Why You Can’t Fully Trust Centralized Exchanges

What Is A Centralized Exchange?

A centralized exchange (CEX) is a crypto trading platform run by a single company that holds customer funds, matches trades and sets the rules. Examples include Coinbase, Kraken, Gemini, Binance and OKX.

A decentralized exchange (DEX) works differently. Trades run through smart contracts on a blockchain, and your coins stay in your own wallet until the moment you trade. Our page on centralized vs. decentralized exchanges compares the two in detail.

Save This Article

Email this article to yourself

We'll send you a link to "Why You Can’t Fully Trust Centralized Exchanges" so you can read it later, plus The Weekly Ritual, our free newsletter. Unsubscribe anytime.

Email address

Email It To Me

Email me this article and sign me up for The Weekly Ritual. See our privacy policy.

Why People Use Centralized Exchanges

Centralized exchanges are the most common way to buy crypto because they solve problems a DEX doesn't:

• Cash in and out: you can deposit dollars, pounds or euros by bank transfer or card, which most DEXs can't do.
• Simple apps: buying Bitcoin feels like using a stock app, with no wallet setup or network fees to learn.
• Customer support: if you forget your password, you can reset it.
• Regulation: many large exchanges hold licenses, such as a New York BitLicense in the US or registration under the EU's MiCA rules, which adds some accountability.

Those benefits are real. They just come with trade-offs that the app doesn't show you.

Five Reasons Not To Fully Trust A Centralized Exchange

1. The Exchange Holds Your Keys

When your coins sit on an exchange, the company holds the private keys and you hold a login. That's the core of the saying “not your keys, not your coins”.

If the exchange fails, customer coins can end up in bankruptcy court. FTX halted withdrawals in November 2022, and its founder was later sentenced to 25 years for stealing customer funds. Celsius founder Alex Mashinsky was sentenced to 12 years in May 2025. FTX customers are being repaid in cash at November 2022 values, not in the coins they held.

2. The Exchange Can Freeze Or Pause Withdrawals

An exchange can lock your account during a compliance review, pause withdrawals during a hack and decide when to reopen them. On Oct. 29, 2026, Binance paused withdrawals after attackers took about $6.3 billion from its hot wallets, a theft the FBI attributed to North Korea's TraderTraitor group. Binance pledged to cover the losses from its protection fund and company money and said about 95% was covered as of Nov. 1, 2026. It reopened withdrawals in phases starting Nov. 1, and a few assets were still waiting on security checks as of Nov. 8.

Not every hack ends badly. Bybit lost about $1.5 billion in February 2025, an attack the FBI attributed to North Korea, and replaced the stolen ETH within about three days while keeping withdrawals open. Bitget said customer balances weren't affected after a September 2026 hot wallet hack. It first put the loss at about $352 million and later raised it to about $387 million after counting Zcash and Tron transfers, and said the loss fell within its user protection fund. The outcome depends on the exchange's reserves, which you can't see in full.

3. The Exchange Chooses Which Coins You Can Trade

An exchange decides which coins to list and can delist one with short notice. When that happens, you may have a few weeks to sell or withdraw before trading stops. Coin selection also varies by country, so a coin listed on an exchange's global site may not be available to you.

4. Account Takeovers Often Aren't Covered

Exchange insurance or protection funds usually cover the exchange's own losses, such as a hot wallet hack. They usually don't cover a thief who logs in to your account with a stolen password or tricks you into sending funds.

Data leaks make that more likely. In May 2025, Coinbase disclosed that criminals had bribed overseas support agents to copy customer data, which they used to impersonate Coinbase and scam users. In a May 2025 filing, Coinbase estimated the cost at $180 million to $400 million and said it would reimburse customers tricked into sending funds.

Crypto isn't covered by FDIC deposit insurance or SIPC protection, even when an exchange's cash balances are. That includes stablecoins like USDC.

5. Oversight Varies By Exchange And Country

Some of the largest exchanges have broken the law. Binance pleaded guilty in 2023 and agreed to pay about $4.3 billion over money laundering and sanctions violations. KuCoin pleaded guilty in January 2025 and agreed to leave the US market, and OKX pleaded guilty a month later. Our crypto fines and penalties tracker lists more.

Rules changed in 2025. The SEC dropped its lawsuit against Coinbase in February 2025 and later dismissed its cases against Binance and Kraken. In Europe, exchanges now need a license under the Markets in Crypto-Assets regulation (MiCA), and the transition period that let firms keep operating under older national rules ended no later than July 1, 2026. In the UK, exchanges must register with the Financial Conduct Authority. None of these rules guarantees your coins the way deposit insurance does.

How To Use A Centralized Exchange More Safely

You can keep the convenience and cut most of the risk with a few habits:

1. Check the record. Look up an exchange in our crypto hacks tracker and penalties tracker before you deposit.
2. Pick one that serves your country legally. Coinbase and Kraken serve the US, UK, EU, Canada and Australia. Binance serves most of the world but not the US, where Binance.US is a separate company. KuCoin doesn't serve the US.
3. Look for proof of reserves. Several exchanges publish regular attestations that they hold customer assets one to one. It's not an audit, but it beats nothing.
4. Lock down your login. Use a unique password, an authenticator app or security key, and a withdrawal address allowlist if the exchange offers one.
5. Withdraw what you don't trade. Move long-term holdings to a hardware or software wallet you control.

To compare exchanges on cost, safety record and reliability, see our ranking of the best crypto exchanges.

Risks Of Leaving The Exchange

Self-custody solves the exchange problem but creates new ones. If you lose your seed phrase, nobody can recover your coins. Phishing sites and fake wallet apps target self-custody users, and in 2026 attackers drained about $116 million from Coldcard hardware wallets through a firmware flaw. DEXs also carry smart contract risk, so a bug can cost you money even if no company fails.

The Bottom Line

Centralized exchanges are the easiest way to buy and sell crypto, and the large regulated ones work as expected most of the time. They're still companies that hold your keys and write the rules. Treat an exchange like a checkout counter, not a vault: buy there, then move anything you plan to keep to a wallet you control.

FAQ

Are Centralized Crypto Exchanges Safe?

Large exchanges with clean records are usually safe for trading, but none are risk-free. Exchanges have been hacked, frozen withdrawals and gone bankrupt, and crypto on them isn't covered by FDIC or SIPC.

What Happens To My Crypto If An Exchange Goes Bankrupt?

Your coins may become part of the bankruptcy, and you become a creditor waiting for a payout. FTX and Celsius customers waited years, and FTX customers are being repaid in cash at 2022 values rather than in coins.

Can An Exchange Freeze My Account?

Yes. An exchange can freeze an account for a compliance review, a court order or suspected fraud, and it can pause all withdrawals during a hack or outage. Its terms of service usually allow this.

Is A Decentralized Exchange Safer?

A DEX removes the company holding your coins, so it can't freeze or lose them. It adds other risks, such as smart contract bugs, scam tokens and mistakes you can't reverse.

How Much Crypto Should I Keep On An Exchange?

Keep only what you plan to trade soon. Anything you plan to hold for months is safer in a wallet where you control the keys, as long as you back up your seed phrase.