Security Consulting & Reports

Taking proactive steps to ensure security, to prevent a loss of funds in the first place, is always both cheaper and far more effective than taking action after a hack, theft, or breach has occurred. 

Unfortunately, blockchain companies, whether an exchange, investment/trading firm, OTC trading desk, liquidity service, payment provider, as well as other types of custodial services, all tend to think they’re far more safe and secure than they actually are until it’s too late.

The hacks and thefts you hear about in the news only represent a small sliver of the major hacks that result in considerable cryptocurrency losses. Hacking of cryptocurrency businesses is extremely financially lucrative. The best defence is taking proactive action to prevent such a breach from occurring in the first place by conducting a professional security audit.

Our scope of work in these audits often includes:

• API Key management, procedures, & security
• Tiered access policies, segregation, accessibility, & account management practices
• Credential-related security & procedures, including recovery options
• Wallet setup procedures, storage practices & accessibility
• Review of procedures involving the movement of cryptocurrency between wallets
• Account-related security concerns of services utilized
• Risk assessment of services utilized e.g. exchange insolvency or enforcement action risk
• Social engineering susceptibility
• Red teaming to demonstrate how an organization would fare against a real-life adversary