For maximum security and safety of the exchange, I suggest to hire services of some penetration testing providers like Hacken or whichever you consider best. These startups have provided their services in past to other startups on blockchain. You may already have one but there should be no compromise over safety.