Is your bitcoin safe on an exchange?
Your balance is an IOU until you withdraw it.

What do you actually own when your bitcoin sits on an exchange?

A row in the exchange's database, governed by its terms of service. The bitcoin itself sits in wallets whose keys the exchange controls. Whether that row means "the exchange is safekeeping my coins" or "I lent the exchange my coins" is a contract question, decided by terms of use that almost nobody reads, and in a bankruptcy a judge will read them for you.

That is not a hypothetical. In the Celsius bankruptcy, the court found that 99.86% of Earn account holders had clicked through terms granting Celsius "all right and title to such Eligible Digital Assets, including ownership rights," and held that the coins were therefore Celsius's property, not the customers' verify×DON'T TRUST, VERIFYClaim: The Celsius bankruptcy court held that Earn account terms of use unambiguously transferred title to deposited crypto to Celsius, making the roughly 600,000 accounts' $4.2 billion in assets property of the bankruptcy estate.Verify at: In re Celsius Network LLC, Case No. 22-10964, Memorandum Opinion (Bankr. S.D.N.Y. Jan. 4, 2023) ↗This is the court's own opinion PDF. Pages 4 to 7 state the 600,000-account and $4.2 billion figures, the 99.86% clickwrap acceptance rate, and the holding that Earn assets became estate property.. The account holders became unsecured creditors, and the opinion itself warned that there "simply will not be enough value available to repay all Account Holders in full."

This is the legal reality behind the phrase "not your keys, not your coins." It is not a slogan, it is a description of how bankruptcy courts treat custodial balances when the terms transfer title. Where your holdings sit on the custody spectrum, from exchange balance to your own multisig, is mapped level by level on our bitcoin custody levels page, and exchange custody is Level 0 for a reason. The practical security of the alternatives is covered in bitcoin security.

What is proof of reserves, and what does it actually prove?

A proof-of-reserves (PoR) attestation is a cryptographic snapshot. The exchange demonstrates control of on-chainon-chainA Bitcoin payment recorded directly and permanently on Bitcoin's main public ledger, settled by the network itself rather than through a faster off-network lane.Full definition addresses holding some quantity of coins, usually by signing a message with the wallet keys, and publishes a Merkle tree built from a hash of every customer balance. You can check that your own balance is a leaf in that tree, which shows your account was included in the liability total the exchange claimed at that moment. Done honestly, it proves two things: the exchange controlled X coins at time T, and your balance was counted in the total it compared against.

What it cannot prove is the part that kills customers in a failure. The PCAOB, the US audit regulator, issued an investor advisory on March 8, 2023 stating that PoR engagements "are not audits and, consequently, the related reports do not provide any meaningful assurance," that the procedures "likely do not address the crypto entity's liabilities," and that a PoR report says nothing about whether the assets were borrowed for the snapshot or moved the day after verify×DON'T TRUST, VERIFYClaim: The PCAOB warns that proof-of-reserves reports are not audits, provide no meaningful assurance, generally do not address liabilities, and are limited to a point in time.Verify at: PCAOB Investor Advisory: Exercise Caution With Proof of Reserve Reports ↗The advisory is published by the Public Company Accounting Oversight Board, the federal audit watchdog, and lists these limitations verbatim..

So read proof of reserves the right way around. An exchange that refuses to publish one is waving a red flag. But an exchange that does publish one has shown you a photograph, not a balance sheet. It narrows the ways you can be cheated; it does not eliminate them, and it is never a reason to leave savings in custody. The exchanges rated on our best bitcoin exchange page publish PoR attestations, and the historical default there is unchanged: anything above your active trading balance comes off the platform.

What actually happens to your coins in an exchange bankruptcy?

The sequence is remarkably consistent, and the most important fact about it is the order of events. The withdrawal freeze comes first, unilaterally, with no court involved, while the company still insists publicly that it is healthy. The bankruptcy filing comes days or weeks later. By the time you have official notice that something is wrong, your exit is already closed.

Celsius ran the full script. Its CEO marketed the platform as the "safest place for your crypto" and told customers to "unbank" themselves; at its fall 2021 peak Celsius held about $25 billion in assets. On June 12, 2022 it halted all customer withdrawals, leaving hundreds of thousands of customers with $4.7 billion inaccessible, and on July 13, 2022 it filed chapter 11. In the weeks before the halt, founder Alex Mashinsky kept assuring customers of Celsius's liquidityliquidityHow quickly and easily you can convert an asset to cash without significantly affecting its price.Full definition while quietly withdrawing $8 million of his own non-CEL assets. He was sentenced to 12 years in prison in May 2025 verify×DON'T TRUST, VERIFYClaim: Celsius halted withdrawals June 12, 2022 with $4.7 billion of customer assets inaccessible, filed bankruptcy July 13, 2022, and its founder was sentenced to 12 years after withdrawing $8 million of his own assets before the freeze.Verify at: DOJ SDNY: Founder of Celsius Sentenced to 12 Years (May 8, 2025) ↗The US Attorney's sentencing release states each of these dates and dollar figures, including the June 12, 2022 halt, the $4.7 billion locked, the July 13, 2022 filing, and the $8 million in personal withdrawals.. Then came the ruling described above: the coins in Earn accounts belonged to the estate, and customers were unsecured creditors waiting on whatever a plan eventually paid.

FTX compressed the same script into one week. On November 10, 2022, FTX and FTX US halted all trading and withdrawals; on November 11, 2022, 134 FTX companies filed chapter 11 in Delaware, with over $8 billion in customer assets missing verify×DON'T TRUST, VERIFYClaim: FTX halted all trading and withdrawals on November 10, 2022, and on November 11, 2022 its companies filed for bankruptcy with over $8 billion in customer assets missing.Verify at: CFTC v. Bankman-Fried et al., amended complaint ↗ · FTX bankruptcy docket, Case No. 22-11068 (Kroll) ↗The CFTC complaint recites the November 10 halt and the missing $8 billion; the official claims-agent docket lists November 11, 2022 as the petition date for FTX Trading Ltd., with most affiliates filing that day or in the days after.. Sam Bankman-Fried was convicted on seven counts and sentenced in March 2024 to 25 years in prison, with over $11 billion in forfeiture, for stealing over $8 billion of customer money (DOJ SDNY sentencing release).

Then comes the part that surprises even people who expect the freeze: your claim stops being bitcoin. Under 11 U.S.C. §502(b), a bankruptcy court determines each claim "in lawful currency of the United States as of the date of the filing of the petition" verify×DON'T TRUST, VERIFYClaim: US bankruptcy law fixes the amount of a claim in US dollars as of the petition date.Verify at: 11 U.S.C. §502(b), official US Code ↗The statutory text requires the court to determine the amount of a claim in lawful US currency as of the date the petition was filed.. FTX's plan of reorganization was confirmed on October 8, 2024 and went effective on January 3, 2025, roughly 26 months after the filing. Customers with bitcoin on FTX therefore held dollar claims priced at the November 2022 market, near the bottom of that bear cycle, and the repayments they eventually received in dollars bought far less bitcoin than they had deposited. Headlines about creditors being repaid "in full" mean full repayment of that petition-date dollar number, not the return of coins.

Sources: the Celsius court opinion, DOJ sentencing releases for both founders, the CFTC amended complaint, and the official FTX docket, all linked above. Broader scam patterns, including the 2022 lender failures, are covered in bitcoin scams and how to avoid them.

Doesn't FDIC or SIPC insurance cover your coins?

No, and both agencies have published explicit statements because exchanges kept implying otherwise. The FDIC's fact sheet says plainly that FDIC deposit insurance "does not cover crypto assets" and does not protect against the failure of a non-bank crypto company or exchange, even one that partners with an insured bank verify×DON'T TRUST, VERIFYClaim: FDIC deposit insurance does not cover crypto assets and does not protect against the failure of a non-bank crypto company or exchange.Verify at: FDIC Fact Sheet: Deposit Insurance and Crypto Companies ↗The FDIC's own fact sheet states both points directly. The standard $250,000 deposit-insurance limit is separate FDIC guidance at fdic.gov/resources/deposit-insurance.. SIPC, which covers brokerage customers up to $500,000, states that it "does not protect any digital or crypto asset that does not qualify as a security" under the Securities Investor Protection Act verify×DON'T TRUST, VERIFYClaim: SIPC does not protect crypto assets that do not qualify as securities under SIPA, even when held at a SIPC-member brokerage.Verify at: SIPC: What SIPC Protects ↗SIPC's own coverage page lists crypto assets that are not securities among the things it does not protect..

Failed platforms exploited exactly this confusion. The FTC's case against Celsius charged that the company falsely told customers it maintained a $750 million insurance policy on deposits, a policy that did not exist, while marketing itself as safer than a bank; Celsius's corporate entities settled with a $4.7 billion suspended judgment (FTC, July 13, 2023). When an exchange says "insured," find out what is insured, by whom, and for whose benefit. Corporate crime policies protect the company, not your balance.

How the first row actually works, including what the FDIC does when a bank fails, is covered on is my money safe in the bank. The honest comparison is not "exchange versus bank." It is "unsecured IOU versus keys you hold."

What are the red flags before an exchange fails?

Every major failure broadcast warnings that look obvious in hindsight. The pattern repeats often enough to make a checklist:

• Yield on custodial deposits. An exchange cannot pay you interest on bitcoin it merely safekeeps. Yield means your coins are being lent or deployed, which is exactly how Celsius's Earn program turned 600,000 customers into unsecured creditors. The deeper problem with chasing yield is covered in chasing yield.
• Withdrawal friction. New delays, shrinking limits, "maintenance" on specific coins, or support tickets replacing instant processing. The freeze arrives as friction first. Celsius went from marketing "unbank yourself" to a total halt in one announcement on June 12, 2022.
• No proof of reserves, or a stale one. A snapshot proves little, but refusing even the snapshot is a choice. Treat a PoR older than a quarter as expired, and treat "trust us" as a disclosure.
• Vague insurance claims. Celsius claimed a $750 million policy that the FTC says never existed. If the marketing says "insured" but no insurer, policy scope, and beneficiarybeneficiaryThe person or entity you name to receive an account or insurance policy when you die. are named, assume it protects the company, or nobody.
• Founder reassurance tours. "Stronger than ever, billions in liquidity" came in May 2022, weeks before Celsius froze withdrawals on June 12. Public confidence campaigns cost nothing and are the cheapest way to slow a bank runbank runWhen many depositors try to withdraw at once, overwhelming a bank that has lent out most deposits. Self-fulfilling: rational response when you expect others to run is to run first. FDIC insurance prevents this by removing the incentive to panic.. The louder the reassurance, the faster you should withdraw.
• Insiders heading for the exit. Mashinsky withdrew $8 million of his own assets while telling customers everything was fine. You will learn about insider withdrawals from court filings, years too late to act on them.

What should you do with the bitcoin you have on an exchange now?

Withdraw it to keys you control, and make withdrawal the routine rather than the emergency response. A workable default: keep on the exchange only the dollars or coins involved in your next transaction, and sweep everything else out on a fixed cadence, with every purchase or once a month, whichever comes first. A network fee of a few dollars is cheap insurance against 100% counterparty exposure. Send a small test amount first, verify it arrives at an address you generated and control, then send the rest.

The step-by-step process, exchange screens, address verification, fees, and common mistakes, is walked through in how to withdraw bitcoin from an exchange. For where to send it: a hardware wallet is the standard first destination for meaningful holdings, compared model by model in hardware wallets, and larger stacks can graduate to collaborative custody or multisig as described in the custody levels ladder. If you hold bitcoin exposure through a spot ETFExchange-Traded Fund (ETF)A basket of investments (stocks, bonds, or Bitcoin) that trades on a stock exchange like a single share. instead, that is a different legal wrapper with different failure modes, regulated fund custody rather than an exchange IOU, but still not keys you hold; the tradeoff is laid out in bitcoin ETF vs self-custody.

None of this requires predicting which exchange fails next. The 2022 failures were not obscure platforms; Celsius held $25 billion at its peak, and the US Attorney called the FTX collapse "one of the largest financial frauds in history." The lesson from the court records is not "pick safer exchanges." It is that a custodial balance is a loan to a company you cannot audit, and the only version of bitcoin that cannot be frozen by a Tuesday morning announcement is the version where you hold the keys.

Related