Cybersecurity certification platform CER said the vast majority of wallets do not hire outside experts to perform penetration tests.