How Exchanges Actually Store Your Funds

The omnibus wallet reality

When you deposit bitcoin to an exchange, it does not sit in a wallet with your name on it. The deposit address you were given is a temporary collection point. Within hours the coins get swept into large omnibus wallets holding funds from thousands of customers at once. Your ownership exists only as a row in the exchange's internal database.

This is not a scandal, it is how every major venue operates. Running millions of individual on-chain wallets would be slow and expensive. But it means that on-chain, you own nothing. You own a claim against the exchange, and the quality of that claim is what this whole guide is about.

The cold and hot split

Inside the omnibus structure, exchanges split funds between hot wallets and cold storage. Hot wallets are connected to the internet and process withdrawals automatically. Cold storage keeps keys on devices that never touch the network. The standard claim across the industry is that 95% or more of assets sit in cold storage, with only a working float kept hot.

The split matters because nearly every major exchange hack has drained hot wallets. KuCoin in 2020 and BitMart in 2021 both lost their hot wallet float. A small hot allocation caps the damage a single intrusion can do, which is why we ask about it when we evaluate a venue.

Who legally holds the keys

The trading platform you see and the entity holding your coins are often different companies. Coinbase customers in the US have assets custodied through entities under state trust supervision. Gemini holds a NYDFS trust charter, which imposes capital requirements and examinations on the custody business itself. Offshore venues often route custody through affiliates in jurisdictions with thin oversight.

We weigh this heavily. Our base model gives Regulation 18%, rising to roughly 28% on the safest-exchanges page, largely because the custody entity determines what happens to your claim when things go wrong.

Segregation versus commingling

Segregation means customer assets are held apart from the exchange's own money and cannot be used for corporate purposes. Commingling means everything sits in one pot. FTX is the canonical commingling disaster: customer deposits flowed into the same accounts that funded trading bets, venture deals and real estate.

The hard part is that segregation is a legal and operational promise, not something you can verify on-chain. Coins in an omnibus wallet look identical whether they are ring-fenced or being lent out. We rely on the regulatory regime, the terms of service, and proof-of-reserves attestations to judge it, and we say plainly that this is inference, not observation.

What terms of service reveal

Read the custody section of your exchange's terms once. Some venues state that customer assets are held in trust for you and remain your property. Others say deposits become the property of the exchange, leaving you as an unsecured creditor. Earn and staking programs almost always move your coins into the second category, whatever the main custody language says.

That single clause decided outcomes in past bankruptcies. Customers with trust-style language recovered far more, far faster, than customers whose coins had been lent into an earn program.

How we score custody

We cannot inspect anyone's wallet infrastructure, so we score what is public: the custody entity and its licenses, published cold storage policy, proof-of-reserves history, insurance disclosures and the incident record. Kraken has kept a clean security record since 2011, which tells us more about its custody discipline than any marketing page could.

Security carries 20% in our base ranking and about 30% on the safest-exchanges page. Custody structure feeds both scores, because storage architecture is where exchange risk actually lives.

FAQ