Risks of Keeping Cryptocurrency on Exchange vs Self-custody Wallet Review Framework: What Users Should Check Before Signing Up
A practical framework to evaluate the risks of keeping cryptocurrency on exchange vs self-custody wallets. Learn what to check before signing up, including fees, security, compliance, and user support — so you can make an informed decision that aligns with your risk tolerance and needs.
📅 Updated July 2026 • 10 min read
💰 Fees and spreads: the hidden cost of custody
Fees are not just a minor inconvenience — they are a critical factor that can erode your portfolio over time. Exchanges generate revenue through multiple fee streams, and understanding them is essential before you commit your funds.
Trading fees
Most exchanges charge a percentage-based fee on every trade, typically split into maker (liquidity provider) and taker (liquidity remover) fees. These can range from 0.1% to 0.5% per trade, with discounts for high-volume traders or users who hold the exchange's native token.
Withdrawal fees
Exchanges often charge a flat withdrawal fee that may be fixed or dynamic based on network congestion. Some exchanges include a spread above the actual network fee, making withdrawals more expensive than they appear. Always compare the withdrawal fee to the actual blockchain gas cost.
Deposit and conversion fees
Deposits are often free for crypto, but fiat deposits may carry a percentage-based fee or a fixed wire transfer cost. Conversion fees for swapping between currencies within the exchange can also be significant, especially for less liquid pairs.
📊 Key takeaway
Before signing up, check the fee schedule on the exchange's website. Look for transparency — reputable exchanges publish their fees clearly. Also, be aware that fees can change, so revisit this information periodically.
📦 Asset coverage and liquidity
Not all exchanges support the same assets, and even when they do, liquidity can vary significantly. This affects your ability to trade, withdraw, and hedge.
Asset availability
Major exchanges support hundreds of tokens, but smaller or regional exchanges may have limited offerings. If you plan to hold a specific altcoin, verify that the exchange supports withdrawals to a self-custody wallet — some tokens may be locked behind trading-only restrictions.
Liquidity and slippage
Liquidity refers to the volume of buy and sell orders on the exchange. Low liquidity means larger spreads and higher slippage, which can cost you money when trading. Check the 24-hour trading volume for your preferred pairs to gauge liquidity quality.
Proof of reserves
In the wake of several exchange collapses, many platforms now publish proof-of-reserves reports. These are third-party audits that verify the exchange holds enough assets to cover customer balances. While not a guarantee of safety, it is a positive signal worth checking.
🔑 Custody and control: who holds your keys?
The fundamental difference between an exchange and self-custody is who controls the private keys. This distinction carries profound implications for your security and autonomy.
Exchange custody (custodial)
When you keep funds on an exchange, the exchange holds your private keys. You are essentially a creditor — the exchange owes you the assets, but they are not in your direct control. This introduces counterparty risk: the exchange could freeze withdrawals, become insolvent, or be hacked.
Self-custody (non-custodial)
With self-custody, you hold your private keys using a hardware wallet, a software wallet, or a paper wallet. You alone are responsible for the safety of your funds. There is no counterparty risk, but there is personal responsibility risk: losing your seed phrase or falling for a scam can result in total loss.
⚠️ Critical distinction
Exchanges are financial intermediaries; self-custody is true ownership. The phrase "not your keys, not your coins" captures this essential truth. However, self-custody comes with its own set of risks that many users underestimate.
🛡️ Security and breach history
Security is the most visible risk when it comes to exchanges. Hacks, insider theft, and technical vulnerabilities have led to billions of dollars in customer losses.
Exchange security measures
Cold storage: What percentage of funds are held offline (cold storage) vs online (hot wallets)? A higher cold storage percentage reduces exposure to hacks.
Insurance: Does the exchange have insurance coverage for customer funds? Some exchanges have insurance programs, but they often have limits and exclusions.
Bug bounty programs: A public bug bounty program indicates a proactive security culture.
Historical breaches: Has the exchange been hacked before? If so, how did they respond, and were customers made whole?
Self-custody security
Self-custody wallets shift the security burden to you. Risks include:
Loss or theft of the seed phrase (single point of failure).
Malware or phishing attacks that compromise your wallet.
Physical damage to hardware wallets.
Sending funds to incorrect addresses (irreversible).
There is no one-size-fits-all security solution — you must weigh the trade-offs based on your technical comfort and the value of your assets.
⚖️ Compliance and regulatory standing
Regulatory risk is increasingly important in the crypto space. Exchanges operate under different legal frameworks depending on their jurisdiction, and these can change rapidly.
Licensing and registration
Check whether the exchange is registered with relevant financial authorities. In the U.S., this includes FinCEN registration and state-specific money transmitter licenses. In Europe, look for MiCA compliance. Regulatory oversight provides some degree of accountability.
Jurisdiction risks
Where is the exchange headquartered? Countries with unstable regulatory environments or weak legal frameworks pose higher risks. Also, consider that an exchange operating in one country may freeze or restrict accounts based on international sanctions or political pressures.
KYC/AML policies
Know Your Customer (KYC) and Anti-Money Laundering (AML) policies are standard on most reputable exchanges. While these can be inconvenient, they also deter fraudulent activity and can provide a layer of accountability. Be wary of exchanges that operate completely anonymously with no compliance procedures.
🧑💻 User support and reputation
When something goes wrong — and in crypto, it often does — the quality of customer support can be the difference between a quick resolution and a prolonged nightmare.
Support channels
Check if the exchange offers live chat, email support, phone support, or a ticket system. Test response times by sending a pre-signup inquiry. Many exchanges are notoriously slow to respond, especially during high-volume periods.
Community reputation
Search for the exchange on Reddit, Twitter, and crypto forums. Look for patterns in complaints — are users consistently reporting frozen accounts, delayed withdrawals, or poor communication? A few complaints are normal, but systemic issues are a red flag.
Transparency
Does the exchange have a dedicated status page for system outages? Do they communicate proactively about maintenance and security incidents? Transparency is a strong indicator of a well-managed platform.
⚖️ Exchange vs. self-custody: a risk-based comparison
Risk factor
Exchange (custodial)
Self-custody (non-custodial)
Control over keys
Exchange controls keys
You control keys
Counterparty risk
High — exchange insolvency, freeze
None — no third party
Hack risk
Exchange can be breached
You are responsible for security
Loss of funds
Possible via exchange failure
Possible via lost seed or scam
Regulatory risk
High — can freeze accounts
Minimal — you hold assets
User support
Available but often slow
No support for lost funds
Convenience
High — easy to trade
Lower — more steps required
Cost of use
Trading and withdrawal fees
Network gas fees only
✅ Practical checklist before signing up with an exchange
Review the fee schedule for trading, deposits, and withdrawals.
Confirm that the exchange supports the cryptocurrencies you intend to use.
Check the 24-hour trading volume for your preferred trading pairs.
Research the exchange's security history — has it been hacked before?
Find out what percentage of funds are held in cold storage.
Look for proof-of-reserves or third-party audits.
Verify the exchange's regulatory status and licensing in your jurisdiction.
Test customer support response time by asking a pre-signup question.
Read online reviews and community feedback — look for patterns.
Review the terms of service carefully, especially regarding account freezes and dispute resolution.
Plan a withdrawal strategy — test a small withdrawal before depositing large amounts.
Set up 2FA with an authenticator app (not SMS) immediately after account creation.
🧪 Scenario example: evaluating two platforms
📊 Marcus's decision process
Marcus has $15,000 in cryptocurrency and wants to choose between Exchange A and a self-custody hardware wallet. He uses the following framework:
Exchange A: Popular, regulated in the U.S., high trading volume, but withdrawal fees are $5 flat. It has never been hacked and holds 95% of funds in cold storage. Support response time is 4-6 hours.
Self-custody (Ledger): One-time cost of $79. No recurring fees, but Marcus will need to manage his own security. He plans to hold long-term and only trade occasionally.
Marcus decides to use the exchange for active trading (keeping only 10% of his funds there) and self-custody for the majority of his long-term holdings. He tests the exchange with a small deposit and withdrawal before moving larger amounts.
Lesson: A hybrid approach — using an exchange for trading and a hardware wallet for savings — offers the best balance for many users.
🚫 Common mistakes users make with exchange and self-custody
Leaving large balances on exchanges: Treat exchanges as a hot wallet, not a bank. Withdraw funds to self-custody after trading.
Not enabling 2FA: SMS-based 2FA is vulnerable to SIM-swapping. Always use an authenticator app or hardware key.
Failing to back up seed phrases: A lost seed phrase means permanent loss. Back up securely and in multiple physical locations.
Using the same password across platforms: Credential stuffing attacks are common. Use unique passwords for each exchange and wallet.
Ignoring withdrawal fees: Some exchanges charge high withdrawal fees that eat into your balance. Factor this into your cost calculations.
Falling for phishing links: Always type the exchange URL manually or use a bookmark. Never click on links in unsolicited messages.
Not reading the terms of service: Terms often include arbitration clauses, liability waivers, and conditions under which the exchange can freeze your account.
Underestimating self-custody responsibility: Self-custody means you are your own bank. There is no recovery option if you make a mistake.
🚨 Risk warning: both options carry material risks
Critical risks you must understand before choosing
Exchange insolvency: Exchanges can go bankrupt, and customers may become unsecured creditors, potentially losing all funds.
Exchange hacks: Even well-secured exchanges have been breached. No exchange is 100% immune.
Account freezes: Exchanges can freeze your account for suspected fraud, compliance checks, or regulatory demands — sometimes without warning.
Loss of private keys: In self-custody, if you lose your seed phrase or it is stolen, there is no recourse. Funds are irretrievable.
Phishing and scams: Self-custody users are frequent targets of phishing attacks designed to steal seed phrases or login credentials.
Regulatory changes: Governments may impose new rules that affect exchange operations or the legality of self-custody in your jurisdiction.
Human error: Sending funds to the wrong address, forgetting passwords, or misconfiguring wallet settings can result in permanent loss.
This article is for informational and educational purposes only. It does not constitute financial, legal, or tax advice. Cryptocurrency involves significant risk, and you should consult a qualified professional before making any financial decisions. Always conduct your own research (DYOR) and never invest more than you can afford to lose.
❓ Frequently asked questions
What are the main risks of keeping crypto on an exchange?
The main risks include exchange hacks, insolvency or bankruptcy, withdrawal freezes, regulatory actions, account seizure, and the exchange unilaterally changing terms. You also lose direct control over your private keys, meaning the exchange is the ultimate custodian of your funds.
What is self-custody and how does it work?
Self-custody means you hold your own private keys, giving you exclusive control over your cryptocurrency. This is typically done using a hardware wallet, software wallet, or paper wallet. With self-custody, you are responsible for security, backups, and preventing loss or theft.
What happens if an exchange goes bankrupt?
If an exchange goes bankrupt, your funds may become trapped in the legal proceedings. In many cases, customers become unsecured creditors and may receive only a fraction of their funds, if anything. This is exactly what happened during the collapse of FTX and several other exchanges.
Can I lose my crypto in a self-custody wallet?
Yes. You can lose your crypto if you lose your seed phrase, if your device is compromised by malware, if you fall for a phishing scam, or if you send funds to the wrong address. Unlike an exchange, there is no customer support to reverse transactions — you are solely responsible.
Which is safer: a hardware wallet or keeping funds on an exchange?
Hardware wallets are generally considered safer for long-term storage because they keep private keys offline and immune to remote hacks. However, they introduce personal responsibility risks. Exchanges offer convenience but expose you to institutional risks like insolvency or hacking. There is no universally 'safer' option — it depends on your threat model.
What is 'not your keys, not your coins'?
This is a foundational principle in crypto that means if you do not control the private keys, you do not truly own the cryptocurrency. When you keep funds on an exchange, the exchange holds the keys and you have a custodial claim — a promise to return your funds, not the actual assets.
Do I need to pay taxes when moving crypto to self-custody?
In many jurisdictions, moving your own crypto between wallets you control is not a taxable event. However, selling crypto on an exchange for fiat or trading one crypto for another typically is. Tax rules vary by country and can change. Always consult a qualified tax professional for personalized advice.
How can I reduce the risks of using an exchange?
To reduce risks: use a reputable exchange with a strong track record, enable two-factor authentication (2FA) with an authenticator app, withdraw funds to self-custody after trading, avoid keeping large balances on exchanges, and stay informed about the exchange's financial health and regulatory standing.
All information, fees, and regulatory statuses are subject to change. Always verify current conditions directly with the relevant exchange or wallet provider before making any decision.