Hacken

BACKGROUND

Please describe your company and your position there.

XT.com is the first socialized digital asset-trading platform that was created in 2018. There are more than 7,000,000 users in our ecosystem while 2,000,000 users are registered. The list of services provided by XT.com includes OTC trading, contract trading, margin trading, exchange trading, and other services. The exchange allows users to perform trades in more than 100 currencies and there are more than 300 trading pairs on the platform.

The company has operation centres in Japan, South Korea, Spain, Singapore, and other countries. The list of our partners includes many leading and highly reputable brands such as CoinGecko, Coinhills, Xangle, and others.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

Cybersercurity

What were your goals for this project?

We want to make our exchange more safe .

SOLUTION

How did you select Hacken?

It was recommend by friends in crypto industry

Describe the project in detail.

In 2020, we started cooperating with Hacken to strengthen our cybersecurity. We realized that the higher the volumes of assets and information the platform accumulated, the more lucrative it became for hackers. We decided to work with Hacken on making our platform secure for users since this company had deep market expertise and other highly reputable brands were leaving positive feedback about the quality of services provided by Hacken. It was a great honour for us to appoint Hacken as our cybersecurity expert.

What was the team composition?

We were focused mainly on protecting users’ funds and information from the risk of being stolen by criminal groups through cyberattacks. We strived to make the trading experience of our users more secure so that they would be able to focus solely on trading instead of worrying about security risks.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The Hacken team performed external penetration testing for a web application and an Android app. Hacken specialists reviewed our internal policies governing crypto exchange cybersecurity. The company provided us with a report containing the list of identified vulnerabilities and recommendations on fixing them.

How effective was the workflow between your team and theirs?

The communication process between our team and Hacken specialists was clear and very transparent. We saw that Hacken had deep experience in establishing effective communication with clients and, generally, Hacken did not even give us a chance to feel frustrated since we were immediately informed about progress. Also, the Hacken team actively communicated with our management and invited our CEO, Weber Woo, to attend Hacken online AMA session.

What did you find most impressive about this company?

The company’s open-mindedness and cooperative spirit. Also, I cannot but mention the company’s strong attention to customer’s concerns.

Are there any areas for improvement?

XT.com team strongly believes that even the most professional and successful companies have room for further improvement. That is why we wish Hacken to continue making the crypto world community better protected from security risks.

BACKGROUND

Please describe your company and your position there.

P2PB2B is a next-generation cryptocurrency exchange that is focused on serving its users. The platform was founded in 2018 and since then has become a trusted partner of a number of leading crypto projects. The key distinctive feature of the exchange is the ability to process up to 10,000 trades per second and 1,000,000 TCP connections. The exchange supports more than 200 cryptocurrencies as well as fiat money and this figure is likely to increase in the coming years. The company is focused on ensuring the ultimate protection of user’ data and assets and that is why 95% of cryptocurrencies are stored in cold wallets.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

Identification of vulnerabilities via the conduct of a bug bounty program was the main objective for our cooperation. We were interested in detecting such vulnerabilities as remote code execution, server-side request forgery, business logic issues, etc. Apart from detecting major vulnerabilities, we were also interested in identifying even minor bugs that could cause serious business implications.

What were your goals for this project?

Apart from detecting major vulnerabilities, we were also interested in identifying even minor bugs that could cause serious business implications.

SOLUTION

How did you select Hacken?

Although according to the CER rating, we are ranked 12th most Trust Core secure crypto exchanges, we understand that at the time when many leading crypto exchanges experience serious cyberattacks we cannot underestimate the importance of constant strengthening of our resistance to cyber threats. Hacken is a highly reputable brand in the field of cybersecurity consulting whose professionalism is recognized by leading market players. That is why cooperation with Hacken was the most obvious choice for us.

Describe the project in detail.

We conducted a series of strategic calls with the Hacken team to discuss the scope of the project and its details. Hacken specialists clearly articulated the bug bounty program procedure and kept constant contact with us during the program execution.

What was the team composition?

Customer manager and tech team

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Thanks to the bug bounty program on HackenProof Platform, we revealed the vulnerabilities that had not been detected before. As a result, we have successfully addressed the bugs in question before hackers could exploit them to steal users’ assets or private data. The cooperation with the Hacken team has allowed us to sustain our status as one of the most reliable cryptocurrency exchanges in the world.

How effective was the workflow between your team and theirs?

Yes, we are fully satisfied with the cooperation process with Hacken. Hacken specialists strictly obeyed all guidelines and cooperation frameworks developed before the launch of the bug bounty program.

What did you find most impressive about this company?

Reliability, ability to listen to our considerations, and focus on details.

Are there any areas for improvement?

P2PB2B team considers Hacken as a top specialist in the field of cybersecurity and I strongly believe that in the near future this company will only strengthen its status as a highly reputable brand. We are 100% satisfied with the services provided by Hacken.

BACKGROUND

Please describe your company and your position there.

Kuna.io is the first public cryptocurrency exchange in Ukraine and the CIS countries. The exchange serves over 150,000 users whose accounts are backed by real funds. Sam Kaploushenko, CEO

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

We decided to cooperate with Haсken since this company had strong expertise and reputation in the field of cybersecurity in the crypto industry. Thus, the choice was obvious.

What were your goals for this project?

The assessment of the security capabilities of our product and infrastructure constituted the main goal for the project. Haсken perfectly imitated hacker attacks and enabled us to evaluate the risks and fix all identified vulnerabilities.

SOLUTION

How did you select Hacken?

We were looking for a reputable cybersecurity company to conduct this type of testing and Hacken was the only provider that met all the requirements of cost, quality, expertise, and legal status.

Describe the project in detail.

Initially, we held strategic meetings to discuss the project’s goals, scope, and timeline. Then, the tasks were assigned to project participants. In 2 weeks, we received a preliminary report on the assessment of vulnerabilities and the associated risks.

What was the team composition?

The team encompassed project managers from both sides, the technical team from our side, and the security engineers from the side of Haсken.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We identified vulnerabilities in our product and based on the received recommendations implemented measures to improve our security.

How effective was the workflow between your team and theirs?

The communication was well organized and structured. They met all the deadlines, and the process was very clear.

What did you find most impressive about this company?

Unique approach to cybersecurity, broad experience in organizing collaboration with hackers, and deep understanding of cybersecurity testing.

Are there any areas for improvement?

Nothing on top of my mind.

BACKGROUND

Introduce your business and what you do there.

I’m the head of security of a cryptocurrency platform.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Hacken?

We needed someone to help us with security audit testing.

SOLUTION

What was the scope of their involvement?

Hacken provided a security audit and penetration testing for our company. They prepared the report for us with the results of the penetration testing, as well.

What is the team composition?

There were about four people that I interacted with. I worked with the security team, including the project manager.

How did you come to work with Hacken?

I met them at a security conference. We started communicating and when we had a need for penetration testing and a security audit, we hired them.

How much have you invested in them?

We spent around $13,000.

What is the status of this engagement?

We worked with them from August–September 2020. The project only took about one month.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

After they did the penetration testing and security audit, they found a few vulnerabilities. In my opinion, I’d say they were almost perfect. Everything in the project went perfectly and I was satisfied.

How did Hacken perform from a project management standpoint?

Hacken performed well in regard to project management. We communicated through email and messenger.

What did you find most impressive about them?

I was impressed by how quickly they did all of the testing. When we’d worked with other companies, it took about three months, but with Hacken, it was done within one month. We checked their quality and it was good. 

Are there any areas they could improve?

No, everything was good. 

BACKGROUND

Please describe your company and your position there.

Narkasa is a cryptocurrency exchange market based in Turkey. As part of my job, I follow the live operations of Narkasa systems, and analyze the necessary quality improvements with my team. In addition, I manage our corporate relations

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

We worked with Hacken on detailed exchange security penetration tests they were experts in.

What were your goals for this project?

As required by our processes, we carried out our security tests one by one and noticed that the deficiencies in the reports were reduced at each stage. In the test report we made with hacken, the tests and results that were not performed in other tests made us happy and helped us to improve our systems.

SOLUTION

How did you select Hacken?

Hacken was a company we had been following for a long time and we appreciated their work. For this reason, we contacted them. Thanks for their close interest.

Describe the project in detail.

Within the scope of the project, security tests were carried out on the Narkasa website and integration with over 30 test phases. Among them, there were general standard tests as well as exchange specific tests.

What was the team composition?

For this project, we had to work and talk with different technical and administrative teams on the Hacken side.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

After the test report, we made significant improvements to our systems and these changes were checked again.

How effective was the workflow between your team and theirs?

We had the opportunity to work with Hacken team 24/7 throughout the project. We had detailed interviews on their recommendations.

What did you find most impressive about this company?

During the process, they adapted to our timeline and adhered to our requests.

Are there any areas for improvement?

No

BACKGROUND

Please describe your company and your position there.

Prozorro is a fully online public procurement platform and a collaboration environment that ensures open access to public procurement (tenders) in Ukraine.

Fully implemented in 2016 as a hybrid (both centralized public and decentralized private marketplaces) system it has since been globally recognized as one of the most innovative public procurement systems delivering government services in a stakeholder-focused, transparent, effective, fair and low-cost way.

Now I am CIO and I was Information Security Lead Prozorro in 2019.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

We hired Hacken for organizing a live hacking event for core Prozorro business.

It included preliminary vulnerability assessment, scoping and policy crafting, inviting and selecting hackers, credentials provisioning, technical communication and support of the event as well as triage of the bugs.

After the event, they were involved in remediation checks and making all the payments and legal work with hackers.

What were your goals for this project?

The goals were to evaluate the security maturity of the product and infrastructure, build a bug bounty process via live hacking event and prove our customers the security level of Prozorro.

SOLUTION

How did you select Hacken?

We were searching for relevant providers for organizing such type of activity and Hacken was the only provider to matching all the requirements in terms of cost, level of service, and legal part.

Describe the project in detail.

We started work with a series of strategic meetings to discuss our goals, scope, and timeline. After that, we assigned appropriate tasks to all project members and stared work. Within 1 week we received preliminary vulnerability assessment report, fixed all the issues

What was the team composition?

The team consisted of project managers from both sides as well as tech teams and security engineers.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We discovered valuable vulnerabilities in our product and received general recommendations how to improve our security, got connected with ethical hackers community for future work.

How effective was the workflow between your team and theirs?

The communication was well built and structured. We met all the deadlines and everything was pretty clear.

What did you find most impressive about this company?

New crowdsourced approach to cybersecurity, their great experience with organizing the cooperation with hackers and deep understanding of Cybersecurity testing.

Are there any areas for improvement?

This was our first experience in running such type of events, and we were completely satisfied.

BACKGROUND

Introduce your business and what you do there.

I’m the CTO of a cryptocurrency exchange with offices in China and Singapore.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Hacken?

The security of our system is always our top priority, and we needed help from a professional in this area.

SOLUTION

What was the scope of their involvement?

Hacken has provided penetration testing for our website as well as our Android and iOS app. They identified issues and ran another round of tests after we made fixes.

They’ve also provided bug reporting, mediation services, and support.

What is the team composition?

Evgenia (Co-Founder & CEO) is my main contact.

How did you come to work with Hacken?

We approached a few companies, and we found Hacken to be the most professional. They had good experience and a strong technical team.

What is the status of this engagement?

We started working with Hacken in March 2020, and it’s ongoing.

They found issues with our security certificates after the retesting, and it took us 3–4 months to obtain new certificates and release the products into production. That extended our timeline.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Hacken has delivered more than we expected. We’re quite satisfied with them.

How did Hacken perform from a project management standpoint?

We have a time zone difference of about six hours, but we’ve managed to communicate effectively. We have regular teleconferences, and they always respond quickly during working hours.

What did you find most impressive about them?

They’re quite professional in the cybersecurity area.

Do you have any advice for future clients of theirs?

So far, so good. I don’t have any specific suggestions.

BACKGROUND

Please describe your company and position.

 I am the Product Officer of a blockchain exchange platform. 

Describe what your company does in a single sentence.

Blockchain Exchange

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Hacken to accomplish?

• for security inspection/testing purposes

SOLUTION

How did you find Hacken?

Referral

Why did you select Hacken over others?

• High ratings
• Referred to me

How many teammates from Hacken were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Perform comprehensive security penetration testing on our systems, followed by remediation of all discovered issues.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Measurable Outcomes、System Stability、Vulnerability Remediation

Describe their project management. Did they deliver items on time? How did they respond to your needs?

All security testing phases were delivered ahead of schedule, with 24/7 support response times averaging under 1 hours for urgent vulnerabilities

What was your primary form of communication with Hacken?

Email or Messaging App

What did you find most impressive or unique about this company?

Their industry-leading security standards, proactive threat detection, and client-centric remediation were impressive.

Are there any areas for improvement or something Hacken could have done differently?

so far so good

BACKGROUND

Please describe your company and position.

I am the CEO of Soda Labs

Describe what your company does in a single sentence.

Developing a cryptographic technology to enable computation on encrypted data, solving on-chain privacy for Web3

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Hacken to accomplish?

• Review our docs and our source code to raise our attention to potential security issues

SOLUTION

How did you find Hacken?

Referral

Why did you select Hacken over others?

• High ratings
• Pricing fit our budget
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Hacken were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Security audit of a new type of blockchain, called gcEVM, which is privacy preserving.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

A detailed report showing a deep dive to our code and understanding our architecture.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Delivery on time and with dedication. High quality. Very responsive, and good communication.

What was your primary form of communication with Hacken?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

They were always available for us, they we're open to process things not necessarily in the strict standard way, which was very convenient for us.

Are there any areas for improvement or something Hacken could have done differently?

Nothing comes to mind. It was a pleasure working with them.

BACKGROUND

Please describe your company and position.

I am the Product Delivery of Mina Foundation

Describe what your company does in a single sentence.

Blckchain Foundation

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Hacken to accomplish?

• Zero Knowledge adoption

SOLUTION

How did you find Hacken?

Online Search

Why did you select Hacken over others?

• High ratings
• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from Hacken were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Security audit of Mina's Attestation Library.

Mina Attestations is a TypeScript library that leverages o1js to implement private attestations:
a cryptographic protocol that allows you to selectively disclose facts about yourself, using
zero-knowledge proofs. It facilitates the issuance of credentials and the creation and
verification of presentations, ensuring attributes can be proven without revealing underlying
data.
The library supports integration with crypto wallets and provides robust security features,
including ownership binding, unforgeability, privacy, unlinkability, and context-binding.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Publish an audit report of findings

Describe their project management. Did they deliver items on time? How did they respond to your needs?

• Super responsive and pro-active in engagement
• Professional tracking and communication around any open issues
• Delivered comprehensive report on time and on budget

What was your primary form of communication with Hacken?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Their  project and audit management tooling was top notch and added a hige amount of clarity to the process.
Their team is extremely helpful, responsive, and excellent to work with

Are there any areas for improvement or something Hacken could have done differently?

Not that I can think of