This does not surprise me at all. This exchange did not have an SSL/TLS cert until after I e-mailed them about it. Kucoin is another exchange with very poor security standards.