Security vulnerabilities were found in nearly all the 40 major online trading platforms investigated by IOActive security consultant Alejandro Hernández. The researchers discovered that a number of popular exchanges had been compromised and used to launch fraudulent orders for bitcoin or other cryptocurrencies. On some web platforms, logging out did not end the session on the server side. Meanwhile, some platforms allow users to create their own bots, but their common programming languages like C++ make them vulnerable to a backdoor attack.
Security vulnerabilities were found in nearly all the 40 major online trading platforms investigated by IOActive security consultant Alejandro Hernández. Of the 16 desktop applications, 34 mobile apps and 30 websites analysed, more than half the desktop applications transmitted some data unencrypted, while several mobile apps and some desktop applications stored passwords unencrypted or sent them in plain text. On some web platforms, logging out did not end the session on the server side. Meanwhile, some platforms allow users to create their own bots, but their common programming languages like C++ make them vulnerable to a backdoor attack.