In November 2022, FTX collapsed in under a week. Eight billion dollars in customer funds, gone. This wasn't a case of sophisticated hackers breaking through layers of security from the outside. The exchange itself took customer money and used it for its own purposes. It was some combination of gross negligence and outright fraud (the exact allocation between the two depends on which version of the story you believe, and how charitable you're feeling toward the people involved).
And FTX is far from the only example of "safe" funds suddenly being anything but. Celsius, Voyager, BlockFi... the list goes on. Every one of them told customers their funds were safe. Every one of them was wrong.
If your crypto is sitting on an exchange right now, this is the article you need to read.
The Short Answer (That Nobody Wants to Hear)
When a crypto exchange goes bankrupt, you become an unsecured creditor.
Let that register for a moment. Your crypto isn't "yours" in any legal sense that matters during bankruptcy. It's part of the exchange's estate, and you're in line behind employees, lawyers, secured creditors, and the various vultures that descend on a corporate carcass.
FTX creditors waited over two years for partial recovery. Many received pennies on the dollar. Some received nothing at all. This isn't a theoretical risk sitting quietly in the footnotes of a terms-of-service document. It has happened, repeatedly, to millions of people who thought their money was safe.
A Brief History of Exchange Disasters
FTX (2022): $8 Billion in Customer Losses
The CEO used customer deposits to fund risky bets through a related trading firm called Alameda Research. The timeline from "everything's fine, stop worrying" to bankruptcy filing was about ten days. Ten days.
During those ten days, customers tried to withdraw their funds. Withdrawals were delayed, then paused, then frozen entirely. By the time the bankruptcy was announced, the money was already gone. The legal proceedings dragged on for years. Some creditors eventually recovered a portion of their funds. Others didn't.
Celsius (2022): $4.7 Billion Frozen
Celsius operated as a yield-generating platform. Customers deposited crypto, Celsius paid interest on those deposits, and everything looked wonderful until it wasn't. When market conditions deteriorated, Celsius couldn't meet withdrawal requests.
Customers were told their funds were "safe" right up until withdrawals were frozen. The CEO posted reassuring messages on social media while the platform was actively insolvent. It was an extraordinary exercise in public confidence management while the building was on fire.
Mt. Gox (2014): The Original Exchange Collapse
850,000 Bitcoin lost. At today's prices, that's worth somewhere in the region of $50 billion or more. Creditors waited a decade for partial recovery. A decade. Some are still waiting.
Mt. Gox is the case that coined the phrase "not your keys, not your coins." It was supposed to be a wake-up call. For many people, it was. For many others, it took FTX and Celsius to drive the point home again, eight years later.
Why Exchanges Fail
Misuse of Customer Funds
Not all exchanges segregate customer deposits from operating capital. Some use customer funds for lending, trading, or covering operating losses. You usually don't know this is happening until it's too late, because exchanges aren't required to operate with the same transparency and regulatory oversight as traditional banks.
The fundamental problem is incentive alignment. An exchange holding billions in customer assets has an enormous temptation to put those assets to work. Some resist that temptation. Some don't. And the ones who don't are often very good at appearing like they do, right up until the moment they can't sustain the illusion.
Regulatory Gaps
Crypto exchanges often operate in jurisdictions with minimal oversight. Unlike banks, there's no government-backed deposit insurance for crypto. In Australia, your bank deposits are guaranteed by the government up to $250,000 per institution. In the US, FDIC insurance covers up to $250,000. For crypto on an exchange? Zero. Nothing. You're on your own.
The regulatory landscape is improving, slowly. Some jurisdictions now require proof of reserves, segregated accounts, or specific licensing. But enforcement is patchy, and many exchanges operate across multiple jurisdictions specifically to exploit these gaps.
Get this in your inbox every morning.
A short daily email that decodes the crypto market for people who didn't grow up with it. No hype. No financial advice. Just the signal.
Security Breaches
Exchanges are high-value targets. Billions of dollars sitting in internet-connected systems is, unsurprisingly, attractive to criminals. Hundreds of millions have been lost to hacks over the years, even at well-run exchanges with serious security teams.
This isn't a failing of any particular exchange. It's a structural risk inherent in concentrating large amounts of digital assets in a single location. The bigger the honeypot, the more sophisticated the attacks.
How to Protect Yourself
Self-Custody for Long-Term Holdings
Move the majority of your long-term holdings to a hardware wallet. Keep only what you need for active trading on an exchange.
A hardware wallet eliminates exchange counterparty risk entirely. Your crypto isn't sitting on someone else's server, subject to their solvency, their security practices, and their honesty. It's on a device you control, secured by keys that only you hold.
Self-custody comes with its own responsibilities. You need to store your seed phrase properly, test your recovery process, and maintain your security infrastructure. But those are risks you control directly, which is a fundamentally different proposition from trusting a third party and hoping for the best.
Full guide: Self-Custody for Beginners: The Complete Guide to Holding Your Own Crypto.
Diversify Across Exchanges
If you do keep funds on exchanges (for trading or as an on-ramp), don't concentrate everything in one place. Use exchanges that provide proof of reserves and operate under meaningful regulatory oversight.
A word of caution on "proof of reserves": it's better than nothing, but it's not a guarantee of solvency. An exchange can prove it holds assets while simultaneously having liabilities that exceed those assets. Proof of reserves shows one side of the balance sheet. Solvency requires both sides.
Watch for Warning Signs
Some patterns have repeated across nearly every exchange collapse:
Withdrawal delays or restrictions. "Temporary maintenance" that lasts longer than it should. If an exchange starts making it harder to get your money out, that's not a technical inconvenience. It's potentially a red flag.
CEO reassurances that "funds are safe." Counterintuitively, the louder an exchange insists everything is fine, the more nervous you should be. Both FTX and Celsius issued emphatic reassurances while actively insolvent.
Unusual yield offerings. If an exchange is offering returns that seem too good to be true, ask yourself where those returns are coming from. If you can't get a clear answer, the returns may be coming from the next customer's deposits.
The Security Infrastructure
Self-custody is the most effective protection against exchange risk, but it needs to be part of a broader security system. Hardware wallet, properly stored seed phrase, tested recovery process, and documented access for your family.
The full system: How to Secure Your Crypto: The Checklist Nobody Gave You.
And if something happened to you tomorrow, could your family access your self-custodied assets? If not: Crypto Estate Planning: How to Make Sure Your Family Can Access Your Digital Assets.
Frequently Asked Questions
Can you lose crypto if an exchange goes bankrupt?
Yes. When an exchange files for bankruptcy, customer funds are typically treated as part of the bankruptcy estate. You become an unsecured creditor, which means you're behind employees, lawyers, and secured lenders in the queue. FTX customers waited over two years for partial recovery. Some received a fraction of what they'd deposited. Others received nothing.
Is my crypto safe on Coinbase / Binance / [major exchange]?
Safer than on a smaller, less-regulated exchange, but not immune to risk. Coinbase, for example, is publicly listed and holds customer funds in segregated accounts, which provides significantly more protection than many alternatives. But even well-run exchanges carry structural risks: hacks, regulatory actions, or operational failures that are difficult to predict. Self-custody eliminates these risks entirely, though it introduces operational responsibilities that you need to manage yourself.
Are crypto exchanges insured?
Some exchanges carry insurance against hacks, but coverage is typically limited and doesn't cover insolvency or mismanagement of funds. Unlike bank deposits, there is no government-backed deposit insurance for crypto held on an exchange. Not in Australia, not in the US, not anywhere. If the exchange fails, insurance (if it exists at all) may cover only a fraction of customer losses.
What does "not your keys, not your coins" mean?
If you don't hold the private keys to your crypto (meaning they're held by a third party like an exchange), you don't have direct control over those assets. You have a claim against the exchange. In normal circumstances, that distinction is invisible. But in a bankruptcy, it becomes the only thing that matters. Self-custody users emerged from the FTX collapse, the Celsius collapse, and every other exchange failure completely unscathed. Everyone else joined the creditor queue.
How do I move crypto off an exchange?
Set up a hardware wallet, generate your receiving address, and initiate a transfer from the exchange to your wallet. Always send a small test amount first to confirm the process works before moving larger amounts. The process typically takes 10-30 minutes depending on the blockchain. Our self-custody guide walks through every step.
Crypto Decoded teaches process and systems for managing digital assets. This article is not financial advice.
Want this kind of analysis in your inbox?
A short daily email that decodes the crypto market for people who didn't grow up with it. No hype. No financial advice. Just the signal.
Former corporate lawyer and strategy consultant who spent 5 years going deep on crypto so you don't have to. I teach systems, not picks.
Subscribe to the daily email →