> For the complete documentation index, see [llms.txt](https://docs.hollaex.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.hollaex.com/advanced/under-attack.md).

# Under Attack?

Are you under attack? Someone (or something) is trying to hack your exchange? Follow the recommended steps below to mitigate it.

## Cloudflare Turnstile

<figure><img src="https://3965312054-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MP899VqAdyGFgLTy9SY%2Fuploads%2FNWtb5OaTTKIyXPokHtNq%2Fimage2.gif?alt=media&amp;token=134a6ee7-e9af-4a0c-b722-bccb61f4f3dd" alt=""><figcaption></figcaption></figure>

Cloudflare Turnstile is a free-to-use, next-gen CAPTCHA that helps you prevent malicious bot attacks on your exchange.

Enabling the Turnstile will prevent brute-force login and password reset attacks.

### Setup

<figure><img src="https://3965312054-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MP899VqAdyGFgLTy9SY%2Fuploads%2Fqdl74SAWXIvM0BO20MVq%2Fimage.png?alt=media&amp;token=60d1cf31-4844-45e8-a9fe-66f78b84cdfc" alt=""><figcaption></figcaption></figure>

Go to Cloudflare console, find Cloudflare Turnstile under Protect & Connect, and create a new widget.

<figure><img src="https://3965312054-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MP899VqAdyGFgLTy9SY%2Fuploads%2FC8IXujdp4TnF0ZgxNMed%2Fimage.png?alt=media&amp;token=47a8cca5-dc03-4b99-87b8-bd6612331cda" alt=""><figcaption></figcaption></figure>

Once you get the keys (both site key and secret key), open the HollaEx exchange admin panel and set it up. The list is constantly getting updated.

## Suspicious Login

<figure><img src="https://3965312054-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MP899VqAdyGFgLTy9SY%2Fuploads%2Fd07J365GRwQTOxL82nOQ%2Fimage.png?alt=media&amp;token=f6818e31-61dd-453f-8ca0-55f292a10b44" alt=""><figcaption></figcaption></figure>

Enabling the suspicious login feature on the HollaEx exchange could prevent potential account hijacking. Users will get notified when there are suspicious login events.

## Contact Support

You can always reach out to `support@hollaex.com` to ask for additional help or security advice. Our team is here to help.