An analysis of some of the world’s top cryptocurrency exchanges, by cybersecurity researcher Dr Vidy Potdar, has found that many of them are still making some relatively basic security mistakes. The most basic errors still being made were lax password policies and underuse of HTTP security headers. 

https://www.finder.com.au/study-cryptocurrency-exchanges-are-making-basic-security-mistakes