Not Your Keys, Not Your Coins: The Legal Truth About Exchange-Held Crypto and How to Protect What You Own

When you deposit funds into a brokerage account and purchase shares of a publicly traded company, federal law provides a well-defined layer of protection. The Securities Investor Protection Corporation exists precisely to backstop clients when a broker fails. Crypto investors in the United States operate under no equivalent guarantee. When you transfer bitcoin or ether to a centralized exchange, you are not holding cryptocurrency — you are holding a promise.

That distinction is not semantic. It has cost tens of thousands of American investors real money, and it continues to expose millions more to risks they have not fully examined.

What You Actually Own When You Use a Centralized Exchange

Legal ownership of a digital asset is determined by control of the private key associated with that asset's on-chain address. When you create an account on a centralized exchange and deposit funds, the exchange takes custody of those private keys. What you receive in return is a balance entry in the exchange's internal ledger — essentially, an IOU.

This arrangement is not inherently fraudulent. Reputable exchanges maintain reserve policies, undergo audits, and operate under state money transmission licenses. But the legal status of your balance in the event of exchange insolvency is a different matter entirely. In a bankruptcy proceeding, exchange customers are generally treated as unsecured creditors, meaning they stand behind secured lenders and administrative claimants when assets are distributed.

The FTX collapse in November 2022 demonstrated this in the starkest possible terms. At peak, FTX held an estimated $16 billion in customer assets. When the exchange filed for Chapter 11 bankruptcy, those customers did not simply withdraw their funds and move on. They became creditors in a protracted legal process, with recovery outcomes that varied dramatically based on asset type, jurisdiction, and the court's interpretation of commingled funds. Many US-based FTX customers waited years for partial restitution, and a significant portion received far less than the dollar value of what they had deposited.

FTX was not an isolated incident. Celsius Network, Voyager Digital, and BlockFi all entered bankruptcy proceedings within roughly the same period, collectively affecting hundreds of thousands of American account holders. In each case, the same legal reality applied: customer funds on a custodial platform are not legally segregated assets — they are claims against a potentially insolvent estate.

The Regulatory Freeze Problem

Insolvency is not the only mechanism through which exchange-held assets can become inaccessible. Regulatory action presents a separate and increasingly common risk vector.

The Securities and Exchange Commission, the Commodity Futures Trading Commission, and the Department of Justice have each demonstrated a willingness to pursue enforcement actions against crypto exchanges that result in account freezes. When a regulator obtains a court order freezing an exchange's assets — as occurred during the early stages of several high-profile investigations — customer accounts can be rendered inaccessible for weeks or months, regardless of whether the individual account holder has done anything wrong.

State-level action introduces additional complexity. New York's Department of Financial Services has revoked BitLicense authorizations from multiple platforms, and in each instance, customers faced disrupted access during the transition period. Even exchanges that ultimately resolve regulatory disputes without insolvency can impose withdrawal restrictions that strand funds during critical market windows.

For active traders, this is not merely a philosophical concern. A position that cannot be exited during a market downturn is effectively a loss that has not yet been recognized.

Custodial Versus Non-Custodial: Understanding the Spectrum

The solution is not necessarily to abandon centralized exchanges entirely. For most active traders, exchanges provide liquidity, pricing efficiency, and trading infrastructure that self-custody solutions cannot replicate. The more useful framework is understanding where your crypto should be at any given time based on its purpose.

Hot exchange balances should represent only the portion of your holdings that you intend to trade within a near-term window. If you are executing a day-trading or swing-trading strategy, maintaining a working balance on a regulated, well-capitalized exchange is a reasonable operational decision. The key is to treat that balance as working capital, not as a long-term store of value.

Hardware wallets and cold storage are appropriate for any holdings you do not intend to trade actively. Devices such as Ledger and Trezor allow you to control your own private keys while maintaining a relatively accessible interface for asset management. Your bitcoin, ether, or other long-term positions belong here, not in an exchange account that carries counterparty risk.

Multi-signature arrangements provide an additional layer of protection for larger holdings by requiring multiple private keys to authorize any transaction. This approach is used by institutional holders and is increasingly accessible to sophisticated individual investors through platforms designed for self-custody infrastructure.

Building Your Personal Custody Framework

Deciding what percentage of your portfolio to hold on exchanges versus in self-custody is a function of three variables: trading frequency, portfolio size, and personal risk tolerance.

A trader who executes multiple positions per week may reasonably keep 30 to 50 percent of their crypto on exchange at any given time, accepting the associated counterparty risk as a cost of doing business. A long-term holder who rebalances quarterly has no operational reason to maintain more than a small working balance on any platform.

Portfolio size matters because the absolute dollar exposure changes the calculus significantly. Five thousand dollars on a reputable exchange carries a different risk profile than five hundred thousand dollars in the same location. As portfolio value grows, the cost of hardware wallet infrastructure and the time invested in proper key management become proportionally trivial.

When evaluating which exchanges to use for your active trading balance, prioritize platforms that publish proof-of-reserves audits, maintain clear terms of service regarding asset segregation, and hold appropriate US regulatory licenses. Offshore platforms with opaque ownership structures should receive zero custodial trust regardless of fee structures or feature sets.

Practical Steps to Reduce Your Exposure Today

Begin with an honest audit of every exchange account you currently hold and the balance sitting in each. Calculate the total dollar exposure across all custodial platforms. If that figure exceeds what you would be comfortable losing in a worst-case bankruptcy scenario, you have work to do.

Purchase a reputable hardware wallet, generate your seed phrase in a secure offline environment, and transfer your long-term holdings off exchange. Store your seed phrase using a durable, physically secure method — etched metal backups are preferable to paper for this purpose.

For exchange balances you retain, enable all available security features: two-factor authentication using an authenticator application rather than SMS, withdrawal address whitelisting where available, and account activity alerts. These measures do not eliminate counterparty risk, but they reduce the probability of unauthorized access compounding an already adverse scenario.

The Bottom Line

The phrase "not your keys, not your coins" has circulated in crypto communities for years, often dismissed as ideological posturing. The bankruptcy courts of the past several years have transformed it into a legal statement of fact. US investors who store meaningful portions of their net worth on centralized exchanges are extending unsecured credit to those platforms, whether they recognize it or not.

Trading smarter means understanding not just when to buy and sell, but where your assets actually reside and what legal protections — or lack thereof — govern them. At BitKarvm, that kind of structural awareness is what separates disciplined portfolio management from complacent assumption.