Firstly, cryptocurrency exchanges use double-checking by sending SMS (or email) with a unique code for each authorization or connecting such services as Google Authenticator or Authy, which allows access to the platform only to verified users. Secondly, the developer can divide the site into several servers, implement protection against CSRF and XSS attacks, as well as be sure to implement input filtering to protect against SQL Injection. In addition, the reliability of the exchange can ensure the use of PIN codes and tracking of IP addresses of users.