CertiK Tightens KYC and Strengthens Oversight After Huione Backlash, CEO Denies IPO Plans

TheNewsCryptoPublicado a 2026-02-12Actualizado a 2026-02-12

Resumen

CertiK has enhanced its KYC procedures and oversight after facing criticism for auditing a stablecoin project linked to the illicit Huione marketplace last year. CEO Ronghui Gu acknowledged the incident as a turning point, leading to stricter client checks, collaboration with external risk experts, and ongoing monitoring of audit report usage. The firm now prioritizes institution-level standards to meet demands from large financial entities for rigorous code safety proofs and regulator-friendly reports. Gu denied current IPO plans despite investor interest, citing market challenges in valuing Web3 companies. He also highlighted evolving risks, including private key mismanagement, deepfakes, and price manipulation, emphasizing trust-building as critical for institutional partnerships.

Blockchain security firm CertiK says that it has improved its procedures and tightened its checks after facing criticism last year for auditing a project linked to the illicit Huione marketplace. Ronghui Gu, CEO of CertiK, said that this episode became a turning point for the firm.

What really happened

CertiK audited a stablecoin project last year. However, the project has links to Huione, which is a marketplace for illegal activities. Online critics questioned whether the audit happened and whether CertiK should have done more background checks. Ronghui Gu replied to all the critics that the company has audited the software, which was given by a U.S.-registered client, and later audited fee has been donated to the charity, and treated this backlash as a lesson.

After this incident, Gu said that CertiK strengthened its KYC and screening process by checking clients more carefully, working with outside risk experts, and increasing monitoring of how its audit reports are used. He said that the firm now keeps a “very close eye” even after the auditing is done.

While auditing the crypto projects was the core for CertiK to earn, Gu says that these services must now meet the institution-level standards. Large financial firms want deeper testing and stronger proof that code is safe, and a clear report they can show regulators. So meeting those needs is now the top priority for the firm, he said.

Gu’s reply on public listing

In January, Gu spoke at the World Economic Forum, which has increased speculation about the possible public listing. He says that media reports went too far, and right now there is no plan, but yes, the investors are really interested. Adding on, he said the market still doesn’t know how to value Web3 companies properly.

Gu also warned that risks are changing. Previously Hackers attacked the smart contracts, but right now, many problem arises from private key handling, deepfakes, and price feed manipulation. He says the firm is still researching the solution for the Deepfakes, which is especially very hard.

For CertiK, building trust is more important because large institutions will only work with companies that they believe in. Gu believes that the Huione moment makes the company stronger for the future and forced to upgrade, improve, and prepare for the stricter expectations from global finance.

Highlighted Crypto News:

Human API Launches Platform Enabling Direct AI-to-Human Task Coordination

TagsCertiKIPO

Preguntas relacionadas

QWhat changes did CertiK implement after the Huione-related backlash?

ACertiK strengthened its KYC and screening processes by conducting more thorough client checks, collaborating with external risk experts, and enhancing monitoring of how its audit reports are used. The company now maintains ongoing vigilance even after audits are completed.

QHow did CertiK's CEO characterize the Huione incident?

ARonghui Gu described the Huione incident as a turning point for the company that forced them to upgrade and improve their procedures to meet stricter expectations from global financial institutions.

QWhat did Ronghui Gu say about CertiK's potential IPO?

AGu denied current IPO plans, stating that media reports had gone too far with speculation. He acknowledged investor interest but noted that the market still doesn't know how to properly value Web3 companies.

QWhat new types of security risks did Gu highlight as emerging threats?

AGu warned that risks are evolving from smart contract attacks to problems involving private key handling, deepfakes, and price feed manipulation, with deepfakes being particularly challenging to address.

QHow did CertiK handle the audit fee from the controversial Huione-linked project?

ACertiK donated the audit fee from the Huione-linked project to charity after the software audit was completed for their U.S.-registered client.

Lecturas Relacionadas

Bitcoin Withdrawals Continue: 8 Years of Storage in a Coldcard Cold Wallet Ended in Zero

Coldcard Hardware Wallet Hacked: Losses Mount Due to Vulnerable Seed Generation A critical vulnerability in Coldcard hardware wallets has led to a continued wave of fund thefts. According to Galaxy Research, the total stolen has reached 1,367.05 BTC (approx. $88.6 million) from 4,585 addresses, a significant increase from the initial 594.5 BTC reported on July 30, 2026. Most of the stolen funds remain on the attackers' addresses. The issue is not with the current firmware, which Coinkite has updated, but with seed phrases generated on vulnerable devices between March 2021 and the release of fixed firmware versions. Due to a programmer error, devices switched from using a hardware random number generator to the software-based Yasmarang generator, which was initialized with publicly accessible data like the chip's serial number. This made the seed phrases predictable through offline brute-force attacks, meaning wallets remain at risk until funds are moved to a new wallet generated with the patched firmware. Affected devices include Mk2/Mk3 with firmware 4.0.1–4.1.9 (and up to 5.0.3), Mk4/Mk5 up to version 5.6.0, and Q models up to 1.5.0Q. The only exceptions are seeds created with a high-entropy method like at least 50 independent dice rolls or a strong unique BIP-39 passphrase. All other owners must generate a new seed on the fixed firmware and transfer their assets. A case highlighting the human impact involves a 39-year-old long-term investor who lost 2 BTC (approx. $130,000) in minutes. He had accumulated the Bitcoin over eight years through physical labor, viewing it as a financial lifeline and a retirement plan in a country suffering from hyperinflation. His story underscores that even conservative "buy and hold in cold storage" strategies can be compromised by such underlying technical flaws. From a technical perspective, this incident echoes historical failures where weak random number generators undermined cryptographic security, challenging the assumption that offline storage is automatically foolproof.

cryptonews.ruHace 3 hora(s)

Bitcoin Withdrawals Continue: 8 Years of Storage in a Coldcard Cold Wallet Ended in Zero

cryptonews.ruHace 3 hora(s)

Trading

Spot
活动图片