Hacken

BACKGROUND

Please describe your company and your position there.

Our company is the first DeFi hack mitigation tool for token creators. Our tool freezes fraudulent transactions based on a set of fraud identification parameters and returns stolen funds back to the owner’s account. The creators of tokens need to insert our code into their protocols to mitigate losses. Our stake-based reward system incentivizes the community to develop increasingly efficient hack-spotting mechanisms - the spotter who took action first gets the reward. Our project is aimed at preventing malicious actors from compromising the safety of users and their assets.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

We are a new project in the market. At the beginning of this year, our team realized that there are numerous security risks existing in the industry that could affect our customers, their assets and, thus, our reputation. That is why we decided to look for a reputable security auditor. Based on the feedback made by other market players and the information found on media channels, we decided to choose Hacken as our security auditor since this team was known for working closely with projects operating in the field of DeFi.

SOLUTION

How did you select this vendor and what were the deciding factors?

Our main objective was to reveal security issues that could have been overlooked by our researchers. We realized that our expertise was not strong enough to know any point that could be noticed by malicious actors. We treated cooperation with Hacken as an opportunity to make our product highly secured for clients.

How many resources from the vendor's team worked with you, and what were their positions?

1 representative

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Yes, our expectations were quite high and we are happy to say that the Hacken team could meet them.

How effective was the workflow between your team and theirs?

effective. We did not have any reasons to doubt the high level of professionalism of the Hacken team. We were aware of all activities performed within the framework of our cooperation and the communication process is clear, structured, and customer-centered.

What did you find most impressive or unique about this company?

Long-term vision. Hacken specialists have focused on long-term results instead of delivering solutions that only have immediate effects. They were focused on being a few steps ahead of any malicious actors and we liked it very much.

Are there any areas for improvement or something they could have done differently?

Yes, there are no companies in the market that are excellent. We strongly believe that the Hacken team will find even more methods to make customers feel confident. Hacken is a great company at the core of which are its professionals.

BACKGROUND

Please describe your company and your position there.

P2PB2B is a next-generation cryptocurrency exchange that is focused on serving its users. The platform was founded in 2018 and since then has become a trusted partner of a number of leading crypto projects. The key distinctive feature of the exchange is the ability to process up to 10,000 trades per second and 1,000,000 TCP connections. The exchange supports more than 200 cryptocurrencies as well as fiat money and this figure is likely to increase in the coming years. The company is focused on ensuring the ultimate protection of user’ data and assets and that is why 95% of cryptocurrencies are stored in cold wallets.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

Identification of vulnerabilities via the conduct of a bug bounty program was the main objective for our cooperation. We were interested in detecting such vulnerabilities as remote code execution, server-side request forgery, business logic issues, etc. Apart from detecting major vulnerabilities, we were also interested in identifying even minor bugs that could cause serious business implications.

What were your goals for this project?

Apart from detecting major vulnerabilities, we were also interested in identifying even minor bugs that could cause serious business implications.

SOLUTION

How did you select Hacken?

Although according to the CER rating, we are ranked 12th most Trust Core secure crypto exchanges, we understand that at the time when many leading crypto exchanges experience serious cyberattacks we cannot underestimate the importance of constant strengthening of our resistance to cyber threats. Hacken is a highly reputable brand in the field of cybersecurity consulting whose professionalism is recognized by leading market players. That is why cooperation with Hacken was the most obvious choice for us.

Describe the project in detail.

We conducted a series of strategic calls with the Hacken team to discuss the scope of the project and its details. Hacken specialists clearly articulated the bug bounty program procedure and kept constant contact with us during the program execution.

What was the team composition?

Customer manager and tech team

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Thanks to the bug bounty program on HackenProof Platform, we revealed the vulnerabilities that had not been detected before. As a result, we have successfully addressed the bugs in question before hackers could exploit them to steal users’ assets or private data. The cooperation with the Hacken team has allowed us to sustain our status as one of the most reliable cryptocurrency exchanges in the world.

How effective was the workflow between your team and theirs?

Yes, we are fully satisfied with the cooperation process with Hacken. Hacken specialists strictly obeyed all guidelines and cooperation frameworks developed before the launch of the bug bounty program.

What did you find most impressive about this company?

Reliability, ability to listen to our considerations, and focus on details.

Are there any areas for improvement?

P2PB2B team considers Hacken as a top specialist in the field of cybersecurity and I strongly believe that in the near future this company will only strengthen its status as a highly reputable brand. We are 100% satisfied with the services provided by Hacken.

BACKGROUND

Please describe your company and your position there.

Prozorro is a fully online public procurement platform and a collaboration environment that ensures open access to public procurement (tenders) in Ukraine.

Fully implemented in 2016 as a hybrid (both centralized public and decentralized private marketplaces) system it has since been globally recognized as one of the most innovative public procurement systems delivering government services in a stakeholder-focused, transparent, effective, fair and low-cost way.

Now I am CIO and I was Information Security Lead Prozorro in 2019.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Hacken?

We hired Hacken for organizing a live hacking event for core Prozorro business.

It included preliminary vulnerability assessment, scoping and policy crafting, inviting and selecting hackers, credentials provisioning, technical communication and support of the event as well as triage of the bugs.

After the event, they were involved in remediation checks and making all the payments and legal work with hackers.

What were your goals for this project?

The goals were to evaluate the security maturity of the product and infrastructure, build a bug bounty process via live hacking event and prove our customers the security level of Prozorro.

SOLUTION

How did you select Hacken?

We were searching for relevant providers for organizing such type of activity and Hacken was the only provider to matching all the requirements in terms of cost, level of service, and legal part.

Describe the project in detail.

We started work with a series of strategic meetings to discuss our goals, scope, and timeline. After that, we assigned appropriate tasks to all project members and stared work. Within 1 week we received preliminary vulnerability assessment report, fixed all the issues

What was the team composition?

The team consisted of project managers from both sides as well as tech teams and security engineers.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We discovered valuable vulnerabilities in our product and received general recommendations how to improve our security, got connected with ethical hackers community for future work.

How effective was the workflow between your team and theirs?

The communication was well built and structured. We met all the deadlines and everything was pretty clear.

What did you find most impressive about this company?

New crowdsourced approach to cybersecurity, their great experience with organizing the cooperation with hackers and deep understanding of Cybersecurity testing.

Are there any areas for improvement?

This was our first experience in running such type of events, and we were completely satisfied.