Centralized exchanges are the most common on-ramp into crypto. Most people buy their first Bitcoin or Ethereum on an exchange, and many keep their funds there long-term. But history has shown again and again that exchanges carry real risk: hacks, bankruptcies, fraud, and regulatory seizures.
From Mt. Gox to FTX, billions of dollars in user funds have been lost because of exchange failures. If you keep all your crypto on an exchange, you don’t truly own it — you just have a promise that they’ll give it back. In this guide, we break down the risks of centralized exchanges and exactly how to protect your funds.
For related account and wallet safeguards, read Crypto 2FA Guide: Authenticator Apps, Hardware Keys, and Common Authentication Mistakes.
Why Exchanges Carry Risk
Before we talk about solutions, let’s understand why keeping money on an exchange is risky.
Custody Risk: Not Your Keys, Not Your Crypto
When you deposit crypto into an exchange, you don’t hold the private key anymore. The exchange holds it for you. You become an unsecured creditor, not an owner.
If the exchange goes bankrupt, gets hacked, or runs off with the money, your funds are gone. There’s no FDIC insurance for crypto. There’s no customer protection fund. You’ll be lucky to get pennies on the dollar after years of bankruptcy proceedings.
Hack Risk
Exchanges are the biggest targets for hackers. They hold billions of dollars in one place, making them extremely attractive targets.
Over the years, hundreds of exchanges have been hacked. Some survive and reimburse users. Many don’t. Even big, well-known exchanges are not immune.
Operational and Regulatory Risk
Exchanges can face regulatory crackdowns, freeze user accounts, delist assets, or block access based on your location. Internal fraud, mismanagement, and embezzlement are also very real risks in the largely unregulated crypto industry.
Key Strategies to Protect Your Funds
You don’t have to stop using exchanges entirely. You just have to use them wisely. Follow these rules to minimize risk.
1. Self-Custody for Long-Term Holdings
The golden rule of crypto: not your keys, not your crypto. Any crypto you plan to hold for more than a few weeks should be withdrawn from exchanges to your own self-custody wallet.
For maximum security, use a hardware wallet for large long-term holdings. This eliminates all exchange risk entirely.
Think of exchanges like a checkout counter, not a bank. Use them to buy and sell, then move your money out.
2. Only Use Regulated, Well-Established Exchanges
Not all exchanges are equally risky. Stick to large, well-known exchanges with a proven track record of security and transparency.
Look for:
- Licenses and regulation in major jurisdictions
- Regular proof of reserves audits
- A long history of operating without major incidents
- Strong security practices like cold storage of user funds
Avoid small, unregulated offshore exchanges. The higher yields or lower fees they offer are never worth the risk of losing everything.
3. Never Leave More Than You Need on Exchanges
Only keep as much money on the exchange as you need for active trading. The rest should be in self-custody.
A good rule of thumb: keep no more than 5–10% of your total crypto portfolio on exchanges at any time. If you’re not actively trading, there’s no reason to keep anything there.
4. Enable Every Security Feature
If you do use an exchange, lock down your account as much as possible:
- Use a strong, unique password
- Enable two-factor authentication (2FA) with an authenticator app, not SMS
- Set up withdrawal whitelists so funds can only be sent to addresses you approve
- Enable anti-phishing codes and email confirmations for withdrawals
- Never share account credentials with anyone
5. Diversify Across Exchanges and Wallets
Don’t keep all your trading funds on one exchange. Spread them across 2–3 major exchanges. That way, if one fails, you don’t lose everything.
Similarly, don’t keep all your self-custody funds in one wallet. Use multiple wallets for different purposes.
What to Do If an Exchange Fails
If an exchange you use gets hacked, files for bankruptcy, or stops processing withdrawals:
- Document everything: Save screenshots of your balance, transaction history, and all communications.
- Stop depositing more money: Don’t throw good money after bad.
- Follow official updates: Get information only from the exchange’s official website and verified channels.
- Join user groups: There will usually be community groups organizing for refunds and legal action.
- Learn the lesson: Next time, keep less money on exchanges and use self-custody.
Final Thoughts
Centralized exchanges are useful tools. They’re the easiest way to buy and sell crypto with fiat money, and they offer advanced trading features you can’t get anywhere else. But they are not safe places to store your savings long-term.
The crypto ethos is built on self-custody and ownership. The whole point of crypto is that you can be your own bank. Take advantage of it. Use exchanges as on-ramps and trading platforms, but hold your own keys for anything that matters.
For more security guides and risk management tips, browse our Security category and stay one step ahead of threats.