CoinGecko Switches Exchange Cybersecurity Scores to CORE3

CoinGecko has migrated its exchange cybersecurity scores to CORE3 for 166 platforms. The company announced that it would be using the new risk infrastructure layer, Hacken's CORE3, to evaluate potential risks before they convert into actual losses. CoinGecko's exchange cybersecurity score is based on CER.live's framework and has been used for over six years.

CORE3 evaluated risk data across 193 exchanges as of September 1, 2026. Only 24 exchanges verified reserves through Proof of Reserves, while 53 presented penetration test results and 99 operated a live bug bounty program. However, just 10 exchanges met all three criteria, while 94 provided no evidence across any of the assessed components.

CORE3's full risk breakdown assesses Security, Solvency, and Transparency, which feed into its Probability of Loss (PoL) metric. CoinGecko CEO Bobby Ong stated that cybersecurity has been an important component of their Trust Score for many years, helping users evaluate exchanges beyond trading volume.

Hacken CEO Dyma Budorin added that there is still a gap between what an exchange discloses and what a user needs to know to judge counterparty risk. CORE3 aims to close this gap by weighing Solvency and Transparency as full categories alongside Security.