CoinGecko, a globally recognized crypto data aggregator platform, has announced the migration of cybersecurity component of its Trust Score for centralized exchanges (CEXs) from CER.live to CORE3, the risk infrastructure layer Hacken for digital assets. The recent update covers 166 exchanges and introduces an advanced assessment of emerging risks while keeping score changes limited to no more than two percentage points.
CoinGecko’s exchange cybersecurity score is based on CER.live’s framework for over the six years now. The shift to CORE3 ultimately enables the evaluation of potential risks before they convert into actual losses. Users on CoinGecko will keep on to view an exchange’s cybersecurity rating along with the key indicators, including whether the platform has completed penetration testing, maintains a live bug bounty program, and has undergone a Proof of Reserves audit.
CORE3 Snapshot Reveals Significant Transparency Gaps
CORE3 has evaluated risk data across 193 exchanges as of September 1, 2026. As per the official data, only 24 exchanges verified reserves through Proof of Reserves, 53 exchanges presented penetration test results, and 99 exchanges operated a live bug bounty program. On other hand, just 10 exchanges met all three criteria, while 94 exchanges provided no evidence across any of the assessed components.
According to CORE3, the absence of these signals might have left users with reduced visibility into reserves and security practices of the crypto exchanges. Moreover, platform stated that data disclosure remains an ongoing process and that it is actively processing submissions from additional exchanges. Therefore, this is more likely to reduce the share of platforms lacking verified components.
Broader Risk Framework and Executive Commentary
Users are expecting a more comprehensive scenario that can access CORE3’s full risk breakdown across Security, Solvency, and Transparency. These three dimensions feed into CORE3’s Probability of Loss (PoL) metric, a forward-looking estimate of the likelihood of a loss event stemming from a security breach, insolvency, or operational failure.
Bobby Ong, Co-founder and CEO of CoinGecko also shared his remarks, stating, “Cybersecurity has been an important component of CoinGecko’s Trust Score for many years, helping users look beyond trading volume when evaluating exchanges. By integrating CORE3, we’re strengthening the cybersecurity assessment behind our Trust Score while giving users access to a more forward-looking view of where exchange risk may be emerging—all without disrupting the scores they already rely on.”
Dyma Budorin, CEO of Hacken, also added, “There is still a gap between what an exchange discloses and what a user needs to know to judge counterparty risk, and closing it takes more than a cybersecurity score. That’s why we expanded the methodology to weigh Solvency and Transparency as full categories alongside Security.”
