CoinGecko's Cybersecurity Score Now Runs on CORE3: What Changed for 166 Exchanges

CoinGecko, the world’s largest independent cryptocurrency data aggregator, and CORE3, Hacken's risk infrastructure layer for digital assets, today announced that the cybersecurity component of CoinGecko’s Trust Score for centralized exchanges has migrated from CER.live to CORE3.

CoinGecko’s exchange cybersecurity score was powered by CER.live’s framework for six years. The migration to CORE3 brings a forward-looking assessment of emerging risks of cryptocurrency exchanges before they become losses.

The migration covers 166 centralized exchanges. Individual exchange cybersecurity scores are expected to change by no more than two percentage points, ensuring continuity for CoinGecko users. On CoinGecko, users will continue to see an exchange’s cybersecurity rating alongside key assessment indicators, including whether it has undergone penetration testing, maintains a bug bounty program, and has completed a Proof of Reserves audit.

Users seeking a broader assessment can access CORE3’s full risk breakdown across Security, Solvency, and Transparency. Together, these dimensions inform CORE3’s Probability of Loss (PoL), a forward-looking metric that estimates the likelihood of a loss event arising from factors such as a security breach, insolvency, or operational failure.

What Changed in CoinGecko’s Cybersecurity Trust Score

CORE3 refined the underlying checks during the migration. Individual exchange cybersecurity scores are expected to change by no more than ±2 percentage points as a result, minimizing disruption for CoinGecko users. Users can also access a broader, multidimensional risk breakdown on CORE3, including the Security, Solvency, and Transparency categories.

What This Means for Exchanges

Increased transparency helps users and other decision-makers assess and manage counterparty risk more effectively, including how exchanges approach cybersecurity, solvency, and disclosure. Exchanges that have not yet submitted reserve data to CORE3 are encouraged to do so on CORE3, as verified reserves provide users with an important signal when assessing counterparty risk and enable qualifying exchanges to receive CORE3's Solvency seal.

Operational security—including key management and signer infrastructure, which account for a significant portion of losses in the blockchain market today—is already included in the cybersecurity Trust Score through the cryptocurrency cybersecurity standard (CCSS) from the CORE3 security score.

Updated Trust Scores are already available on CoinGecko. Rated entities can review their multidimensional risk breakdown and the criteria behind each category at core3.io.