Where the real risk on a major exchange sits: withdrawal access and custody
The main risk is not “size”, but access control: in a stress period, an exchange can delay or restrict withdrawals because of checks, limits or outages.
Put simply: while funds are on a CEX, they are under the operator’s control. On normal days, that is convenient. In a stress scenario, “pauses” can appear: checks, delays, limits, regulatory requirements or technical failures.
- Withdrawal delays/freezes → compliance checks, abnormal activity, KYC/AML requirements, regional restrictions.
- Custody risk → a hack, internal mistake, asset freeze or management failure — you do not control the keys.
- Transparency snapshot risk → even public reports and Proof of Reserves (PoR) are not the same as a guarantee that the platform will remain resilient “tomorrow”.
- Market stress → volatility increases outages, withdrawal queues and operational restrictions.
A typical CEX risk-management practice is to separate roles: keep only a trading balance on the exchange, protect access with 2FA and an address whitelist, and keep the reserve in self-custody.
What even a large exchange does not guarantee:
- “Large exchange” does not mean “access to funds is guaranteed at any moment”.
- “Reports exist” does not mean there are no management, compliance or liquidity risks.
- Without a storage and withdrawal plan, you depend on the operator’s decisions in a stress scenario.
🧱 How large capital chooses an exchange: liquidity, withdrawals, compliance and PoR
Exchange-selection criteria: withdrawal limits, OTC infrastructure, compliance procedures, reporting and typical risks around access to funds.