That is a very accurate question!
It's very easy to miss out on some major security flaws when you're focused on your product just yourself, therefore, we're partnering with third parties to get their feedback on any possible security issues regularly. For example, we're running a self-hosted bug bounty program to engage ethical hackers in search of vulnerabilities. As well as having regular security audits (pentests) from top security companies to further improve application security. As for the asset security, we are in a partnership with Ledger Vault that provides us with top tier cold storage solution utilizing Hardware Security Modules (HSM). There are other partners that I can name such as iComply and Kafka.