Toobit has been included in CoinGecko's 2026 State of Crypto Security Report, a study of how threats against digital asset platforms are shifting and what exchanges are doing to keep customer
Toobit has been included in CoinGecko's 2026 State of Crypto Security Report, a study of how threats against digital asset platforms are shifting and what exchanges are doing to keep customer funds away from attackers.
The report references several of the exchange's protections, among them its Bee-Safe framework, cold wallet storage, Proof of Reserves, real-time monitoring, and the Toobit Shield Fund, placing them inside a wider review of how centralized platforms handle security.
Bee-Safe is organized into three tiers covering accounts, assets, and infrastructure. On the account side, users can switch on two-factor authentication, anti-phishing verification, and withdrawal address allowlisting, with added checks applied whenever a new address is registered. Toobit reports that more than 90% of customer assets sit in offline multi-signature cold wallets.
At the infrastructure level, the exchange relies on data encryption, DDoS protection, a multi-cloud setup, continuous risk monitoring, and repeated third-party reviews. During August 2026, security firm Hacken ran expanded penetration testing across Toobit's web and API systems and its mobile applications. Those tests returned no Critical or High-severity issues, and all seven Medium-severity findings were resolved.
The company also keeps 1:1+ Proof of Reserves, with BTC, ETH, USDT, and USDC ratios above 100%. Through Merkle-tree verification, account holders can confirm for themselves that their balances form part of the reserves the exchange reports.
CoinGecko gives separate attention to the Toobit Shield Fund, which opened in October 2025 with $50 million set aside to cover eligible losses tied to technical or security failures originating on the platform. Coverage applies on its own, with no dependence on how large an account is or how much a trader moves. The fund is spread across four public wallets, so its balance and composition can be tracked in real time.
The wider figures help explain why exchanges keep spending on these measures. CoinGecko counted $3.63 billion lost across 245 incidents between January 2025 and July 2026, with the ten largest events responsible for more than 72% of that total. TRM Labs separately logged 207 hacks in the first six months of 2026, the most it has recorded in any half-year stretch. Compromises of infrastructure and operations made up roughly 76% of the $972 million lost in that period, even though they accounted for only about 15% of cases.
Toobit operates as a cryptocurrency derivatives exchange offering zero-fee spot trading, AI-assisted trading tools, and high leverage across both crypto and traditional markets. The exchange positions itself as a fair, secure, and transparent venue for people trading digital assets.
