HashKey Exchange has been certified by SOC 1 Type 2 and SOC 2 Type 2

(Hong Kong, May 8, 2025) HashKey Exchange, the largest licensed virtual asset exchange in Hong Kong, announced today that HashKey Custody Services Limited** (hereinafter referred to as "HashKey Exchange") has successfully passed the dual certification of SOC 1 Type 2 and SOC 2 Type 2, becoming one of the few companies in the industry to obtain these two international authoritative certifications at the same time. This marks the ongoing progress of HashKey Exchange in compliance and security, providing more trustworthy enterprise-level digital asset services to individual and institutional investors.

HashKey Exchange has obtained two certifications at the same time, demonstrating its professional strength and compliance advantages in the field of digital asset services. Among them, the SOC 1 Type 2 certification focuses on verifying HashKey Exchange's continuous control capabilities in financial reporting accuracy, data integrity and regulatory compliance, while the SOC 2 Type 2 certification confirms its continuous service capabilities in customer data protection, risk control and system stability.

According to the audit report, HashKey Exchange's operations have been fully recognized by the auditors in terms of applicability and continuity. The certification process strictly follows the requirements of the TSP of the American Institute of Certified Public Accountants' Trust Service Standards, Chapter 100, and through multi-dimensional testing verification, including system inspections and risk assessment, it is confirmed that HashKey always maintains efficient control effectiveness during the audit cycle.

It is worth noting that this dual certification complements HashKey Exchange's existing ISO 27001 information security management system and ISO 27701 privacy information management system, and jointly builds an industry-leading multi-dimensional compliance system.

The SOC 1 Type 2 report is prepared in accordance with the International Assurance Business Standard No. 3402 (ISAE 3402) issued by the International Audit and Assessment Standards Board (IAASB), and the SOC 2 Type 2 report is prepared in accordance with the American Institute of Certified Public Accountants (AICPA) standards. Both certifications are issued by independent audit institutions after continuous and strict monitoring and evaluation of the enterprise, so they are widely regarded by financial institutions around the world as the "gold standard" for measuring the level of corporate compliance operations.

• As of January 31, 2025, HashKey Exchange ranked 7th in Coingecko, the highest-ranked Hong Kong licensed virtual asset exchange.

**Note: Given that the only function of HashKey Custody Services Limited is to serve HashKey Exchange 's custody customer assets, it can be simplified to HashKey Exchange in the related statement.

About HashKey Exchange

HashKey Exchange is committed to defining a new benchmark for virtual asset exchanges in terms of compliance, funding guarantees and platform security. Hash Blockchain Limited (HashKey Exchange) is the first licensed retail virtual asset exchange in Hong Kong. Currently, it has been approved by the Hong Kong Securities and Futures Commission (SFC) and holds a license for operating a virtual asset trading platform under the Securities and Futures Ordinance (Securities Trading) and a license for operating a virtual asset trading platform under the Securities and Futures Ordinance, and operates a virtual asset trading platform in compliance with the operation. As the flagship business of HashKey Group, HashKey Exchange provides a one-stop virtual asset trading service for professional investors (PIs) and retail investors. HashKey Exchange has obtained ISO 27001 (Information Security) and ISO 27701 (Data Privacy) management system certification. In order to comply with laws and regulations, HashKey Exchange does not provide services to users in mainland China, the United States, and certain other jurisdictions. This material has not been reviewed by the Securities and Futures Commission.