacken specialists was clear and very transparent. We saw that Hacken had deep experience in establishing effective communication with clients and, generally, Hacken did not even give us a chance to feel frustrated since we were immediately informed about progress. Also, the Hacken team actively communicated with our management and invited our CEO, Weber Woo, to attend Hacken online AMA session.

What did you find most impressive about this company?

The company’s open-mindedness and cooperative spirit. Also, I cannot but mention the company’s strong attention to customer’s concerns.

Are there any areas for improvement?

XT.com team strongly believes that even the most professional and successful companies have room for further improvement. That is why we wish Hacken to continue making the crypto world community better protected from security risks.

BACKGROUND

Please describe your company and your position there.

P2PB2B is a next-generation cryptocurrency exchange that is focused on serving its users. The platform was founded in 2018 and since then has become a trusted partner of a number of leading crypto projects. The key distinctive feature of the exchange is the ability to process up to 10,000 trades per second and 1,000,000 TCP connections. The exchange supports more than 200 cryptocurrencies as well as fiat money and this figure is likely to increase in the coming years. The company is focused on ensuring the ultimate protection of user’ data and assets and that is why 95% of cryptocurrencies are stored in cold wallets.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

Identification of vulnerabilities via the conduct of a bug bounty program was the main objective for our cooperation. We were interested in detecting such vulnerabilities as remote code execution, server-side request forgery, business logic issues, etc. Apart from detecting major vulnerabilities, we were also interested in identifying even minor bugs that could cause serious business implications.

What were your goals for this project?

Apart from detecting major vulnerabilities, we were also interested in identifying even minor bugs that could cause serious business implications.

SOLUTION

How did you select Hacken?

Although according to the CER rating, we are ranked 12th most Trust Core secure crypto exchanges, we understand that at the time when many leading crypto exchanges experience serious cyberattacks we cannot underestimate the importance of constant strengthening of our resistance to cyber threats. Hacken is a highly reputable brand in the field of cybersecurity consulting whose professionalism is recognized by leading market players. That is why cooperation with Hacken was the most obvious choice for us.

Describe the project in detail.

We conducted a series of strategic calls with the Hacken team to discuss the scope of the project and its details. Hacken specialists clearly articulated the bug bounty program procedure and kept constant contact with us during the program execution.

What was the team composition?

Customer manager and tech team

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Thanks to the bug bounty program on HackenProof Platform, we revealed the vulnerabilities that had not been detected before. As a result, we have successfully addressed the bugs in question before hackers could exploit them to steal users’ assets or private data. The cooperation with the Hacken team has allowed us to sustain our status as one of the most reliable cryptocurrency exchanges in the world.

How effective was the workflow between your team and theirs?

Yes, we are fully satisfied with the cooperation process with Hacken. Hacken specialists strictly obeyed all guidelines and cooperation frameworks developed before the launch of the bug bounty program.

What did you find most impressive about this company?

Reliability, ability to listen to our considerations, and focus on details.

Are there any areas for improvement?

P2PB2B team considers Hacken as a top specialist in the field of cybersecurity and I strongly believe that in the near future this company will only strengthen its status as a highly reputable brand. We are 100% satisfied with the services provided by Hacken.

BACKGROUND

Please describe your company and your position there.

Kuna.io is the first public cryptocurrency exchange in Ukraine and the CIS countries. The exchange serves over 150,000 users whose accounts are backed by real funds. Sam Kaploushenko, CEO

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

We decided to cooperate with Haсken since this company had strong expertise and reputation in the field of cybersecurity in the crypto industry. Thus, the choice was obvious.

What were your goals for this project?

The assessment of the security capabilities of our product and infrastructure constituted the main goal for the project. Haсken perfectly imitated hacker attacks and enabled us to evaluate the risks and fix all identified vulnerabilities.

SOLUTION

How did you select Hacken?

We were looking for a reputable cybersecurity company to conduct this type of testing and Hacken was the only provider that met all the requirements of cost, quality, expertise, and legal status.

Describe the project in detail.

Initially, we held strategic meetings to discuss the project’s goals, scope, and timeline. Then, the tasks were assigned to project participants. In 2 weeks, we received a preliminary report on the assessment of vulnerabilities and the associated risks.

What was the team composition?

The team encompassed project managers from both sides, the technical team from our side, and the security engineers from the side of Haсken.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We identified vulnerabilities in our product and based on the received recommendations implemented measures to improve our security.

How effective was the workflow between your team and theirs?

The communication was well organized and structured. They met all the deadlines, and the process was very clear.

What did you find most impressive about this company?

Unique approach to cybersecurity, broad experience in organizing collaboration with hackers, and deep understanding of cybersecurity testing.

Are there any areas for improvement?

Nothing on top of my mind.

BACKGROUND

Introduce your business and what you do there.

I’m the head of security of a cryptocurrency platform.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Hacken?

We needed someone to help us with security audit testing.

SOLUTION

What was the scope of their involvement?

Hacken provided a security audit and penetration testing for our company. They prepared the report for us with the results of the penetration testing, as well.

What is the team composition?

There were about four people that I interacted with. I worked with the security team, including the project manager.

How did you come to work with Hacken?

I met them at a security conference. We started communicating and when we had a need for penetration testing and a security audit, we hired them.

How much have you invested in them?

We spent around $13,000.

What is the status of this engagement?

We worked with them from August–September 2020. The project only took about one month.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

After they did the penetration testing and security audit, they found a few vulnerabilities. In my opinion, I’d say they were almost perfect. Everything in the project went perfectly and I was satisfied.

How did Hacken perform from a project management standpoint?

Hacken performed well in regard to project management. We communicated through email and messenger.

What did you find most impressive about them?

I was impressed by how quickly they did all of the testing. When we’d worked with other companies, it took about three months, but with Hacken, it was done within one month. We checked their quality and it was good. 

Are there any areas they could improve?

No, everything was good. 

BACKGROUND

Please describe your company and your position there.

Narkasa is a cryptocurrency exchange market based in Turkey. As part of my job, I follow the live operations of Narkasa systems, and analyze the necessary quality improvements with my team. In addition, I manage our corporate relations

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

We worked with Hacken on detailed exchange security penetration tests they were experts in.

What were your goals for this project?

As required by our processes, we carried out our security tests one by one and noticed that the deficiencies in the reports were reduced at each stage. In the test report we made with hacken, the tests and results that were not performed in other tests made us happy and helped us to improve our systems.

SOLUTION

How did you select Hacken?

Hacken was a company we had been following for a long time and we appreciated their work. For this reason, we contacted them. Thanks for their close interest.

Describe the project in detail.

Within the scope of the project, security tests were carried out on the Narkasa website and integration with over 30 test phases. Among them, there were general standard tests as well as exchange specific tests.

What was the team composition?

For this project, we had to work and talk with different technical and administrative teams on the Hacken side.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

After the test report, we made significant improvements to our systems and these changes were checked again.

How effective was the workflow between your team and theirs?

We had the opportunity to work with Hacken team 24/7 throughout the project. We had detailed interviews on their recommendations.

What did you find most impressive about this company?

During the process, they adapted to our timeline and adhered to our requests.

Are there any areas for improvement?

No

BACKGROUND

Please describe your company and your position there.

Prozorro is a fully online public procurement platform and a collaboration environment that ensures open access to public procurement (tenders) in Ukraine.

Fully implemented in 2016 as a hybrid (both centralized public and decentralized private marketplaces) system it has since been globally recognized as one of the most innovative public procurement systems delivering government services in a stakeholder-focused, transparent, effective, fair and low-cost way.

Now I am CIO and I was Information Security Lead Prozorro in 2019.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

We hired Hacken for organizing a live hacking event for core Prozorro business.

It included preliminary vulnerability assessment, scoping and policy crafting, inviting and selecting hackers, credentials provisioning, technical communication and support of the event as well as triage of the bugs.

After the event, they were involved in remediation checks and making all the payments and legal work with hackers.

What were your goals for this project?

The goals were to evaluate the security maturity of the product and infrastructure, build a bug bounty process via live hacking event and prove our customers the security level of Prozorro.

SOLUTION

How did you select Hacken?

We were searching for relevant providers for organizing such type of activity and Hacken was the only provider to matching all the requirements in terms of cost, level of service, and legal part.

Describe the project in detail.

We started work with a series of strategic meetings to discuss our goals, scope, and timeline. After that, we assigned appropriate tasks to all project members and stared work. Within 1 week we received preliminary vulnerability assessment report, fixed all the issues

What was the team composition?

The team consisted of project managers from both sides as well as tech teams and security engineers.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We discovered valuable vulnerabilities in our product and received general recommendations how to improve our security, got connected with ethical hackers community for future work.

How effective was the workflow between your team and theirs?

The communication was well built and structured. We met all the deadlines and everything was pretty clear.

What did you find most impressive about this company?

New crowdsourced approach to cybersecurity, their great experience with organizing the cooperation with hackers and deep understanding of Cybersecurity testing.

Are there any areas for improvement?

This was our first experience in running such type of events, and we were completely satisfied.

BACKGROUND

Introduce your business and what you do there.

I’m the CTO of a cryptocurrency exchange with offices in China and Singapore.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Hacken?

The security of our system is always our top priority, and we needed help from a professional in this area.

SOLUTION

What was the scope of their involvement?

Hacken has provided penetration testing for our website as well as our Android and iOS app. They identified issues and ran another round of tests after we made fixes.

They’ve also provided bug reporting, mediation services, and support.

What is the team composition?

Evgenia (Co-Founder & CEO) is my main contact.

How did you come to work with Hacken?

We approached a few companies, and we found Hacken to be the most professional. They had good experience and a strong technical team.

What is the status of this engagement?

We started working with Hacken in March 2020, and it’s ongoing.

They found issues with our security certificates after the retesting, and it took us 3–4 months to obtain new certificates and release the products into production. That extended our timeline.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Hacken has delivered more than we expected. We’re quite satisfied with them.

How did Hacken perform from a project management standpoint?

We have a time zone difference of about six hours, but we’ve managed to communicate effectively. We have regular teleconferences, and they always respond quickly during working hours.

What did you find most impressive about them?

They’re quite professional in the cybersecurity area.

Do you have any advice for future clients of theirs?

So far, so good. I don’t have any specific suggestions.

BACKGROUND

Introduce your business and what you do there.

I’m the head of development at Krypto Broker Invest, an online crypto trading platform that lets users create an account, fund a wallet, and trade various cryptocurrencies through its interface — essentially acting as a broker for buying, selling, and managing digital assets.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Hacken to accomplish for your crypto trading platform?

We hired Hacken for comprehensive cybersecurity and security assurance services aimed at strengthening our platform’s reliability, trustworthiness, and overall security posture.

SOLUTION

What was the scope of their involvement?

Hacken has been responsible for assessing our platform’s architecture and core components, reviewing application-level security, including backend and API logic, identifying potential vulnerabilities and risk vectors, verifying security best practices and compliance with industry standards, and providing ongoing security consultation and recommendations.During the security assessment, Hacken has focused on several critical components of our platform to ensure overall system integrity and resilience. Their review has covered our backend infrastructure and core application logic, including our server-side architecture, business logic, and API endpoints.Moreover, they’ve validated our user authentication and authorization mechanisms, including login flows, session handling, access controls, and role permissions. They’ve also reviewed our transaction processing flows, including deposit, withdrawal, and trade execution logic, to identify potential vulnerabilities or abuse vectors.Additionally, they’ve evaluated our wallet and asset management layer to see how digital assets are handled and protected. They’ve also assessed our API security and integrations, including exposed endpoints and third-party integrations. Finally, they’ve reviewed our data protection and storage practices to see how sensitive information is stored and transmitted.

What is the team composition?

We’ve worked with 2–5 teammates from Hacken.

How did you come to work with Hacken?

We found them through an online search. We chose them because they had high ratings, were a great culture fit, and had company values that aligned with ours.

How much have you invested with them?

We’ve spent around $10,000–$50,000.

What is the status of this engagement?

We started working together in October 2025, and the engagement is ongoing.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Hacken has identified and remediated security vulnerabilities across critical platform components, improving the security of our user authentication, transaction flows, and API endpoints. As a result, we’ve seen a clear reduction in security risks through the implementation of their recommendations.Moreover, they’ve strengthened our internal security processes and development best practices, increasing our confidence in our platform’s overall security and operational stability. Overall, we’ve achieved a stronger security posture, better preparedness against potential threats, and higher trust in our platform’s reliability and safety.For example, they’ve identified and helped us resolve all critical and high-severity vulnerabilities in our platform, ensuring no major security gaps remain. They’ve also strengthened our login, session, and access controls, reducing potential unauthorized access risks by over 90% in identified scenarios.Additionally, they’ve reviewed our deposit, withdrawal, and trade execution flows, minimizing the likelihood of transaction exploits or errors. They’ve also secured all exposed endpoints, reducing our external attack surface by a significant margin. Finally, their recommendations have improved our ongoing risk monitoring, auditing, and development best practices.Since implementing their recommendations, we haven’t had any critical security incidents. Moreover, subsequent internal and third-party audits have shown a significant reduction in vulnerabilities and risk exposure. We’ve also seen a noticeable decrease in reports related to account access, transaction issues, or suspicious activity, reflecting stronger platform integrity and user confidence.

How did Hacken perform from a project management standpoint?

Hacken’s project management has been excellent. They maintain a structured and transparent approach, clearly outlining deliverables, timelines, and responsibilities. Moreover, their communication is prompt, organized, and proactive, making it easy to coordinate across teams.They deliver all milestones and deliverables on time, and they communicate any potential delays early on, providing practical solutions. Overall, their approach gives us confidence that the project is progressing smoothly and efficiently.We primarily communicate through virtual meetings and emails or messaging apps.

What did you find most impressive about them?

What we’ve appreciated most about working with Hacken is their attention to detail, structured approach, and genuine commitment to quality and security. It truly feels like working with a partner who takes responsibility and ownership, not just a service provider.Moreover, their combination of deep technical expertise and professionalism is impressive. They don’t just identify vulnerabilities — they provide clear, actionable guidance and explain the reasoning behind each recommendation. Their transparency and responsiveness make collaboration smooth and efficient.We also appreciate their ability to adapt to our platform’s unique architecture and provide tailored solutions rather than generic advice. Overall, they stand out for their attention to detail, reliability, and genuine commitment to improving security, which gives us confidence in both the process and the results.

Are there any areas they could improve?

Overall, our experience with Hacken has been excellent. Their team is highly professional, thorough, and responsive. If we were to suggest any improvement, it would be for them to provide even more proactive updates on minor progress milestones throughout the project. However, this is a very minor point, as they meet all major deliverables and deadlines on time, and their communication is already strong.

BACKGROUND

Please describe your company and position.

 I am the Product Officer of a blockchain exchange platform. 

Describe what your company does in a single sentence.

Blockchain Exchange

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Hacken to accomplish?

• for security inspection/testing purposes

SOLUTION

How did you find Hacken?

Referral

Why did you select Hacken over others?

• High ratings
• Referred to me

How many teammates from Hacken were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Perform comprehensive security penetration testing on our systems, followed by remediation of all discovered issues.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Measurable Outcomes、System Stability、Vulnerability Remediation

Describe their project management. Did they deliver items on time? How did they respond to your needs?

All security testing phases were delivered ahead of schedule, with 24/7 support response times averaging under 1 hours for urgent vulnerabilities

What was your primary form of communication with Hacken?

Email or Messaging App

What did you find most impressive or unique about this company?

Their industry-leading security standards, proactive threat detection, and client-centric remediation were impressive.

Are there any areas for improvement or something Hacken could have done differently?

so far so good