Rob Behnke
March 21st, 2022
Cryptocurrency exchanges, like many blockchain protocols, are highly targeted by malicious actors because these very exchanges house and facilitate the transfer of large amounts of value. In fact, there are over 300 cryptocurrency exchanges trading and transferring billions of dollars daily. Some of the most popular crypto exchanges include Coinbase, Binance, Kraken, Gemini, BlockFi, and Crypto.com. Crypto exchanges interact with blockchain protocols and banking systems, and thus have numerous openings for human error as people typically initiate these transfers and trades.
One of the most notable crypto exchange hacks occurred with Mt. Gox, where well over 800,000 Bitcoins were stolen, and that resulted in the ultimate bankruptcy of the exchange. And in what has become one of the most highly profiled cases in Bitcoin hack history, millions worth of stolen BTC back in 2016 (worth a staggering $3.6B in early 2022), was found in the possession of a young, eccentric New York City couple. Further underscoring the fact that bad actors could be anywhere.
So, in this article, we’ll cover 10 ways cryptocurrency exchanges can improve their safety including asset protection, crypto personnel best practices, avoiding cyber attacks and more.
Crypto companies in many ways are software companies as well as financial companies – so audits in these key areas are strongly encouraged. One of the key ways to lower the inherent risks on a crypto exchange and identify and address potential weaknesses in its systems, is through System and Organization Controls (SOC) reports.
SOC-1 audits are focused on what’s known as ICFR or internal controls related to financial reporting, and this helps detect and address any risks and ensures that the crypto exchanges services will not negatively impact an exchange user’s finances. Additionally, SOC-2 audits highlight issues related to IT security.
Being that crypto exchanges develop their own software and applications, secure code scanning is another important method of cybersecurity to consider. Secure code scanning is used to help discover exploits in application security and it can come in a number of forms including:
Secure code scanning tools that are widely available including those from the likes of OWASP (Open Web Application Security Project), GitHub, Checkmarx and more.
Penetration tests (or pen tests) are used to realistically simulate the thinking, tactics, tools and techniques used by actual hackers, in order to identify and fix as many holes as possible within an organization’s defenses.
Pen tests typically begin with the testers doing a reconnaissance on the targeted organization, then the team will develop a plan of attack based on that information. Once the test is carried out, a report is generated that details the steps that were taken to carry out the attack and any critical security findings. Then recommendations for improving the security of the target system are compiled and given to the organization’s security team.
People often confuse penetration testing with other security methods including code reviews, vulnerability, and red teaming, which we’ll cover next.
Major cryptocurrency exchanges have top-tier security teams that rigorously test their products and services, and one of these teams is the red team.
Like penetration testing, red teaming takes a proactive approach to security, but with a more sophisticated approach. Red teams are focused on breaching an organization’s security from the outside, and they are often tasked with getting through the defenses of what’s known as the blue team, who are tasked with defending an organization.
The red team often focus on three attack vectors that cyber criminals target:
1) Cyber – which includes things like ransomware
2) Human – whis is an often overlooked area of weakness within an organization, as humans have often been right in the middle of large scale crypto exchange hacks
3) Physical attack vectors – which include safes, desks, buildings and more
One of the most important keys to crypto exchange security is how the assets managed by the exchange are stored and secured. Here are some key methods to consider:
Sometimes the biggest threat to an organization that deals with crypto assets and system information isn’t an external cyber criminal, or a bug inside of an application’s code – it’s the people inside of the organization.
That’s why it’s highly advised to have systems and processes in place to help prevent insider threats. Mitigating insider security threats in a crypto exchange can include, among other things:
Crypto exchange users, including individuals and investors, are the lifeblood of the business. So it pays to ensure users are as educated as possible on common mistakes, scams, and cyber attacks.
For instance, we covered a phishing attack that targeted Coinbase users in this previous article. Also, companies like Gemini, Kraken and Binance all have a plethora of education materials on how to be a safe user of their exchange services, and it’s highly encouraged to always keep users fully aware of new attack vectors that surface which can directly affect them as well.
Bug bounties are a great way to incentivize ethical hackers to find vulnerabilities within the cybersecurity of an organization. They can also be an effective way to find security talent that truly understands the complexities of cybersecurity.
Conversely, it’s also worthwhile, as a crypto exchange, to disclose security vulnerabilities in hardware devices like wallets, applications, and other platforms to the appropriate organization. In fact, taking a proactive approach to find those vulnerabilities helps make the entire crypto ecosystem more secure.
Each jurisdiction a crypto exchange operates in will have specific legal and regulatory requirements, so acquiring the right licenses, and registering as a money business and crypto exchange where necessary will ensure the operation stays compliant and that users’ assets are not put at jeopardy.
The tactics of cyber criminals are ever evolving, while the value of crypto assets exchanges manage will likely grow as crypto gains more adoption. This means that hackers will continue to target crypto exchanges and use more advanced methods of breaching systems that house valuable assets and information, including yours. One of the best ways to ensure the security of a crypto exchange is to partner with an elite blockchain cybersecurity firm like Halborn. For more information on how we can keep your crypto exchange safe, reach out to our blockchain security experts at halborn@protonmail.com.