Is It Safe to Leave Crypto on an Exchange After Past Collapses?
Direct answer
Exchange custody: what protects you
It is safe only to the extent that the exchange stays solvent, honest and unhacked, because there is no government insurance behind most crypto balances. SIPC says it does not protect digital assets that are not registered securities, even at a SIPC-member firm. Some regulators, such as New York's DFS, expect licensed custodians to segregate customer coins and not use them for their own purposes, which helps in an insolvency, but many global exchanges are not under such rules. The practical answer is to keep only what you trade on an exchange and hold long-term coins in a wallet you control, if you can secure your own seed phrase.
- SIPC does not cover crypto that is not a registered security
- New York DFS expects segregated, customer-only wallets and no lending of customer coins
- Bybit lost about $1.5 billion to hackers in February 2025 (FBI IC3)
- Exchange bankruptcies can freeze withdrawals for years
- Self-custody moves the risk to you: lose the seed phrase and the coins are gone
"Not your keys, not your coins" became a slogan because people who trusted exchanges lost access to their money. The opposite risk is just as real: people who hold their own keys lose them, or get tricked into handing them over. The right answer is a split, not a slogan.
What people on X are asking
In April 2026 one crypto education account put the question plainly: is it safe to leave crypto on an exchange? In October a markets account summarised a foundation executive's contrarian view that you should keep a portion of your crypto on an exchange, arguing that hacked exchange customers were made whole while drained self-custody wallets are not. We have not verified every reimbursement claimed there. The same month another user simply asked whether to move crypto into wallets or keep it on an exchange.
The fact-checked answer
There is no deposit insurance for most crypto. SIPC, which protects customers when a US broker-dealer fails, states that it does not protect any digital asset that does not qualify as a "security" under the Securities Investor Protection Act, and that unregistered digital asset securities are not covered even if held at a SIPC-member firm. Bank deposit insurance does not cover crypto either. If an exchange becomes insolvent, crypto customers usually become claimants in a bankruptcy process. See what SIPC covers when a stock broker fails for the contrast.
What went wrong in 2022. Several large crypto lenders and exchanges filed for bankruptcy in 2022 after using or lending out customer assets. Withdrawals were frozen first; customers then waited through long court processes, and many were repaid in dollars at the value on the bankruptcy date, missing later price rises. The lesson was not that every exchange is fraudulent but that customers often could not tell whether their coins were held one-for-one.
What good custody rules look like. In January 2023 the New York State Department of Financial Services issued guidance for licensed virtual currency custodians, later updated in September 2025. It expects them to:
- segregate customer coins from the company's own, on-chain and in internal ledgers;
- hold them in per-customer wallets or omnibus wallets that contain only customer assets;
- take possession only for safekeeping, without creating a debtor-creditor relationship;
- never use customer coins to secure or guarantee the company's obligations or lend them out;
- disclose clearly how assets are held, including any sub-custodian.
Those rules make it more likely that customer coins sit outside the estate if the company fails. They apply only to New York-licensed entities. Offshore exchanges may promise similar things in their terms but are not supervised the same way. A published proof of reserves helps, but it does not show liabilities in full.
Hacks are a separate risk. About $1.5 billion in virtual assets was stolen from Bybit around 21 February 2025, an attack the FBI attributed to North Korea. Whether customers are compensated after a hack depends on the exchange's own capital, not on any guarantee. Even a well-run exchange can also freeze an account for compliance reasons, which is a different kind of access risk.
UXS decision diagram
How much should stay on an exchange?
Text version of the diagram
- Are you actively trading these coins this week? If no: Long-term holdings: consider a wallet you control
- Is the exchange regulated where you live and does it state that customer assets are segregated? If no: Keep balances small and withdraw regularly
- Could you lose this amount without serious harm if withdrawals froze for a year? If no: Reduce the balance to that amount
- Have you secured your own seed phrase offline and tested a small withdrawal? If no: Learn self-custody first; a lost phrase is permanent
- Otherwise: Keep only the trading float on the exchange and the rest in self-custody
Diagram drawn by UXS. A simplified decision aid for education, not a recommendation.
Self-custody has its own failure modes. Holding your own keys removes exchange risk but adds three of your own: losing the seed phrase, having it stolen, and signing a malicious transaction. Scams aimed at self-custody users are a large share of the $9.3 billion in crypto losses reported to the FBI's IC3 in 2024. If you are not ready to store a seed phrase safely, a regulated custodian or a spot bitcoin ETF may be the safer route for a small holder.
A sensible split. Many experienced holders keep a trading float on one or two reputable exchanges and the long-term stack in a hardware wallet. Spreading the float across more than one exchange reduces the damage if one freezes.
Quick poll
Where do you keep most of your crypto?
What each answer means
- On one exchange: Simple, but all eggs in one basket if it freezes or fails.
- Split across two or more exchanges: Spreads failure risk; still no insurance.
- Hardware or software wallet I control: Removes exchange risk; the seed phrase becomes the single point of failure.
- An ETF or regulated custodian: Gives up direct ownership for familiar protections.
Your answer is stored only in this browser (localStorage). UXS does not collect, count or publish votes, so no totals are shown.
Decision helper
| Situation | Suggestion |
|---|---|
| Day trading | Keep the float on the exchange you trade on |
| Holding for years | Self-custody or a regulated custodian |
| Small amount, no wallet experience | A reputable regulated platform, small balance |
| Large amount | Split; consider a multi-signature or professional custody |
| Exchange delays withdrawals | Treat as a warning sign and withdraw what you can |
Related reading: whether stablecoins are safe, how much of a portfolio to put in crypto and how fake support accounts steal wallets.
Common mistakes
- Assuming a big, well-known exchange cannot fail.
- Leaving staking or "earn" balances that may be lent out.
- Moving everything to self-custody without a tested backup.
- Ignoring early warning signs like paused withdrawals.
FAQ
Is crypto on an exchange insured?
Generally no. SIPC does not cover crypto that is not a registered security, and bank deposit insurance does not apply.
What happens to my crypto if an exchange goes bankrupt?
You usually become a creditor and wait for a court process; segregated assets may be returned faster.
Did Bybit customers lose money in the 2025 hack?
The FBI says about $1.5 billion was stolen; compensation depended on the exchange, not on any insurance scheme.
Is self-custody always safer?
It removes exchange risk but adds the risk of losing or leaking your seed phrase.
What does segregation of customer assets mean?
Customer coins are held separately from the company's own and are not used for its business.
How much crypto should I keep on an exchange?
Only what you need for trading, and an amount you could live without if withdrawals froze.
Sources
- SIPC: What SIPC protects
- NYDFS: Guidance on custodial structures for customer protection in the event of insolvency (Jan 23, 2023)
- FBI IC3 PSA I-022625: North Korea responsible for $1.5 billion Bybit hack
- FBI IC3: 2024 Internet Crime Report
Facts checked November 10, 2026. X posts are cited as evidence of the question, not of the answer.