What Security Level Is the Information System of the TCEX Exchange?
According to Vietnam’s regulatory framework resolution for pilot crypto asset exchanges (Resolution No. 05/2025/NQ-CP)—which covers compliant exchanges such as TCEX under Techcombank and CAEX under VPBank—the core information system security of compliant exchanges like TCEX must reach Level 4 Information System Security standards.
In Vietnam’s national cybersecurity and information safety classification system, Level 4 represents the highest security tier for commercial and financial systems, second only to Level 5 (national defense and top-secret classifications).
Vietnam crypto exchange TCEX’s Level 4 security standard technical and compliance requirements:
-
National-Level Security Approval and Penetration Audits: System architecture, matching engines, and hot/cold wallet management mechanisms must undergo compliance evaluations and penetration testing by the Ministry of Information and Communications (MIC) and the Department of Cybersecurity under the Ministry of Public Security (MPS).
-
Financial-Grade Anti-Attack and Disaster Recovery Systems: Systems must feature the capability to mitigate ultra-large-scale Distributed Denial of Service (DDoS) attacks and maintain 24/7 real-time offsite disaster recovery backups for core trading data.
-
Asset Storage and Key Management: Mandatory enforcement of high-ratio cold/hot wallet segregation (typically storing over 90% of assets in offline cold wallets), utilizing Multi-Signature (Multi-Sig) and Threshold Signature Scheme (TSS/MPC) technologies to eliminate single points of failure.
-
Deep Integration with Identity Verification and AML Systems: Deep connection to the National Population Database for Real-Name KYC verification, alongside integrated financial-grade Anti-Money Laundering and Counter-Terrorist Financing (AML/CFT) real-time transaction monitoring modules.