What is the information system security level of the VIXEX Exchange?
According to Vietnam’s regulatory requirements for the crypto asset exchange pilot program, the information system security level of VIXEX (as well as other shortlisted candidate exchanges) must reach the Level 4 standard.

This security level represents a high-standard requirement under Vietnam’s national information system security classification scheme. Its core compliance and technical standards include:
· Strict Technical Defense System: Mandatory deployment of advanced firewalls, Intrusion Prevention Systems (IPS), database security auditing, Web Application Firewalls (WAF), Privilege Access Management (PAM), and centralized security monitoring (such as VSOC).
· Architecture & Disaster Recovery Redundancy: Meeting high-intensity system availability, data encryption and backup, business continuity, and secure isolated custody standards for cold and hot wallets.
· National Security Auditing: Prior to receiving official operational approval, the exchange’s information system must undergo substantive security technical evaluations and compliance audits conducted by national authorities, including the Ministry of Public Security of Vietnam.
Achieving the “Level 4 Information System Security Standard” serves as a mandatory technical threshold that VIXEX must fulfill during the current regulatory process and license application phase.
Vietnam crypto exchange VIXEX Compliance Progress
VIXEX is currently in the national regulatory review phase following its shortlisting for pilot eligibility. It is awaiting substantive inspection and final license issuance from the Ministry of Public Security of Vietnam and the State Bank of Vietnam (SBV) regarding its information system security level, cold and hot wallet custody architecture, and Anti-Money Laundering (AML) mechanisms.
