TL;DR Key takeaways
TL;DR
- Hacken's penetration test of FinchTrade Web and API systems (Nov 28, 2023 to Jan 17, 2024) rated overall risk LOW.
- Hacken used PTES and OWASP frameworks in a gray box assessment, noting MFA, containerized microservices, and robust transaction validation.
- The report acknowledged testing limitations, and FinchTrade’s IT team remediated identified vulnerabilities, yielding the LOW overall risk level.
- Stakeholders should review the full Hacken report, remediation details, and scope to independently confirm FinchTrade's LOW risk claim and limitations.
We are thrilled to announce that FinchTrade has successfully completed a comprehensive penetration test conducted by Hacken on our Web and API systems. The test, which took place from November 28th, 2023, to January 17th, 2024, highlights FinchTrade’s digital platform’s low-risk status.
The Hacken.io team, employing top-tier cybersecurity methodologies including PTES and OWASP, meticulously assessed our systems. The process involved gray box security assessment and a detailed risk analysis, aligning with the highest standards in cybersecurity practices.
Key Highlights
- Robust Availability: FinchTrade’s use of containers and microservices enhances system resilience and scalability.
- Strong User Security: The platform’s Multi-Factor Authentication (MFA) significantly boosts the protection of user accounts.
- Effective Transaction Validation: The robust process for transaction validation ensures integrity and security.
- Comprehensive Verification Process: Utilization of shared documents for validation highlights a thorough approach to verification.
While the test inherently had its limitations, it’s important to note that our IT team has effectively addressed and resolved the specific vulnerabilities identified, thus, getting the overall risk level at LOW.
Yuri Berg, a Board Member at FinchTrade, stated, “Hacken’s penetration test is a significant milestone for us. It not only confirms our robust security posture but also guides our ongoing commitment to safeguarding our digital ecosystem.”
Dyma Budorin, Co-Founder & CEO at Hacken, comments, “Our collaboration with FinchTrade is a testament to Hacken’s commitment to enhancing digital asset trading security. By conducting rigorous penetration tests, we help platforms like FinchTrade identify and mitigate potential risks, ensuring a secure and trustworthy environment for their clients.”
This successful assessment positions FinchTrade as a secure and reliable partner in the digital asset market, emphasizing our commitment to maintaining a trustworthy trading environment. For more details about FinchTrade’s security initiatives, please check this page.
About Hacken
Hacken is a leading cybersecurity consulting firm specializing in blockchain security, known for its comprehensive approach to protecting digital assets.
For requesting more information about how we can help reach out to us. We're here to help and answer any questions you may have.
