3 Vietnamese Crypto Exchanges Complete Level 4 Security Review
The first three cryptocurrency exchanges have completed Level 4 security assessments.
CAEX, SCEX, and TCEX have passed Level 4 information system security assessments . This is a mandatory requirement for the IT systems of organizations providing crypto asset services.Resolution 05/2025/NQ-CP, within the framework of the cryptocurrency market pilot program atVietnam.
On October 22nd, Vietnam Prosperity Cryptocurrency Exchange Joint Stock Company (CAEX）The company announced the completion of its Level 4 information system security assessment. According to the company, the proposed security level application was reviewed and approved by A05.
CAEX is building trading and order matching infrastructure, a crypto asset custody system, a mechanism for managing hot and cold wallets, and cryptographic key protection. The company is also integrating functions for customer identification, anti-money laundering, transaction monitoring, asset separation, and reconciliation. The system also aims to monitor transactions on the blockchain, filter wallet addresses, and identify asset flows with potential risks.
On the same day, Sacom Crypto Asset Exchange Joint Stock Company (SCEX) announced similar assessment results. Previously, on October 14th, the company completed the process.Increase charter capital to 10,000 billion VND, meeting the minimum requirements as stipulated in the Resolution.
In addition to building a multi-layered custody infrastructure, SCEX has deployed the SCEX Simulator, a test trading platform serving its digital asset outreach program. The platform has recorded over 22,000 registered accounts, with more than 16,000 maintaining regular activity within the first 48 hours. This test data can help the company assess load capacity, system performance, and user experience before official launch.
On October 23rd, Techcom Cryptocurrency Exchange Joint Stock Company (TCEX) also confirmed that A05 assessed and approved the Level 4 proposal dossier according to Official Letter No. 5490/BCA-A05 dated October 12, 2026.
According to Decree 331/2026/ND-CP issued on August 19, 2026, information systems in Vietnam are classified into five security levels. Level 4 applies to systems where incidents could cause particularly serious harm to public interest, social order and safety, or seriously affect national security.
This group includes systems for processing state secrets or serving national defense and security; national information infrastructure that needs to be maintained continuously; industrial control systems serving Grade I construction projects; and other systems as determined by the Prime Minister’s decision or the results of cybersecurity risk assessments as prescribed.
For cryptocurrency exchanges, Level 4 security requirements set high standards for data protection, access control, operational maintenance, and cybersecurity risk management. However, completing Level 4 assessment does not mean the business has met all licensing requirements.
According to Mr. To Tran Hoa, Deputy Head of the Standing Committee of the Cryptocurrency Trading Market Management Board under the State Securities Commission,timing of the launch of domestic exchangesThis depends on the progress of each business in fulfilling its licensing requirements.
Five businesses were announced as having complete and valid records.consider granting a licenseThe May news release included VIXEX, SCEX, CAEX, TCEX, and Vietnam Digital Asset Corporation (Moonbase).
Organizations have one year from the date of initial certification to complete the remaining requirements. If calculated from May 2026,deadlineIt will fall around May 2027.
A CAEX representative affirmed that they will continue to improve their technology, business processes, and operational capabilities, while coordinating with relevant authorities to fully meet the conditions for participating in the pilot program.