🆕 How a HollaEx Exchange Defends Itself: The Security Layers Every Operator Should Switch On
Here are the security basics every exchange needs, and why 8 years of running exchanges shaped how HollaEx defends itself.

HollaEx® v2.21, codenamed Valletta, is built to last. It brings a more refined HollaEx v3 website, official account statements, easier sign-ins, new tools for operators and one of our broadest rounds of security hardening yet.
Valletta, Malta's capital, was built by the Knights of St John right after the Great Siege of 1565, with one goal: to be a city that holds. That's the spirit of this release. More polish on the outside, and stronger walls where nobody sees them.
Already running an exchange on HollaEx? Log in to your dashboard for the full release notes, or read on for the highlights.
The new HollaEx v3 website is more polished and more tightly connected to your exchange, so what your users see and what happens behind the scenes stay in step.

Need to give a user a formal record of their account? Operators can now issue a branded PDF crypto account statement for any user, covering up to 12 months, right from the admin panel. It reads and looks like a bank statement, with your exchange's logo, a balance summary and a ledger for each asset.
Figures are fixed the moment a statement is issued, so every copy matches. That makes statements handy for audits, tax questions, banking partners and users who need proof of funds. For now, statements are issued by operators only.
Users can now link or unlink Google sign-in from their security settings, with an email code (and 2FA, when it's on) to confirm the change. Google sign-in only works on accounts that have linked it, so if you've always signed in with a password, log in as usual and link Google from your security settings.
And when a session behind the PIN lock is about to expire, users can carry on with their PIN, passkey or 2FA code instead of logging in from scratch. Sessions still have a firm overall limit, so the convenience doesn't come at the cost of security.
Valletta includes one of our broadest security rounds yet, following an independent external security review. Protections were tightened across the platform, from the moment a user signs up to the moment funds leave the exchange.
Operators can read the full notes in their dashboard.
Curious how we think about exchange security? Read how a HollaEx exchange defends itself.
Verification emails got a refresh too. They have a cleaner layout, a one-tap "Copy code" in supported inboxes, and the security verification email now arrives in every supported language.
Valletta's walls have stood for more than 450 years. Software moves faster than stone, but the idea is the same: build it right, keep reinforcing it and learn from every attempt to get in.
That's how we've worked for over 8 years. Every HollaEx release carries lessons from real exchanges running in many countries, on a codebase that started out open source and was tested in the open. When we learn something on one exchange, every operator gets the benefit. Valletta is another layer on top.
And there are real people behind it. If you want a hand with your setup or have a question about this release, our team is a message away.
Ready to upgrade? Log in to your HollaEx dashboard to read the full release notes. New to HollaEx? See how you can launch your own white-label crypto exchange.