Product OTC liquidity Cross-border payments Solutions Payment service provider OTC desks EMI / Bank API docs Referrals About Blog
TL;DR
We are thrilled to announce that FinchTrade has successfully completed a comprehensive penetration test conducted by Hacken on our Web and API systems. The test, which took place from November 28th, 2023, to January 17th, 2024, highlights FinchTrade’s digital platform’s low-risk status.
The Hacken.io team, employing top-tier cybersecurity methodologies including PTES and OWASP, meticulously assessed our systems. The process involved gray box security assessment and a detailed risk analysis, aligning with the highest standards in cybersecurity practices.
While the test inherently had its limitations, it’s important to note that our IT team has effectively addressed and resolved the specific vulnerabilities identified, thus, getting the overall risk level at LOW.
Yuri Berg, a Board Member at FinchTrade, stated, “Hacken’s penetration test is a significant milestone for us. It not only confirms our robust security posture but also guides our ongoing commitment to safeguarding our digital ecosystem.”
Dyma Budorin, Co-Founder & CEO at Hacken, comments, “Our collaboration with FinchTrade is a testament to Hacken’s commitment to enhancing digital asset trading security. By conducting rigorous penetration tests, we help platforms like FinchTrade identify and mitigate potential risks, ensuring a secure and trustworthy environment for their clients.”
This successful assessment positions FinchTrade as a secure and reliable partner in the digital asset market, emphasizing our commitment to maintaining a trustworthy trading environment. For more details about FinchTrade’s security initiatives, please check this page.
About Hacken
Hacken is a leading cybersecurity consulting firm specializing in blockchain security, known for its comprehensive approach to protecting digital assets.
For requesting more information about how we can help reach out to us. We're here to help and answer any questions you may have.
Hacken conducted a comprehensive penetration test of FinchTrade’s Web and API systems from November 28, 2023 to January 17, 2024 and classified the platform’s overall risk level as LOW. Specific vulnerabilities identified during the assessment were effectively addressed and resolved by FinchTrade’s IT team.
Hacken used established cybersecurity methodologies, including PTES and OWASP, performing a gray box security assessment and a detailed risk analysis on FinchTrade’s Web and API systems. Their process evaluated system components and produced a risk-based report that informed mitigation by FinchTrade’s IT team.
The assessment highlights several security aspects: Multi-Factor Authentication (MFA) for user accounts, robust transaction validation processes, a comprehensive verification workflow using shared documents, and infrastructure resilience through containers and microservices. These elements contributed to Hacken’s low-risk classification.
The report notes that the penetration test inherently had limitations, and it identified specific vulnerabilities. FinchTrade’s IT team has effectively addressed and resolved those identified issues, and the overall risk level was reported as LOW following remediation.
Following Hacken’s findings, FinchTrade’s IT team addressed and resolved the specific vulnerabilities identified in the Web and API assessment. The platform maintains measures cited in the report—MFA, transaction validation, verification processes, and containerized microservices—to support ongoing resilience and security.
Understand MiCA regulation’s impact on crypto OTC trading, with steps for licensing, disclosure, AML, and stablecoin rules to achieve compliance.
Liquidity drives efficient mass payouts in fiat and crypto, enabling providers to cut costs, speed cross-border disbursements, and scale reliably.
A single gateway to liquidity with competitive prices, fast settlements, and lightning-fast issue resolution
Get started
Our services are not available to retail clients residing in, or corporate clients registered or established in, the United Kingdom, the United States, the European Union, or other restricted jurisdictions. Access to this website does not constitute an offer or solicitation to provide services in these jurisdictions.
The obtained data is processed in accordance with our Privacy policy
Our services are not available to retail clients residing in, or corporate clients registered or established in, the United Kingdom, the United States, the European Union, or other restricted jurisdictions. Access to this website does not constitute an offer or solicitation to provide services in these jurisdictions.
The obtained data is processed in accordance with our Privacy policy
Schedule a 15-min demo to get familiar with FinchTrade and start trading
Thank you for your interest in FinchTrade!
We will contact you soon
An error has occurred. Please try again later or contact customer support for assistance.
Our services are not available to retail clients residing in, or corporate clients registered or established in, the United Kingdom, the United States, the European Union, or other restricted jurisdictions. Access to this website does not constitute an offer or solicitation to provide services in these jurisdictions.
The obtained data is processed in accordance with our Privacy policy
Our services are not available to retail clients residing in, or corporate clients registered or established in, the United Kingdom, the United States, the European Union, or other restricted jurisdictions. The information provided on this website is for informational purposes only and does not constitute a public offer, financial or investment advice, or marketing communication. FinchTrade group is not MiCAR compliant, nor FCA regulated, and nothing on this website should be construed as an offer to provide regulated services or financial instruments. Visitors are encouraged to seek independent legal, financial, or professional advice before making any decisions based on the information presented. FinchTrade group assumes no liability for any actions taken in reliance on the content of this website.