Ask HN: Any hack/anti-hack resources/experiences?

I and my project mate are currently building an android application for some banks. Application connects to a https server to validate the device plus another server to retrieve data. We write any server and application stuffs. I'm asking you for some nice resources and your experiences. Thanks for any help.