Monthly Crypto Exchange Updates: February 2025
This month’s updates bring exciting new additions, improvements in security measures, and some unfortunate drops in rankings due to expired certifications. Here’s a detailed breakdown of the changes for February 2025.
New Listings
Two new exchanges joined the CER.live rankings this month, with one achieving a historic milestone:
- Bumba: Entered with a perfect score of 100/100, becoming the first exchange to receive 3 stars and a flawless rating upon listing. This is a remarkable achievement that sets a new standard for cybersecurity excellence.
- LeveX: Scored 40/100 as a new listing. While it’s a promising start, there’s room for improvement in its security posture.
Exchanges Demonstrating Progress
Several exchanges made strides in improving their cybersecurity measures:
- Toobit: Increased by 12.5 points, reaching a total score of 64/100, after providing a partial penetration test.
- ZebPay: Gained 6.2 points, now scoring 40/100, after providing a partial penetration test.
- Bitpanda: Improved by 1.8 points, achieving a score of 55/100, by implementing a withdrawal whitelist feature.
We should comment on partial penetration tests. While this is a step forward, only some parts of their systems were covered in the pentest, leaving both room for further improvement for exchanges and room for a hack by black hat hackers.
Certification changes
- Gate.io: Maintained its high score of 88/100 but lost a certification for Proof of Reserves audit as the last time they were audited more than 1 year ago.
Exchanges Losing Ground
Unfortunately, several exchanges saw their scores drop this month due to lapses in maintaining critical certifications or other security measures:
- EXZi and Tidex: Dropped by 25 points, reducing its score to 20/100 and 14/100, respectively, due to closing their bug bounty programs.
- Tothemoon, Coinstore, CoinEx and Tokenize: Lost 25 points each, as their penetration tests expired. Thie current scores 51/100, 55/100, 50/100, and 60/100, respectively.
In the ever-evolving IT environment, it is critical to conduct penetration tests at least once a year to minimize the risks of breaches that cost the industry hundreds of millions of dollars.
Final Thoughts
This month’s updates highlight the importance of maintaining rigorous cybersecurity standards and certifications to ensure user safety and trust. The standout performance from Bumba demonstrates what is possible when exchanges prioritize security from the outset, while others like Toobit and ZebPay show progress through incremental improvements.
On the other hand, exchanges like EXZi, Coinstore, CoinEx, and Tidex serve as reminders that lapses in certifications or security programs can significantly impact rankings and user confidence.
For more details on the rankings, please visit our Exchanges Cybersecurity Ranking page.
