It would be better for the industry if you would consider doing something else than launching new exchange if you have questions about security. Security requirements for an exchange go way above technical security. Compliance to AML/KYC regulations should be on top of your list, which will drive technical requirements.