Candleread
Crypto and DeFi · Custody and Security

Exchange custody risk: the FTX lesson

Use real exchange failures to teach what 'exchange custody risk' actually looks like and how to size around it.

3 min read+25 XPLesson 65 of 79
Start reading

Lesson path

Crypto and DeFi

Custody and Security

Lesson 65 of 7982%
Lesson 65 of 79Crypto and DeFiCustody and Security

Today's tiny win: make one idea click.

Use real exchange failures to teach what 'exchange custody risk' actually looks like and how to size around it.

Learn itSpot itPass the check

The case studies that wrote the rule

Lesson one introduced the phrase 'not your keys, not your coins.' This lesson is the case file. Three names show up over and over when crypto people talk about exchange risk: Mt. Gox, Celsius, FTX. They are not the only failures, but they're the ones every trader should know.

Wick holds a clipboard of exchange rules with checks: trading cash only, long-term stack off it, spread across venues, watch for silence.Exchange rulesTrading cash onlyLong-term stack off itSpread across venuesWatch for silence
Wick saysKeep only trading money on an exchange and store the long-term stack in your own wallet.

Mt. Gox was the largest Bitcoin exchange in the early 2010s. In 2014 it collapsed, with hundreds of thousands of bitcoins missing — a mix of hacks, mismanagement, and unclear internal records. Customers waited many years for partial recovery, and some are still waiting. Mt. Gox taught the first generation of crypto users that 'the leading exchange' is a marketing label, not a guarantee.

Celsius was a crypto lending platform that froze withdrawals in mid-2022 and filed bankruptcy soon after. Customers had thought of Celsius as a kind of crypto savings account — high yields, interest paid in kind. When it failed, those balances became unsecured claims. BlockFi followed a similar arc. The pattern repeated: a familiar-feeling 'crypto bank,' a yield product, a sudden freeze, a bankruptcy filing.

Wick looks worried under a thought cloud saying this exchange is too big to fail, teaching that a famous brand is an opinion, not proof of safety.This exchange is toobig to fail.
Wick saysToo big to fail is what customers said right before they became creditors in court.

FTX was the most public. In November 2022, one of the most trusted-looking exchanges in crypto collapsed in about a week. The detail that mattered most to customers: an exchange that had been marketed as safe and well-capitalized had been using customer funds in ways customers had no idea about. The CEO went to prison. Customers waited through a long bankruptcy. The label 'reputable' had been an opinion, not a fact.

How do you size around this without abandoning exchanges? Three working rules. One — never hold long-term wealth on an exchange. Trading capital and an active float are fine; the long-term stack lives in self-custody. Two — spread across multiple reputable venues if you trade actively, so no single failure takes out your operation. Three — know what each exchange publishes about reserves and audits, and notice when those communications go silent. The exchanges that failed almost always stopped talking clearly before they stopped paying.

A newspaper headline reads exchange pauses withdrawals while a practice chart drops, showing the freeze pattern seen at Mt. Gox, Celsius and FTX.MARKET NEWSExchange pauseswithdrawalsPractice chart?
Wick saysExchanges that failed often went quiet before they stopped paying, so notice the silence.

Recap: exchange failure is not a tail risk in crypto, it's a recurring event. Trade on exchanges, store long-term holdings off them, and don't trust a brand to be a guarantee.

Knowledge check

Answer before moving on.

0 / 3 answered

1. Which statement best captures the lesson of FTX for an everyday crypto trader?

2. An active trader with a $500 trading account asks: should they pull their balance off the exchange every night?

3. Before exchanges have failed, what's a common warning signal customers tended to notice in hindsight?

Lesson handoff

Pass the check before saving.

Use the knowledge check first. After you pass it, this card turns into the save-and-continue handoff.