CZ: I think Certik (the auditing agency for dexx) can definitely be trusted.
The original statement is as follows:
CZ: I think Certik can definitely be trusted.
Did Zhao Changpeng not do his homework before endorsing Certik? Dexx was audited by Certik and received a ranking in the top 10%, yet dexx claims not to hold user keys while in fact retaining user keys on their servers. Furthermore, when users export their keys, dexx transmits the user keys stored on the server in plaintext to the users. It is precisely because of deceiving users on critical security issues that dexx was able to abscond with user assets. How could Certik not detect such a serious security flaw? I don't believe it; I think the money was in place, and it was just selling an audit report. Zhao Changpeng should not have been aware of this issue with dexx, which led him to endorse Certik without being informed.