Exchanges / HashKey Exchange
30-second risk check: HashKey Exchange
HashKey Exchange Risk Rating, Licences and Safety Review
hashkey.com · Official site verified ↗Likely contracting entity: Hash Blockchain LimitedLicensed virtual asset trading platform operator
Brand and platform disambiguation · Moderate Risk
Is HashKey Exchange safe? Cexvia rates it Moderate Risk at 74/100.
For Hong Kong users, the mapped entity is Hash Blockchain Limited under Licensed virtual asset trading platform operator. Its strongest area is Regulatory & legal standing; the main observed concern is Operations & user protection.
Evidence for this conclusion ↓Run the 15-point safety checklist ↗Cexvia Exchange Safety RatingA higher score means lower observed risk
HashKey Exchange74Moderate Risk
Asset & 68Operatio68Corporat75Regulatory & legal standing82Corporate transparency75Asset & solvency transparency68Security & incident history78Operations & user protection68
HashKey Exchange performs best in Regulatory & legal standing at 82/100. Its main risk is Operations & user protection at 68/100.
- 01
The HashKey brand maps to separate trading entities in Hong Kong, Bermuda and Dubai, governed respectively by the SFC, BMA and VARA frameworks. Evidence ↓
Selected: HK / Hash Blockchain Limited · Verified 2026-07-27
Overall safety score74Moderate Risk
Checks completed5 / 5
HashKey Exchange Licences and Legal Entities
Which company operates HashKey Exchange in your region, and what licence does it hold?
HashKey Exchange, HashKey Global and Dubai services map to different legal entities. The regional entry point changes the contracting company, regulator and applicable licence.
RegionContracting entityRegulatory recordScopeStatusChecked
What does the licence record actually verify?
- Named legal entity and jurisdiction
- Permitted or registered activities
- Current public-record status at the verification date
Does a licence guarantee that customer funds are safe?
- Protection against all asset loss
- Global coverage for every user or product
- Complete solvency or future regulatory status
Regulatory & legal standingComplete
82score / 100Weight 25% · Confidence 93%
Three entities in Hong Kong, Bermuda and Dubai are verifiable, with relatively clear brand entry points and licence boundaries.
- 3 key legal entities
- HK / BM / AE
- Current records: active
Score contribution0.2 / 25
Why did this area receive this score?
Evidence supporting the score3 key legal entities · HK / BM / AE · Current records: active
What users should watchThree entities in Hong Kong, Bermuda and Dubai are verifiable, with relatively clear brand entry points and licence boundaries.
What information is still missing?No material public-information gap currently affects this conclusion.
0 source records · Reviewed 2026-07-27Corporate transparencyPrimary evidence
75score / 100Weight 15% · Confidence 80%
Licence, rule and control disclosures are relatively clear, while the private group does not publish consolidated audited financial statements.
- Licence boundaries: clear
- Exchange rules: public
- Consolidated financials: unavailable
Score contribution0.1 / 15
Why did this area receive this score?
Evidence supporting the scoreLicence boundaries: clear · Exchange rules: public · Consolidated financials: unavailable
What users should watchLicence, rule and control disclosures are relatively clear, while the private group does not publish consolidated audited financial statements.
What information is still missing?Primary evidence
0 source records · Reviewed 2026-07-27Asset & solvency transparencyPrimary evidence
68score / 100Weight 20% · Confidence 74%
Published rules describe customer-asset segregation, insurance and at least 90% cold storage, but no frequent public asset-to-liability coverage ratio is available.
- Cold storage: at least 90%
- Customer assets: segregated
- Public reserve ratio: unavailable
Score contribution0.1 / 20
Why did this area receive this score?
Evidence supporting the scoreCold storage: at least 90% · Customer assets: segregated · Public reserve ratio: unavailable
What users should watchPublished rules describe customer-asset segregation, insurance and at least 90% cold storage, but no frequent public asset-to-liability coverage ratio is available.
What information is still missing?Primary evidence
1 source records · Reviewed 2026-07-27Security & incident historyPrimary evidence
78score / 100Weight 15% · Confidence 58%
HashKey publishes ISO 27001/27701, insurance and cold-storage controls. No major platform incident was found in the selected sources, which is not proof that none has occurred.
- ISO 27001 / 27701
- Custody insurance: disclosed
- Major incident: not found
Score contribution0.1 / 15
Why did this area receive this score?
Evidence supporting the scoreISO 27001 / 27701 · Custody insurance: disclosed · Major incident: not found
What users should watchHashKey publishes ISO 27001/27701, insurance and cold-storage controls. No major platform incident was found in the selected sources, which is not proof that none has occurred.
What information is still missing?Primary evidence
1 source records · Reviewed 2026-07-27Operations & user protectionPrimary evidence
68score / 100Weight 25% · Confidence 57%
Official maintenance notices and rules are connected, but no unified real-time status page was found. This lowers coverage and confidence without becoming an automatic negative fact. Complaint evidence remains limited and is not treated as proof of safety.
- Maintenance notices: connected
- Unified status page: not found
- Comparable sample: insufficient
- Trust Score: 9 / 10
Score contribution0.2 / 25
Why did this area receive this score?
Evidence supporting the scoreMaintenance notices: connected · Unified status page: not found · Comparable sample: insufficient · Trust Score: 9 / 10
What users should watchOfficial maintenance notices and rules are connected, but no unified real-time status page was found. This lowers coverage and confidence without becoming an automatic negative fact. Complaint evidence remains limited and is not treated as proof of safety.
What information is still missing?Primary evidence
4 source records · Reviewed 2026-07-27HashKey Exchange Rating Explained
What raises or lowers the HashKey Exchange rating, and what remains unknown?
Missing information reduces confidence, but Cexvia does not treat an undisclosed fact as proof of wrongdoing.
Main factors in the HashKey Exchange rating
Regulatory & legal standing
820.2 weightedThree entities in Hong Kong, Bermuda and Dubai are verifiable, with relatively clear brand entry points and licence boundaries.
Security & incident history
780.1 weightedHashKey publishes ISO 27001/27701, insurance and cold-storage controls. No major platform incident was found in the selected sources, which is not proof that none has occurred.
Corporate transparency
750.1 weightedLicence, rule and control disclosures are relatively clear, while the private group does not publish consolidated audited financial statements.
Asset & solvency transparency
680.1 weightedPublished rules describe customer-asset segregation, insurance and at least 90% cold storage, but no frequent public asset-to-liability coverage ratio is available.
Operations & user protection
680.2 weightedOfficial maintenance notices and rules are connected, but no unified real-time status page was found. This lowers coverage and confidence without becoming an automatic negative fact. Complaint evidence remains limited and is not treated as proof of safety.
What should users verify before deciding?
Corporate transparency
Public evidence for Corporate transparency remains primary evidence, so this conclusion is less certain.
Asset & solvency transparency
Public evidence for Asset & solvency transparency remains primary evidence, so this conclusion is less certain.
Security & incident history
Public evidence for Security & incident history remains primary evidence, so this conclusion is less certain.
Operations & user protection
Public evidence for Operations & user protection remains primary evidence, so this conclusion is less certain.
Scope limitation
HashKey Exchange in Hong Kong and HashKey Global in Bermuda have different user scope and terms.
On-chain transparency
What can be observed on HashKey Exchange's public wallets?
Observed assets, stablecoin flows and wallet coverage for publicly identified HashKey Exchange addresses.
Verified wallet data has not been connected for this exchange yet.
View full on-chain data ↗HashKey Exchange Security Monitoring
Is HashKey Exchange affected by outages, hacks, phishing or complaint clusters?
9 risk-signal families tracked · 3 automated or configured · 6 require analyst review
Official service status
Exchange maintenance and service notices are monitored from the official support archive.
- Check frequency
- Every 15 minutes + review
- Rating impact
- Eligible after validation
Independent probes
Official website, documented public API, DNS and TLS probes are configured.
- Check frequency
- Every 5 minutes
- Rating impact
- Context only
Security incidents
Service incidents are captured with the venue and legal entity kept explicit.
- Check frequency
- Daily
- Rating impact
- Eligible after validation
Reserves and wallets
Custody, client-asset and any published wallet disclosures are reviewed.
- Check frequency
- On change + weekly review
- Rating impact
- Eligible after validation
Account controls
MFA, anti-phishing and withdrawal controls are reviewed from official help materials.
- Check frequency
- On change + weekly review
- Rating impact
- Eligible after validation
Legal and regulatory
SFC and other jurisdictional records are mapped to the exact HashKey entity.
- Check frequency
- On change + weekly review
- Rating impact
- Eligible after validation
Domain and phishing
Official-domain and certificate baselines are configured.
- Check frequency
- Daily
- Rating impact
- Context only
Vulnerability signals
Potential product and dependency matches are queued for validation.
- Check frequency
- Daily
- Rating impact
- Never scored directly
Verified complaints
Official case references and structured evidence are mapped by venue and entity.
- Check frequency
- On change + weekly review
- Rating impact
- Context only
HashKey Exchange Safety and Regulatory News
Has HashKey Exchange reported hacks, withdrawal problems or regulatory action?
Exchange Safety, Reserves and Withdrawals
Is HashKey Exchange safe? Check its reserves, security incidents and withdrawal risk.
Are reserves transparent and is solvency verifiable?
68/100Published rules describe customer-asset segregation, insurance and at least 90% cold storage, but no frequent public asset-to-liability coverage ratio is available.
- Cold storage: at least 90%
- Customer assets: segregated
- Public reserve ratio: unavailable
Has the exchange suffered hacks or major security incidents?
78/100HashKey publishes ISO 27001/27701, insurance and cold-storage controls. No major platform incident was found in the selected sources, which is not proof that none has occurred.
- ISO 27001 / 27701
- Custody insurance: disclosed
- Major incident: not found
Are withdrawals working and are users protected?
68/100Official maintenance notices and rules are connected, but no unified real-time status page was found. This lowers coverage and confidence without becoming an automatic negative fact.
- Maintenance notices: connected
- Unified status page: not found
- Coverage and confidence reduced
- Comparable sample: insufficient
- Low visibility is not low complaints
Fund-storage guidance
Limited long-term custody
- How to use it
- Suitable for normal trading with controlled exchange balances.
- Higher-risk use
- Avoid using the exchange as a single long-term custody location.
- Why
- Regulatory & legal standing is the strongest observed area, while Operations & user protection limits a stronger conclusion.
Account, Deposit and Withdrawal Checklist
Opening an account, holding funds or unable to withdraw? Start here.
- 01Verify the official domain and app publisher
- 02Confirm the legal entity named in the account agreement
- 03Check whether the selected product is covered in your region
- 04Start with the minimum deposit
- 05Test one withdrawal
- 06Enable strong account security
- 07Avoid keeping unnecessary long-term balances
Compare Exchange Safety
How does HashKey Exchange compare with other exchanges on risk and security?
ExchangeRiskScoreRegulatorySecurityConfidence
Before you deposit
Run the safety checklist for HashKey Exchange
Check the official domain, legal entity, licence, reserves, incident history and your exit route in one interactive worksheet.
FAQ
Questions about HashKey Exchange
Is HashKey Exchange safe?
HashKey Exchange is currently rated Moderate Risk at 74/100. This reflects observed public evidence and is not a guarantee of safety.
Is HashKey Exchange regulated?
3 legal-entity records are mapped in this Passport. Each record has a jurisdiction-specific status and scope.
Which entity serves the selected region?
Hong Kong: Hash Blockchain Limited — Licensed virtual asset trading platform operator.
Does HashKey Exchange publish reserve or solvency evidence?
Published rules describe customer-asset segregation, insurance and at least 90% cold storage, but no frequent public asset-to-liability coverage ratio is available.
Should funds be stored on HashKey Exchange long term?
Limited long-term custody. Suitable for normal trading with controlled exchange balances. Avoid using the exchange as a single long-term custody location.
HashKey Exchange · Official Records and Verifiable Evidence
HashKey Exchange licence, reserve, security and operating sources
Open the original records used to check the exchange, including the verification date and the conclusion each source supports.
Regulator · Securities and Futures Commission
Tier A↗SFC Licensed virtual asset trading platforms
Legal entity, platform name, CE number and licensing date.
Platform terms · HashKey Global
Tier B↗HashKey Global User Agreement
HashKey Global contracting entity, company number and BMA licence disclosure.
Regulator · Virtual Assets Regulatory Authority
Tier A↗VARA Public Register — Hashkey MENA FZE
Legal entity, licence number, issue date, activities and eligible customer types.
Regulator · Securities and Futures Commission
Tier A↗SFC Public Register — Hash Blockchain Limited
Hong Kong entity and licence details.
Platform terms · HashKey Exchange
Tier B↗HashKey Exchange Investor Business Terms
Hong Kong platform contracting entity and business terms.
Reserve disclosure · HashKey Global
Tier B↗HashKey Global Exchange Rules
Published reserve or asset-disclosure evidence used in the solvency assessment.
Security notice · HashKey
Tier B↗HashKey security and custody overview
Published security or incident evidence used in the security assessment.
System status · HashKey
Tier B↗HashKey system upgrade announcement
Official service-status evidence used in the operational assessment.
Evidence coverage · Cexvia methodology
Method↗Cexvia complaint evidence standard
Complaint comparisons use verifiable primary evidence. The current cross-platform sample remains limited.
Market data · CoinGecko
Tier B↗HashKey Exchange market data
Third-party market-quality data used as a supporting signal.
Market data · CoinGecko
Tier B↗Trust Score methodology
CoinGecko methodology covering liquidity, cybersecurity, API coverage, team and incident signals.
Cexvia ratings reflect observed risk under available public evidence. A higher score means lower observed risk, not guaranteed safety. Coverage, confidence, redlines and score direction are published separately. This page is not investment, legal or custody advice. Commercial relationships do not change scores or suppress verified evidence.