Comparison Overview
Figure Digital Assets

Figure Digital Assets
N/A
Last Update: 05/09/2026
Figure is building the connected system for capital markets onchain. With 380+ financial institutions across the Figure ecosystem and $25B+ in home equity loans moving through the Figure infrastructure, we are rebuilding capital markets with lower costs and improved ef...

FactSet
43 Glover Ave, Norwalk, Connecticut, US, 06850
Last Update: 01/04/2026
FactSet creates flexible, open data and software solutions for tens of thousands of investment professionals around the world, providing instant access to financial data and analytics that investors use to make crucial decisions. For 40 years, through market changes a...
Compliance Ranges Comparison

Figure Digital Assets







FactSet






Benchmark & Cyber Underwriting Signals
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for Figure Digital Assets in 2026.
Incidents vs Financial Services Industry Avg (This Year)
FactSet has 2.91% fewer incidents than the average of all companies with at least one recorded incident.
Incident History - Figure Digital Assets (X = Date, Y = Severity)
Figure Digital Assets cyber incidents detection timeline including parent company and subsidiaries.
Incident History - FactSet (X = Date, Y = Severity)
FactSet cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Figure Digital Assets

FactSet
FAQ
Latest Global CVEs
Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user running Vibe.
- https://github.com/mistralai/mistral-vibe
- https://github.com/mistralai/mistral-vibe/blob/19b5b74faa78d0816b8d4d4c7d7543fc3520678c/vibe/core/git/repo.py#L411-L431
- https://github.com/mistralai/mistral-vibe/commit/c069ffa1e12fb5f2487b489217c40ab97721d553
- https://github.com/mistralai/mistral-vibe/issues/996
- https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.5
- https://www.vulncheck.com/advisories/mistral-vibe-before-2.25.5-remote-code-execution-via-git-post-checkout