I've just run across this the other day, it is a set of guidelines for securing cryptocurrencies: https://cryptoconsortium.org/standards/CCSS . It is about the core crypto asset concerns, not about how to protect a web server.

Here is a report which uses the guideline to assess a company's posture after a hack: https://www.scribd.com/doc/309591980/ShapeShift-Postmortem (sorry about the scribd link, haven't been able to find pdf.)

Here is a narrative description of the hack that the above report is about: http://moneyandstate.com/looting-of-the-fox/