Koryu · 黄龍
Koryu
← Research library
Research · 研究 · 53 · Foundations

Not your keys, your creditor's claim number.

18 Sept 20264 min readFoundationsKoryu Research

This article documents historical failures and a risk category. It accuses no operating exchange of anything. Nothing here is investment advice. Decisions are yours.

Exchange risk is the risk that the venue holding your coins fails, freezes, or was never holding them at all. A balance on an exchange is not crypto; it is a database entry recording a company's promise, and in bankruptcy that promise converts to an unsecured claim. November 2022 turned this from a caveat into a curriculum.

What an exchange balance actually is

On-chain assets are bearer instruments: control of the keys is ownership, the first line of the instrument taxonomy that separates spot from perpetuals. Deposit them to an exchange and the ownership changes shape: the coins move to the exchange's wallets, and you receive a ledger entry, redeemable on demand while the company is solvent and willing. The phrase "not your keys, not your coins" describes the bankruptcy waterfall rather than any ideology: customers of failed crypto custodians have repeatedly found themselves unsecured creditors, recovering cents on the dollar years later, behind lawyers and ahead of nobody.

November 2022, sequenced

The FTX collapse compressed the whole lesson into ten days. A leaked balance sheet showed the exchange's affiliated trading firm resting on the exchange's own token; the largest competitor announced it would dump its holdings of that token; a customer run began; withdrawals froze; and the company filed for bankruptcy in mid-November 2022, revealing a hole in customer funds on the order of eight billion dollars. Criminal convictions followed.

Three details matter more than the drama. First, the trigger was an insolvency that already existed: customer coins had been lent out and lost long before the run revealed it. Second, the collapse was itself a market event, forcing liquidation cascades across every venue, and deleting a top-tier venue's tokens and order books from the record, the survivorship wound at the heart of the graveyard problem. Third, the year had already run the same play twice: the lending platforms that froze and fell mid-2022 put customers through the identical unsecured-creditor conversion months earlier. FTX was the largest instance of a familiar category, never a break from it. The category is old: the original giant exchange failure, in 2014, lost roughly 850,000 bitcoin of customer deposits and spent a decade in proceedings.

Proof of reserves, and its honest limits

The post-2022 reform was proof of reserves: exchanges publishing cryptographic attestations, typically Merkle-tree constructions letting each customer verify their balance was included in a snapshot of liabilities matched against on-chain assets. Genuine progress, and structurally partial. A reserve snapshot proves assets existed at an instant, not that they persist, not that they are unencumbered, and, most importantly, it can prove assets without proving the full liability set: undisclosed debts sit outside the tree. The skeptic's checklist from seven checks applies with one word swapped: an attestation that cannot be independently recomputed, continuously, is a marketing document with mathematics in it. The direction of travel is right; the trust model remains "trust, with better receipts."

The practical segmentation

The working consensus that survived 2022 is segmentation by job. Trading capital lives on exchanges because it must: execution requires it, and that exposure is the cost of participating, managed by venue quality and by not concentrating on one venue. Holdings that are not actively traded move to self-custody, where the risk changes species, from counterparty failure to key management. The cash leg deserves the same thought: stablecoins held on an exchange stack custodial risk on top of issuer risk. And position sizing already owns the master rule: total exposure to any single point of failure, including the venue itself, is a position, and it should be sized like one.

For completeness, the structural note: this site custodies nothing and can custody nothing. A measurement board has no wallet to lose, which is not a virtue we claim credit for, merely a category of harm the design makes impossible. Where your coins live is the one risk decision no service can make for you. Decisions are yours.

Related reading
FoundationsCrypto moving averages explained on a chart that never closes4 min readFoundationsCrypto slippage explained: market impact on a thin order book4 min readFoundationsDollar volume in crypto, explained: trading at size4 min read
Frequently asked

What is exchange risk?

The risk that the venue holding your coins fails, freezes withdrawals, or never held them at all. An exchange balance is a database entry recording a company's promise to deliver; in bankruptcy that promise converts to an unsecured claim, historically recovering cents on the dollar.

What actually happened with FTX?

A leaked balance sheet showed the affiliated trading firm resting on the exchange's own token; a competitor announced it would dump that token; a run began, withdrawals froze, and the company filed for bankruptcy in mid-November 2022 with a customer shortfall on the order of eight billion dollars. The insolvency predated the run.

Was FTX unique?

No: it was the largest instance of an old category. The 2014 collapse of the era's dominant exchange lost roughly 850,000 bitcoin, and the lending platforms that froze in mid-2022 ran customers through the same unsecured-creditor conversion months before FTX.

Does proof of reserves solve exchange risk?

It helps and it is partial: a Merkle-tree attestation proves assets existed at a snapshot against included liabilities, not that they persist, are unencumbered, or that no liabilities were left outside the tree. Better receipts, same trust model.

How do traders manage exchange risk in practice?

Segmentation by job: only active trading capital on venues, spread rather than concentrated; unneeded holdings in self-custody, where the risk becomes key management; and exposure to any single venue sized like the position it is. This site custodies nothing by design.