Exchange may get 1 star certificate if it passed penetration test less than 1 year ago or passed proof of funds check. To get 3 stars certificate exchange must have: penetration test passed less than one year ago, bug bounty program and proof of funds.