> ## Documentation Index
> Fetch the complete documentation index at: https://docs.core3.io/llms.txt
> Use this file to discover all available pages before exploring further.

# CEX PoL Methodology

> CORE3's crypto exchange risk assessment framework — evaluating security, solvency, and transparency for centralized exchanges.

## What is CEX PoL?

**CEX PoL (Centralized Exchange Probability of Loss)** is a structured risk assessment framework designed to estimate the **likelihood that users of a centralized crypto exchange may experience a financially material loss**, excluding losses caused solely by market price movements.

CEX PoL focuses on **non-market loss vectors** specific to centralized exchanges, such as:

* Security breaches
* Insolvency or liquidity shortfalls
* Operational failures
* Transparency deficiencies

The output is a **Probability of Loss score**, grounded in observable risk factors and historical loss patterns.

The primary purpose of CEX PoL is to:

* Quantify **custodial risk** in centralized exchanges
* Reduce information asymmetry between exchanges and users
* Provide a standardized, comparable risk signal across exchanges
* Support informed decision-making for users, institutions, and counterparties

<Warning>
  CEX PoL does **not** attempt to evaluate trading performance, fees, spreads, or market competitiveness.
</Warning>

## CEX risk assessment methodology — security, solvency, transparency

<Card title="Full CEX PoL methodology spreadsheet" icon="table" href="https://docs.google.com/spreadsheets/d/1cJQRqGNY_K-MS3yLwn3I4ScGeIHFepG9g8JKAfTLEXU/edit?gid=0#gid=0" cta="Open spreadsheet" arrow="true">
  View the complete CEX methodology reference
</Card>

The CORE3 CEX PoL methodology is built around three core risk areas:

<Columns cols={3}>
  <Card title="Security" icon="shield" color="#FF6B6B">
    Protecting user funds and infrastructure
  </Card>

  <Card title="Solvency" icon="vault" color="#FFC107">
    Proof of reserves and financial resilience
  </Card>

  <Card title="Transparency" icon="eye" color="#4CAF50">
    Live tracking and disclosure quality
  </Card>
</Columns>

Each of these areas is assessed using its own set of metrics and carries a different weight in the overall score.

<Info>
  The **Security** section is inherited from the CER.live platform and is fully aligned with its proven methodology. Given its continued relevance, CORE3 directly adopts the assessment framework of the leading CEX security evaluation platform, making it an integral part of CORE3.
</Info>

The Centralized Exchange Probability of Loss methodology is designed to evaluate risks unique to custodial crypto platforms. Unlike non-custodial protocols, centralized exchanges introduce **concentrated counterparty, custody, and solvency risks**, making transparency and operational controls critical.

<Tabs>
  <Tab title="Security Risks">
    ## Security risks — protecting user funds and exchange infrastructure

    The Security category assesses the exchange's ability to **protect user funds, infrastructure, and sensitive data** against external attacks, insider threats, and operational failures.

    Centralized exchanges represent high-value targets due to pooled assets and privileged access models. Weak security controls have repeatedly led to catastrophic losses across the crypto market. This category evaluates both **preventive and reactive security measures** to determine how resilient an exchange is under active threat conditions.

    <AccordionGroup>
      <Accordion title="Server Security" icon="server">
        Infrastructure hardening, segmentation, access controls, and protection against unauthorized system access.
      </Accordion>

      <Accordion title="User Security" icon="user-shield">
        Safeguards protecting user accounts, including authentication mechanisms, withdrawal controls, and fraud prevention systems.
      </Accordion>

      <Accordion title="Certifications" icon="certificate">
        Independent validation of security management practices (e.g., ISO standards), signaling organizational maturity.
      </Accordion>

      <Accordion title="Bug Bounty" icon="bug">
        Active engagement with the security research community to identify vulnerabilities before exploitation.
      </Accordion>

      <Accordion title="Penetration Tests" icon="crosshairs">
        Periodic adversarial testing of systems to uncover real-world attack vectors.
      </Accordion>

      <Accordion title="Insurance Fund" icon="shield-check">
        Availability and structure of dedicated funds designed to mitigate losses resulting from security incidents.
      </Accordion>
    </AccordionGroup>

    <Tip>
      This category mitigates the risk of **direct fund loss events**, which remain one of the failure modes for centralized exchanges. Security evaluation is the most heavily weighted component of the CEX crypto risk score.
    </Tip>
  </Tab>

  <Tab title="Solvency Risks">
    ## Solvency risks — proof of reserves, asset coverage, and financial resilience

    The Solvency category evaluates whether an exchange **actually holds sufficient assets to cover user liabilities**, both at a point in time and on an ongoing basis.

    <Danger>
      Historically, many exchange failures were not caused by hacks, but by **misuse of customer funds, hidden leverage, or inadequate reserve management**. This category focuses on verifiable evidence rather than declarations.
    </Danger>

    <AccordionGroup>
      <Accordion title="Proof of Reserves Audit" icon="file-magnifying-glass">
        Independent verification of on-chain and off-chain assets controlled by the exchange.
      </Accordion>

      <Accordion title="Proof of Ownership for Wallets During the Audit" icon="key">
        Cryptographic or procedural confirmation that disclosed wallets are genuinely controlled by the exchange.
      </Accordion>

      <Accordion title="Audit Users Scope" icon="users">
        Clarity and completeness regarding which user balances and liabilities are included in the audit.
      </Accordion>

      <Accordion title="Asset Composition in Total Reserves" icon="coins">
        Quality, liquidity, and risk profile of assets held as reserves.
      </Accordion>

      <Accordion title="Regularity (PoR Audit Frequency)" icon="calendar-check">
        How often solvency audits are conducted and disclosed.
      </Accordion>

      <Accordion title="Merkle Tree" icon="diagram-project">
        Use of cryptographic structures enabling users to independently verify inclusion of their balances.
      </Accordion>
    </AccordionGroup>

    This category directly addresses **insolvency, fractional reserve practices, and hidden leverage**, which represent systemic risks capable of triggering market-wide contagion. Solvency verification is a cornerstone of crypto due diligence for any counterparty operating in a custodial model.
  </Tab>

  <Tab title="Transparency Risks">
    ## Transparency risks — live reserves tracking and disclosure quality

    The Transparency category measures how openly and reliably an exchange communicates critical risk-relevant information to the public, regulators, and users.

    <Note>
      Transparency is treated not as a marketing attribute, but as an **operational control** that enables external verification, early risk detection, and accountability.
    </Note>

    <AccordionGroup>
      <Accordion title="Live reserves wallets tracking" icon="chart-line">
        Continuous, real-time monitoring of disclosed reserve wallets.
      </Accordion>

      <Accordion title="Police representatives response quality" icon="handshake">
        Responsiveness and cooperation with law enforcement and regulatory inquiries.
      </Accordion>

      <Accordion title="Last liabilities snapshot value" icon="camera">
        Disclosure of the most recent total liabilities figure used for coverage calculations.
      </Accordion>

      <Accordion title="Coverage ratio" icon="scale-balanced">
        Relationship between disclosed reserves and stated liabilities.
      </Accordion>

      <Accordion title="Reserves assets distribution" icon="chart-pie">
        Breakdown of reserve assets by type, liquidity, and risk characteristics.
      </Accordion>
    </AccordionGroup>

    Low transparency increases information asymmetry, delays detection of distress signals, and amplifies loss severity when failures occur. This category incentivizes **ongoing openness rather than one-time disclosures** — a principle central to risk management at the exchange level.
  </Tab>
</Tabs>

## Summary

<Check>
  The CEX PoL methodology provides a **clear, comparable, and enforceable risk signal** for centralized exchanges operating in a high-risk custodial environment.
</Check>

By combining security posture, solvency verification, and transparency controls, CORE3 enables users, institutions, and regulators to assess not only how an exchange operates today, but how it is likely to behave under stress. This forms a key part of CORE3's crypto rankings for centralized exchanges.

<Card title="CEX PoL Scoring Logic" icon="scale-balanced" href="/cex-pol-scoring-logic" cta="See how scores are calculated">
  Learn how category weights produce the final exchange PoL score
</Card>