[Digital Today reporter Sangyeop Oh (오상엽)] Bithumb is launching a security reinforcement campaign to protect customer assets and create a safe trading environment.
Bithumb said on May 29 it will carry out a "Customer Asset Protection and Security Reinforcement Campaign". The campaign focuses on informing users about Bithumb's asset custody policy and security response system, and on publicising security guidelines users can put into practice.
Bithumb stores customer assets separately in offline-based "cold wallets" at a higher ratio than statutory standards to protect them from external security threats and hacking risks.
It also applies "MPC (Multi-Party Computation)-based distributed signature" technology to reduce the risk of leaks caused by abuse of specific administrator privileges or hacking of a single server.
It is also strengthening internal controls over the asset transfer process. Under the "segregation of duties (SoD) principle", separate staff handle transfer requests, reviews and final approvals. A multi-approval process is applied during asset transfers.
Bithumb is also improving operating processes to minimise external exposure routes and the frequency of cold-wallet exposure. This is a measure to reduce hacking touchpoints that could arise during asset transfers.
It has also put in place a framework to respond to global security threats. Bithumb is a full member of the Forum of Incident Response and Security Teams (FIRST) and shares the latest cyber threat information. Through a security threat intelligence system, it identifies various threats occurring around the world in advance.
It is also pushing to introduce technology to prepare for the future security environment. Bithumb is seeking to introduce a security system based on "post-quantum cryptography (PQC)" to respond to quantum-computing environments, as the first digital asset exchange in South Korea to do so.
It also operates an "information protection advisory committee" involving external experts and receives verification and advice on security policies and response strategies.
Bithumb is also providing users with security guidance alongside strengthening its own security system. It recommended users enable two-channel authentication and a feature that blocks access from overseas IP addresses. It also urged users to be cautious of impersonation attempts that demand passwords, one-time passwords (OTP) and authentication code entries.
A Bithumb official said, "As criminal methods targeting digital assets become more sophisticated, thorough security controls and technology investment are essential." The official added, "We will do our best to create an environment where users can trade with peace of mind."