SafetyDetective interviewed TokenInsight on the topic of data security, discussing current protection practices and future plans.
Read more about how TokenInsight is strengthening its data security framework and shaping its future vision.
Source: https://www.safetydetectives.com/blog/tokeninsight-interview/
Editor: Petar Vojinovic
Since 2018, TokenInsight has been on a mission to bring transparency, rigor, and accountability to the crypto industry. Moving beyond hype and speculation, the platform delivers independent, data-driven assessments that combine on-chain analytics, market intelligence, and security insights. In this interview with SafetyDetectives, Emily, CBO of TokenInsight, discusses how the company has evolved from its early token rating system into a comprehensive risk and analytics platform—offering the tools institutions and investors need to navigate the rapidly changing digital asset landscape.
TokenInsight was founded in 2018 with a clear mission: to bring independent, data driven assessment to crypto markets—moving beyond speculation, hype cycles, and superficial price trends. Our initial offerings centered on fundamental research reports and a standardized token and project rating framework designed to benchmark quality and transparency across protocols. Building on that foundation, we developed a comprehensive data infrastructure—running our own nodes, standardizing cross-chain data, applying entity labeling, and linking on-chain activity with off-chain disclosures to provide a unified view of project fundamentals and market behavior.
Over time, TokenInsight has expanded its analytical coverage to encompass all major dimensions of market intelligence, including exchange analytics, sector and asset evaluations, and technical and on-chain metrics. Alongside this, we deliver daily news updates and in-depth research to help market participants make informed, evidence-based decisions in an increasingly complex digital asset landscape.
Today, TokenInsight operates as a comprehensive risk and analytics platform, integrating quantitative data with qualitative research. We evaluate assets and protocols across five analytical pillars:
Our scoring methodology combines on-chain telemetry (e.g., contract interactions, TVL quality, holder concentration), market microstructure analytics (venue depth, slippage, spoofing and anomaly detection), developer and security metrics (commit
velocity, audit coverage, vulnerability tracking), and standardized qualitative disclosures, all mapped to a consistent schema. This integrated framework enables TokenInsight to deliver transparent, data-driven assessments that reflect both quantitative performance and fundamental project integrity.
We adopts a defense-in-depth strategy to secure its APIs and data pipelines. All interfaces are protected through strong authentication and authorization mechanisms, including OAuth 2.0, scoped API keys, and role-based access control (RBAC). Data in transit is fully encrypted using TLS 1.2 or higher, and sensitive data at rest is encrypted using industry-standard AES-256 encryption.
To prevent unauthorized usage and abuse, TI enforces strict rate limiting, input validation, and behavioral anomaly detection. Access to APIs and backend services is logged centrally and monitored continuously. Secrets, credentials, and encryption keys are managed through a centralized secrets management system with enforced rotation and auditing policies. In addition, code and infrastructure changes undergo mandatory code review and security testing before deployment.
We employs a combination of preventive, detective, and responsive security controls across its infrastructure. The organization leverages CNAPP (Cloud-Native Application Protection Platform) to continuously monitor cloud configurations, workloads, identities, and data for security posture, vulnerabilities, and compliance drift. CNAPP system provides real-time risk correlation and automated remediation guidance to mitigate threats across the cloud environment.
To protect against DDoS attacks, we uses cloud-native and CDN-based DDoS mitigation services with network-edge traffic filtering and rate control.
Insider risks are mitigated through the enforcement of the principle of least privilege, mandatory access reviews, continuous activity monitoring, and automated alerting on anomalous behaviors.
For supply chain security, we maintain a vendor risk management program, perform due diligence on all third-party providers, and through SDLC systems, conduct SCA, and dependency and container image scanning to identify vulnerabilities. A Software Bill of Materials (SBOM) is maintained to ensure transparency and traceability of all dependencies. Regular penetration testing, vulnerability management, and patch governance further strengthen the company’s security posture.
Goals (24–48 months)
As market participants increasingly focus on exchange dynamics, TokenInsight will launch an integrated Exchange Intelligence Dashboard. This platform will enable traders and institutions to compare exchanges across dimensions such as listed assets, new product offerings, liquidity depth, market integrity, and trading infrastructure.
We will broaden our research publication scope, producing more sector analyses, project deep-dives, and thematic reports. Coverage will extend beyond established categories to include emerging narratives, innovative protocols, and early-stage ecosystems, ensuring readers stay informed on both mainstream and frontier developments.
In response to evolving market conditions and user priorities, we will refine and recalibrate our rating methodology. This includes adjusting weightings across key dimensions, integrating new data signals, and ensuring our scoring remains aligned with market structure changes and regulatory developments.
To capture sentiment and behavioral signals, we will develop a KOL and On-Chain Intelligence Dashboard. This tool will aggregate and visualize influencer activity, key opinion trends, wallet movements, and network-level metrics, providing users with actionable insights into market sentiment and capital flow dynamics.
Challenges
The increasing complexity of multi-chain ecosystems, combined with MEV dynamics and bridge abstractions, makes it challenging to measure genuine activity and liquidity across networks. To address this, we are investing in proprietary indexing and reconciliation systems that operate across the mempool, execution, and settlement layers, ensuring data integrity, consistency, and verifiability.
Market manipulation tactics such as wash trading, Sybil farming, and governance capture evolve rapidly in sophistication. Our anomaly detection models and venue quality weighting frameworks are continuously retrained to adapt to emerging behaviors, preserving the reliability of our market integrity and trust metrics.
A significant portion of projects still lack standardized and auditable disclosures, limiting transparency for investors and regulators. We are advocating for verifiable attestations—including proof-of-reserves and other cryptographic validations—for applicable entities. Projects that fail to meet these transparency standards are systematically penalized within our rating framework.
In short, TokenInsight’s edge is disciplined methodology, security-centric analytics, and independence—delivered in ways that risk, compliance, and product teams can actually operationalize.
APP
