We have completed a new round of independent penetration testing with Hacken, a leading Web3 cybersecurity firm. The scope covered Toobit's website, API infrastructure, and mobile apps for iOS and Android.
Hacken identified no Critical or High-severity findings during testing. Seven findings were rated Medium, all of which have now been resolved.
These assessments build on the mobile testing completed in 2025, extending the review to more of Toobit's core systems. Testing followed widely recognized security standards and guidelines, including NIST SP 800-115, PTES, and the OWASP Testing Guide.
Regular independent testing helps us identify potential vulnerabilities and strengthen our defenses over time. It is a key part of Toobit's broader approach to security and compliance, alongside its ISO/IEC 27001:2022 certification and proprietary Bee-Safe framework.
We will continue reinforcing these safeguards through ongoing improvements and independent validation.
View the full penetration testing reports on Hacken's website.
