Hacken

BACKGROUND

Please describe your company and your position there.

Our company is the first DeFi hack mitigation tool for token creators. Our tool freezes fraudulent transactions based on a set of fraud identification parameters and returns stolen funds back to the owner’s account. The creators of tokens need to insert our code into their protocols to mitigate losses. Our stake-based reward system incentivizes the community to develop increasingly efficient hack-spotting mechanisms - the spotter who took action first gets the reward. Our project is aimed at preventing malicious actors from compromising the safety of users and their assets.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

We are a new project in the market. At the beginning of this year, our team realized that there are numerous security risks existing in the industry that could affect our customers, their assets and, thus, our reputation. That is why we decided to look for a reputable security auditor. Based on the feedback made by other market players and the information found on media channels, we decided to choose Hacken as our security auditor since this team was known for working closely with projects operating in the field of DeFi.

SOLUTION

How did you select this vendor and what were the deciding factors?

Our main objective was to reveal security issues that could have been overlooked by our researchers. We realized that our expertise was not strong enough to know any point that could be noticed by malicious actors. We treated cooperation with Hacken as an opportunity to make our product highly secured for clients.

How many resources from the vendor's team worked with you, and what were their positions?

1 representative

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Yes, our expectations were quite high and we are happy to say that the Hacken team could meet them.

How effective was the workflow between your team and theirs?

effective. We did not have any reasons to doubt the high level of professionalism of the Hacken team. We were aware of all activities performed within the framework of our cooperation and the communication process is clear, structured, and customer-centered.

What did you find most impressive or unique about this company?

Long-term vision. Hacken specialists have focused on long-term results instead of delivering solutions that only have immediate effects. They were focused on being a few steps ahead of any malicious actors and we liked it very much.

Are there any areas for improvement or something they could have done differently?

Yes, there are no companies in the market that are excellent. We strongly believe that the Hacken team will find even more methods to make customers feel confident. Hacken is a great company at the core of which are its professionals.

BACKGROUND

Please describe your company and your position there.

Remitano is the company acting as the escrowed P2P Bitcoin marketplace. We allow people to safely buy/sell Bitcoin while paying as low fees as possible and all in a very convenient way. Our team supports customers 24/7 to ensure that they get the highest quality service. We are serving customers from Vietnam, Nigeria, Kenya, Cambodia, and many other countries. We have already served 1.5M+ customers and are focused on expanding our presence in the industry.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

We have experienced significant market growth for the last few months. We have realized that the more clients we serve and the more assets we handle, the higher the risks that malicious actors will try to attack us. That is why in April this year our leaders decided that it was high time to start cooperating with a reputable security vendor. We had a few companies to choose from but based on market reviews and feedback received from our partners we decided to start working with the Hacken team.

We strived to make our product resistant to the digital threats existing in the industry while preparing the ground for addressing future security risks. Our main goal is to make customers realize that their assets are in safety. Thereby we can win their trust and loyalty. Also, by cooperating with Hacken we want to show our partners that security is a top priority for us.

SOLUTION

How did you select this vendor and what were the deciding factors?

We got references from our other partner and we also searched more similar firms in the industry and compare the service packages, price, repuation...

Describe the project in detail and walk through the stages of the project.

They performed a thorough security audit of our website and web apps, identifying potential risks in our infrastructure.

How many resources from the vendor's team worked with you, and what were their positions?

I'm not quite about the number of team members involved in the project but the team has performed well, timely, they have project leader to coordinate the project and some pentetration testers to perform.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Hacken team performed the penetration testing for our project and upon detecting security flaws they instructed us on how to eliminate all these issues so that to leave hackers no chance to compromise our systems.

How effective was the workflow between your team and theirs?

The communication process between us and Hacken team fully met our expectations and, generally, was very effective. All information provided by Hacken specialists was structured, detailed, and up-to-date. Also, these guys were in constant contact with us when we needed their assistance such as recommendations or instructions. Based on our communication experience, we can say that Their team was not only composed of highly skilled researchers and experts but also great communicators.

What did you find most impressive or unique about this company?

The straightforward cooperation process. This team provided us only the required information and did not overburden us with details that could not bring any value to us or cause misunderstanding.

Are there any areas for improvement or something they could have done differently?

Of course, every company has room for improvement. Hacken experts have fully met our expectations but we are sure that their potential is tremendous. This team can become a cybersecurity guru on a global scale and we wish these guys to achieve their targets. It’s a great pleasure for us to cooperate with this company.

BACKGROUND

Please describe your company and your position there.

Biki is a global blockchain technology service provider and one of the top-20 cryptocurrency exchanges on CoinMarketCap. The users of the exchange can trade more than 150 cryptocurrencies and 250 trading pairs. Biki serves more than 3 million users worldwide and is focused on making their trading experience as convenient and safe as possible.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

We realized that the frequency of cyberattacks against major cryptocurrency exchanges increased dramatically in the previous year. Hacken is a leading cybersecurity expert with deep expertise in web application security assessment whose professionalism is recognized in the market.

What were your goals for this project?

Hacken performed the web application & API security assessment. Hacken carried out vulnerability scanning to identify the application’s security weaknesses. Hacken has checked the system configuration and whether the required patches were installed to ensure the security of the system. The company’s specialists investigated web applications, customer scripts, and programs to find any loopholes. Based on the results of the testing, Hacken provided a list of identified vulnerabilities and the recommendation by implementing which Biki would strengthen its security.

SOLUTION

How did you select Hacken?

We realized that the frequency of cyberattacks against major cryptocurrency exchanges increased dramatically in the previous year. Hacken is a leading cybersecurity expert with deep expertise in web application security assessment whose professionalism is recognized in the market.

Describe the project in detail.

We have conducted a few strategic calls with the Hacken team to discuss the goals of our cooperation, its scope, and the required timeline. Based on the information received Hacken team distributed tasks among its members and started testing our product.

What was the team composition?

The team working on the security assessment of the exchange encompassed the Hacken project manager and two penetration testers who were in constant contact with our specialists. Hacken team performed the security assessment within 10 days.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Based on the results of the web application & API security assessment, Hacken specialists determined that the level of risks for Biki was low. The cooperation with Hacken has allowed us to identify and eliminate system vulnerabilities that may have been exploited by hackers to commit cyberattacks.

How effective was the workflow between your team and theirs?

The cooperation process was highly effective since our team was open to any suggestions and recommendations made by Hacken specialists while security engineers of Hacken immediately informed us of any updates and progress.

What did you find most impressive about this company?

Structured and highly professional approach to security testing and focus on communication with the customer so that Hacken did not miss any details when performing security assessment

Are there any areas for improvement?

I strongly believe that Hacken specialists provided the services of the highest quality and I do not have any complaints about the company’s work. Hacken team has confirmed its high level of professionalism in practice!

BACKGROUND

Please describe your company and your position there.

XT.com is the first socialized digital asset-trading platform that was created in 2018. There are more than 7,000,000 users in our ecosystem while 2,000,000 users are registered. The list of services provided by XT.com includes OTC trading, contract trading, margin trading, exchange trading, and other services. The exchange allows users to perform trades in more than 100 currencies and there are more than 300 trading pairs on the platform.

The company has operation centres in Japan, South Korea, Spain, Singapore, and other countries. The list of our partners includes many leading and highly reputable brands such as CoinGecko, Coinhills, Xangle, and others.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

Cybersercurity

What were your goals for this project?

We want to make our exchange more safe .

SOLUTION

How did you select Hacken?

It was recommend by friends in crypto industry

Describe the project in detail.

In 2020, we started cooperating with Hacken to strengthen our cybersecurity. We realized that the higher the volumes of assets and information the platform accumulated, the more lucrative it became for hackers. We decided to work with Hacken on making our platform secure for users since this company had deep market expertise and other highly reputable brands were leaving positive feedback about the quality of services provided by Hacken. It was a great honour for us to appoint Hacken as our cybersecurity expert.

What was the team composition?

We were focused mainly on protecting users’ funds and information from the risk of being stolen by criminal groups through cyberattacks. We strived to make the trading experience of our users more secure so that they would be able to focus solely on trading instead of worrying about security risks.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The Hacken team performed external penetration testing for a web application and an Android app. Hacken specialists reviewed our internal policies governing crypto exchange cybersecurity. The company provided us with a report containing the list of identified vulnerabilities and recommendations on fixing them.

How effective was the workflow between your team and theirs?

The communication process between our team and Hacken specialists was clear and very transparent. We saw that Hacken had deep experience in establishing effective communication with clients and, generally, Hacken did not even give us a chance to feel frustrated since we were immediately informed about progress. Also, the Hacken team actively communicated with our management and invited our CEO, Weber Woo, to attend Hacken online AMA session.

What did you find most impressive about this company?

The company’s open-mindedness and cooperative spirit. Also, I cannot but mention the company’s strong attention to customer’s concerns.

Are there any areas for improvement?

XT.com team strongly believes that even the most professional and successful companies have room for further improvement. That is why we wish Hacken to continue making the crypto world community better protected from security risks.

BACKGROUND

Please describe your company and your position there.

P2PB2B is a next-generation cryptocurrency exchange that is focused on serving its users. The platform was founded in 2018 and since then has become a trusted partner of a number of leading crypto projects. The key distinctive feature of the exchange is the ability to process up to 10,000 trades per second and 1,000,000 TCP connections. The exchange supports more than 200 cryptocurrencies as well as fiat money and this figure is likely to increase in the coming years. The company is focused on ensuring the ultimate protection of user’ data and assets and that is why 95% of cryptocurrencies are stored in cold wallets.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

Identification of vulnerabilities via the conduct of a bug bounty program was the main objective for our cooperation. We were interested in detecting such vulnerabilities as remote code execution, server-side request forgery, business logic issues, etc. Apart from detecting major vulnerabilities, we were also interested in identifying even minor bugs that could cause serious business implications.

What were your goals for this project?

Apart from detecting major vulnerabilities, we were also interested in identifying even minor bugs that could cause serious business implications.

SOLUTION

How did you select Hacken?

Although according to the CER rating, we are ranked 12th most Trust Core secure crypto exchanges, we understand that at the time when many leading crypto exchanges experience serious cyberattacks we cannot underestimate the importance of constant strengthening of our resistance to cyber threats. Hacken is a highly reputable brand in the field of cybersecurity consulting whose professionalism is recognized by leading market players. That is why cooperation with Hacken was the most obvious choice for us.

Describe the project in detail.

We conducted a series of strategic calls with the Hacken team to discuss the scope of the project and its details. Hacken specialists clearly articulated the bug bounty program procedure and kept constant contact with us during the program execution.

What was the team composition?

Customer manager and tech team

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Thanks to the bug bounty program on HackenProof Platform, we revealed the vulnerabilities that had not been detected before. As a result, we have successfully addressed the bugs in question before hackers could exploit them to steal users’ assets or private data. The cooperation with the Hacken team has allowed us to sustain our status as one of the most reliable cryptocurrency exchanges in the world.

How effective was the workflow between your team and theirs?

Yes, we are fully satisfied with the cooperation process with Hacken. Hacken specialists strictly obeyed all guidelines and cooperation frameworks developed before the launch of the bug bounty program.

What did you find most impressive about this company?

Reliability, ability to listen to our considerations, and focus on details.

Are there any areas for improvement?

P2PB2B team considers Hacken as a top specialist in the field of cybersecurity and I strongly believe that in the near future this company will only strengthen its status as a highly reputable brand. We are 100% satisfied with the services provided by Hacken.

BACKGROUND

Please describe your company and your position there.

Kuna.io is the first public cryptocurrency exchange in Ukraine and the CIS countries. The exchange serves over 150,000 users whose accounts are backed by real funds. Sam Kaploushenko, CEO

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

We decided to cooperate with Haсken since this company had strong expertise and reputation in the field of cybersecurity in the crypto industry. Thus, the choice was obvious.

What were your goals for this project?

The assessment of the security capabilities of our product and infrastructure constituted the main goal for the project. Haсken perfectly imitated hacker attacks and enabled us to evaluate the risks and fix all identified vulnerabilities.

SOLUTION

How did you select Hacken?

We were looking for a reputable cybersecurity company to conduct this type of testing and Hacken was the only provider that met all the requirements of cost, quality, expertise, and legal status.

Describe the project in detail.

Initially, we held strategic meetings to discuss the project’s goals, scope, and timeline. Then, the tasks were assigned to project participants. In 2 weeks, we received a preliminary report on the assessment of vulnerabilities and the associated risks.

What was the team composition?

The team encompassed project managers from both sides, the technical team from our side, and the security engineers from the side of Haсken.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We identified vulnerabilities in our product and based on the received recommendations implemented measures to improve our security.

How effective was the workflow between your team and theirs?

The communication was well organized and structured. They met all the deadlines, and the process was very clear.

What did you find most impressive about this company?

Unique approach to cybersecurity, broad experience in organizing collaboration with hackers, and deep understanding of cybersecurity testing.

Are there any areas for improvement?

Nothing on top of my mind.

BACKGROUND

Introduce your business and what you do there.

I’m the head of security of a cryptocurrency platform.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Hacken?

We needed someone to help us with security audit testing.

SOLUTION

What was the scope of their involvement?

Hacken provided a security audit and penetration testing for our company. They prepared the report for us with the results of the penetration testing, as well.

What is the team composition?

There were about four people that I interacted with. I worked with the security team, including the project manager.

How did you come to work with Hacken?

I met them at a security conference. We started communicating and when we had a need for penetration testing and a security audit, we hired them.

How much have you invested in them?

We spent around $13,000.

What is the status of this engagement?

We worked with them from August–September 2020. The project only took about one month.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

After they did the penetration testing and security audit, they found a few vulnerabilities. In my opinion, I’d say they were almost perfect. Everything in the project went perfectly and I was satisfied.

How did Hacken perform from a project management standpoint?

Hacken performed well in regard to project management. We communicated through email and messenger.

What did you find most impressive about them?

I was impressed by how quickly they did all of the testing. When we’d worked with other companies, it took about three months, but with Hacken, it was done within one month. We checked their quality and it was good. 

Are there any areas they could improve?

No, everything was good. 

BACKGROUND

Please describe your company and your position there.

Narkasa is a cryptocurrency exchange market based in Turkey. As part of my job, I follow the live operations of Narkasa systems, and analyze the necessary quality improvements with my team. In addition, I manage our corporate relations

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

We worked with Hacken on detailed exchange security penetration tests they were experts in.

What were your goals for this project?

As required by our processes, we carried out our security tests one by one and noticed that the deficiencies in the reports were reduced at each stage. In the test report we made with hacken, the tests and results that were not performed in other tests made us happy and helped us to improve our systems.

SOLUTION

How did you select Hacken?

Hacken was a company we had been following for a long time and we appreciated their work. For this reason, we contacted them. Thanks for their close interest.

Describe the project in detail.

Within the scope of the project, security tests were carried out on the Narkasa website and integration with over 30 test phases. Among them, there were general standard tests as well as exchange specific tests.

What was the team composition?

For this project, we had to work and talk with different technical and administrative teams on the Hacken side.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

After the test report, we made significant improvements to our systems and these changes were checked again.

How effective was the workflow between your team and theirs?

We had the opportunity to work with Hacken team 24/7 throughout the project. We had detailed interviews on their recommendations.

What did you find most impressive about this company?

During the process, they adapted to our timeline and adhered to our requests.

Are there any areas for improvement?

No

BACKGROUND

Please describe your company and your position there.

Prozorro is a fully online public procurement platform and a collaboration environment that ensures open access to public procurement (tenders) in Ukraine.

Fully implemented in 2016 as a hybrid (both centralized public and decentralized private marketplaces) system it has since been globally recognized as one of the most innovative public procurement systems delivering government services in a stakeholder-focused, transparent, effective, fair and low-cost way.

Now I am CIO and I was Information Security Lead Prozorro in 2019.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

We hired Hacken for organizing a live hacking event for core Prozorro business.

It included preliminary vulnerability assessment, scoping and policy crafting, inviting and selecting hackers, credentials provisioning, technical communication and support of the event as well as triage of the bugs.

After the event, they were involved in remediation checks and making all the payments and legal work with hackers.

What were your goals for this project?

The goals were to evaluate the security maturity of the product and infrastructure, build a bug bounty process via live hacking event and prove our customers the security level of Prozorro.

SOLUTION

How did you select Hacken?

We were searching for relevant providers for organizing such type of activity and Hacken was the only provider to matching all the requirements in terms of cost, level of service, and legal part.

Describe the project in detail.

We started work with a series of strategic meetings to discuss our goals, scope, and timeline. After that, we assigned appropriate tasks to all project members and stared work. Within 1 week we received preliminary vulnerability assessment report, fixed all the issues

What was the team composition?

The team consisted of project managers from both sides as well as tech teams and security engineers.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We discovered valuable vulnerabilities in our product and received general recommendations how to improve our security, got connected with ethical hackers community for future work.

How effective was the workflow between your team and theirs?

The communication was well built and structured. We met all the deadlines and everything was pretty clear.

What did you find most impressive about this company?

New crowdsourced approach to cybersecurity, their great experience with organizing the cooperation with hackers and deep understanding of Cybersecurity testing.

Are there any areas for improvement?

This was our first experience in running such type of events, and we were completely satisfied.

BACKGROUND

Introduce your business and what you do there.

I’m the CTO of a cryptocurrency exchange with offices in China and Singapore.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Hacken?

The security of our system is always our top priority, and we needed help from a professional in this area.

SOLUTION

What was the scope of their involvement?

Hacken has provided penetration testing for our website as well as our Android and iOS app. They identified issues and ran another round of tests after we made fixes.

They’ve also provided bug reporting, mediation services, and support.

What is the team composition?

Evgenia (Co-Founder & CEO) is my main contact.

How did you come to work with Hacken?

We approached a few companies, and we found Hacken to be the most professional. They had good experience and a strong technical team.

What is the status of this engagement?

We started working with Hacken in March 2020, and it’s ongoing.

They found issues with our security certificates after the retesting, and it took us 3–4 months to obtain new certificates and release the products into production. That extended our timeline.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Hacken has delivered more than we expected. We’re quite satisfied with them.

How did Hacken perform from a project management standpoint?

We have a time zone difference of about six hours, but we’ve managed to communicate effectively. We have regular teleconferences, and they always respond quickly during working hours.

What did you find most impressive about them?

They’re quite professional in the cybersecurity area.

Do you have any advice for future clients of theirs?

So far, so good. I don’t have any specific suggestions.