When an exchange shows you 0.5 bitcoin, it is usually telling you that its database owes you 0.5 bitcoin. Somewhere, the company holds coins in addresses it controls — hot wallets for the queue, cold storage for the rest, if they are honest and organised. The public ledger does not have a line that says your email. It has a line that says the company’s keys. Until you withdraw to an address whose keys you hold, you have a claim on a firm. You do not have coins only you can sign.
How buying crypto actually works is the cash-to-app on-ramp. How crypto wallets actually work is the keys. A spot ETF is a wrapper is the brokerage version of the same idea. The category review is the scoring checklist. This page is the IOU, so a green balance cannot do the explaining for you. FTX, Celsius, Voyager, Quadriga, and the hot-wallet thefts are news. We will not write a sixth overlapping collapse. We will write the pattern.
The internal ledger is the product you actually use
Deposits credit an account. Trades shuffle numbers between accounts. Withdrawals are a request: the company builds a real transaction, signs with its keys, and pays a network fee. That is why an exchange can show you a balance during a chain halt, or hide a hole until withdrawals jam. “On the blockchain” in the marketing is often “we reconcile later”. Reconciliation is a back office. It is not a wallet you restored from a phrase.
A password reset exists because they hold the keys. That is a genuine benefit. It is also the proof. If you could reset a recovery phrase with an email, it would not be a recovery phrase. Hardware wallets are a practice if you leave. Staying is a financial-services relationship: identity checks, freezes, travel-rule fields, and a helpdesk that may or may not answer on a Sunday.
Withdrawals are the product. Deposits are the brochure.
Try a small withdrawal to a wallet you control before the balance would change how you sleep. Match the network. Fill the memo if the destination is another company that asks for one. Wait. The wrong network is still the wrong city applies on the way out too. A venue that makes deposits instant and withdrawals “under review” for days is telling you which direction it likes.
Halts happen for maintenance, for hacks, for insolvency, and for rumours. The screen will not always say which. “For your security” is a sentence that has covered all four. If you needed the coins today, you needed them off the venue yesterday. That is not an instruction to panic-send at 1 a.m. Panic-sends are how people paste the wrong address. It is an instruction to know, in writing, who holds the keys for each balance you care about.
Earn, lend, and “the same as staking”
When an exchange pays you a yield to leave coins there, you are usually a creditor: the firm is using the assets, or pooling them, or matching you with a borrower you will never meet. Celsius and Voyager were credit stories that looked like savings accounts. Staking is a lock and a queue is the protocol version, with an exit that is a wait. A company APY is a company. If the terms say they can rehypothecate, they can. If the terms are silent, ask why.
Insurance banners are often a slice of hot-wallet coverage with a cap, a deductible, and a list of excluded events that includes the one you are imagining. Read the PDF. “SAFU” and its cousins are marketing names for a pile the firm controls. Binance’s 2019 hot-wallet theft is the dated version of that pile being used. It is not deposit insurance.
Hacks, holes, and proof of something
When an exchange is “hacked”, the usual object is keys the company held, or an insider, or a contractor. Coincheck, KuCoin, DMM Bitcoin, Bybit: different years, same sentence — a company wallet. The chain kept producing blocks. Customers had a claim. Sometimes the firm made them whole. Sometimes a court did, years later, at a haircut. Sometimes neither.
Proof of reserves is a snapshot of some addresses at some time. Without a matching picture of liabilities — what they owe you and everyone else — it is a show of assets that can sit beside a hole. Audits have a date and a scope. QuadrigaCX was one person’s laptop plus a company that could not open it. FTX was a related-party hole plus a database that said you were fine. Different plots. Same moral: the login is not the ledger.
A licence is a supervisor’s process, not a vault.
Segregation language in a terms of service is not a bankruptcy-remote trust.
Two-factor that is only SMS is a SIM-swap waiting room.
A lookalike domain with a “support” chat is how IOUs move to a stranger without a hack of the venue.
Who it is for, without the personality test
If you need cash in and cash out where you live, an exchange is often the door. Leave on it what you intend to trade or convert soon. “Soon” is a word people lie to themselves about. If the idea of a recovery phrase makes you nauseous, a small company balance with limits you can survive may fit you better than a brick you will not look at. If the balance would ruin a year, it does not belong in a venue you cannot personally bankrupt-proof — and a hardware wallet you will not practise with is not the alternative. Practise first.
We will not name a winner. Laws differ. The review is the checklist. This page is why the checklist exists. Nothing here is an instruction to withdraw tonight, to open an account, or to buy, sell, or hold any asset. An IOU is an IOU. The notebook on the other side of a withdrawal will still be there in the morning.
