🇺🇦 Hacken was born in Ukraine, and we stand with all Ukrainians in our fight for freedom!

🇺🇦 Hacken stands with Ukraine!

Learn more
bg

Web, Android and iOS Pentesting for FTX by Hacken

Web, Android and iOS Pentesting for FTX by Hacken

Published: 9 Mar 2021 Updated: 19 Oct 2022

Recently, the world has observed a number of cyberattacks on currency exchanges and financial companies aimed at stealing secured data and money. One of the biggest attacks was performed in September 2020. The North Korean group of hackers Lazarus Group attacked the cryptocurrency exchange KuCoin and the value of stolen cryptocurrency assets equalled $275 million USD. The stolen assets were sent to so-called “mixers” that mixed them into various accounts so that the tracking of funds became almost impossible. The risk of further attacks performed by North Korean hackers remains extremely high.

FTX is a security-oriented company that has prioritized the protection of customers from cyberattacks aimed at stealing crypto assets. To this end, FTX has contacted Hacken and ordered Web, Android, and iOS pentesting.

The Hacken Web Application Penetration Testing for FTX

The process of web application penetration testing for the web-based application security assessments performed by Hacken has the following algorithm. Firstly, we gather the information and check the effectiveness of security policies. Then we proceed to identifying the most vulnerable elements to attacks and identify the loopholes that can cause data theft. Finally, we create a report.

Hacken has been testing the FTX web-based application applying the Man-In-The-Middle (MITM) tool providing for the hacker’s infiltration into a private network by impersonating a rogue access point and acquiring login credentials.

Upon receiving the results of the test, Hacken has created a report containing all identified vulnerabilities and recommendations on fixing them. FTX has promptly addressed all mentioned issues by considering Hacken’s advice.

The Hacken Android and iOS Penetration Testings for FTX

The Hacken Android and iOS app penetration testings are aimed at analyzing the security of the Android and iOS versions of applications installed on the device. 

The process of testing the applications handling sensitive information such as financial transactions data requires the company to meet industry standards such as the Payment Card Industry Data Security Standard (PCI DSS) and OWASP Mobile Security Testing Guide. 

FTX has ordered a pentest to identify any weaknesses that may cause unintentional disclosure of information and allow hackers to carry out further attacks on the application, device, or interconnected infrastructure. This info includes account identification data that, if disclosed, would enable a brute-force attack on the application access controls, etc.

About FTX

FTX is a cryptocurrency exchange developed by traders for traders. FTX represents innovative products, including industry-first derivatives, options, volatility products, and leveraged tokens. The company actively develops a platform for both professional trading firms and first-time users. With FTX, trading becomes more convenient: the site’s intuitive interface allows clients to navigate easily from the same beginning.

The main goal of founding FTX has been to donate the world’s most effective charities. FTX, its affiliates, and employees have donated over $10m to save lives, prevent suffering, and create a brighter future.

share via social

Subscribe to our research

Enter your email address to subscribe to Hacken Research and receive notifications of new posts by email

Interested in getting to know whether your systems are vulnerable to cyberattacks?

Tell us about your project

  • This field is required
  • This field is required
    • telegram icon Telegram
    • whatsapp icon WhatsApp
    • wechat icon WeChat
    • signal icon Signal
  • This field is required
  • This field is required
This field is required
departure icon

Thank you for your request

Get security score on

  • certified logo
  • coingeco logo
  • coin market cap logo

1,200+ Audited Projects

companies logos

Apply for partnership

  • This field is required
  • This field is required
  • This field is required
  • This field is required
    • Foundation
    • VC
    • Angel investments
    • IDO or IEO platform
    • Protocol
    • Blockchain
    • Legal
    • Insurance
    • Development
    • Marketing
    • Influencer
    • Other
This field is required
This field is required
departure icon

Thank you for your request

Get security score on

  • certified logo
  • coingeco logo
  • coin market cap logo

1,200+ Audited Projects

companies logos

Get in touch

  • This field is required
  • This field is required
  • This field is required
  • This field is required
This field is required
By submitting this form you agree to the Privacy Policy and information beeing used to contact you
departure icon

Thank you for your request

Get security score on

  • certified logo
  • coingeco logo
  • coin market cap logo