You wake up, open your exchange app, and nothing loads. No balances. No trade history. Just a maintenance page or, worse, a statement about “temporary suspension of withdrawals.”
This is not hypothetical. It has happened repeatedly. Mt. Gox in 2014. QuadrigaCX in 2019. FTX in 2022. And the October 2025 flash crash, which liquidated over $19 billion in leveraged positions in a single day, reminded everyone that crypto exchanges can become single points of failure overnight.
So what actually happens to your crypto when an exchange collapses? And more importantly, what can you do about it before it happens?
Your Crypto Is Probably Not “Yours”
Here is the uncomfortable truth that most crypto investors overlook: when you deposit assets on a centralised exchange, you typically hand over control of the private keys. The exchange holds your crypto in pooled wallets alongside everyone else’s funds. You see a balance on your screen, but that balance is essentially an IOU.
The old crypto saying “not your keys, not your coins” is not a bumper sticker. It is a legal reality. When FTX filed for Chapter 11 bankruptcy in November 2022, its filing revealed it held only 0.1% of the Bitcoin and 1.2% of the Ethereum that customers believed it was holding on their behalf. The rest had been funnelled to Alameda Research for leveraged trading.
For a deeper look at how wallet architecture creates these vulnerabilities, see our guide on Hot Wallet vs Cold Wallet Architecture: What Risk Managers Need to Know.
What Happens Legally When an Exchange Files for Bankruptcy
When a crypto exchange enters bankruptcy proceedings, the legal machinery treats customer assets very differently from what most people expect.
You become an unsecured creditor. In most jurisdictions, once your crypto sits in an exchange’s pooled wallet, you do not “own” specific coins.
You hold a claim against the exchange. Courts have consistently ruled that custodially held crypto becomes property of the bankruptcy estate. That puts you at the back of the queue, behind secured creditors, administrative costs, and legal fees.
Your claim gets frozen at bankruptcy-date prices. This is the part that stings the most. FTX valued customer claims at November 2022 prices, when Bitcoin traded around $17,000. By the time payouts began in 2025, Bitcoin had risen above $120,000.
Creditors received cash based on the old valuation, missing out on a 600%+ appreciation. As one adviser in the FTX case put it, “People wanted their property back but couldn’t get it.”
Recovery takes years. The FTX bankruptcy estate distributed $7.1 billion across three rounds by September 2025, nearly three years after the collapse. U.S. customers reached 95% cumulative recovery; international (“Dotcom”) customers reached 78%. Smaller creditors with claims under $50,000 actually received 119% of their claim value, including 9% annual interest. But these are exceptional outcomes driven by FTX’s unusually large recoverable asset base of over $15 billion. Most exchange bankruptcies end far worse.
A Pattern That Keeps Repeating
Since 2014, at least 17 major crypto exchange bankruptcies have occurred. Over 60% of all crypto exchanges that have ever operated have defaulted, driven by fraud, hacks, regulatory action, or simply running out of liquidity. Total investor losses from exchange collapses exceed $30 billion.
| Exchange | Year | What Happened | Customer Impact |
| Mt. Gox | 2014 | 850,000 BTC stolen via hack | Years of litigation; partial recovery ongoing |
| QuadrigaCX | 2019 | Founder died; sole private key holder | $190M inaccessible; minimal recovery |
| FTX | 2022 | Customer funds diverted to Alameda | $7.1B repaid by Sep 2025; 95% recovery for US customers |
| Celsius | 2022 | Lending losses; withdrawal freeze | Court ruled Earn deposits were estate property |
| Voyager | 2022 | 3AC exposure; liquidity crisis | Partial recovery after restructuring |
If your organisation holds crypto assets, these failures are not abstract case studies. They are risk scenarios that belong in your enterprise risk management framework.
The Three Factors That Determine Whether You Get Your Money Back
Recovery in a crypto exchange bankruptcy depends on three things:
1. Asset segregation. Did the exchange keep customer funds separate from company operating funds? In the Celsius bankruptcy, the court ruled that assets in “Earn” accounts (which Celsius used for lending) belonged to the estate.
But assets in “Custody” accounts, where the terms of service stated ownership remained with the customer, were treated differently. The lesson: the specific account type and terms you agreed to can make the difference between full recovery and pennies on the dollar.
2. Terms of service. Many exchanges bury language in their user agreements that effectively transfers ownership of deposited crypto to the exchange. Coinbase’s 2022 10-Q filing explicitly warned that in bankruptcy, custodially held crypto “could be subject to bankruptcy proceedings” and customers “could be treated as general unsecured creditors.” Read the fine print.
3. Jurisdiction. Where the exchange is incorporated and where it files for insolvency matters enormously. U.S. Chapter 11 proceedings offer structured creditor protections. In other jurisdictions, recovery mechanisms may be weaker or non-existent.
QuadrigaCX, incorporated in Canada, left users with almost nothing. Thodex, a Turkish exchange, saw its founder flee the country with all customer funds in 2021.
The October 2025 Flash Crash: A Near-Miss for Exchange Solvency
On October 10, 2025, a 100% China tariff threat from President Trump triggered the largest single-day crypto liquidation in history. Bitcoin dropped roughly 10%. Altcoins fared far worse: Solana fell 40%, and the median token lost around 54% of its value.
Market depth collapsed by more than 80% across major exchanges within minutes. Market makers withdrew liquidity. Binance’s internal asset transfer system slowed between 21:18 and 21:51 UTC, temporarily showing some users zero balances. The exchange’s insurance fund, designed to absorb losses from liquidated positions, came under severe stress.
This event did not cause an exchange failure. But it demonstrated exactly how one could happen: leveraged positions unwind, liquidity evaporates, insurance funds drain, and suddenly an exchange cannot meet withdrawal requests. The path from flash crash to insolvency is shorter than most investors realise.
For organisations managing these risks, having a documented business continuity plan for crypto operations is no longer optional.
Regulation Is Catching Up, But Slowly
Two major regulatory developments are reshaping how exchanges must handle customer assets:
The EU’s MiCA framework (Markets in Crypto-Assets Regulation) now requires crypto-asset service providers to maintain organisational continuity plans, segregate client assets, and demonstrate adequate capital buffers. For a detailed breakdown, see How Does MiCA Affect Crypto Business Continuity Requirements?
The U.S. GENIUS Act (passed in 2025) established rules for stablecoins, while the SEC issued updated guidance in December 2025 on how broker-dealers must handle custody of crypto asset securities, including requirements for private key management, contingency planning for exchange insolvencies, and procedures for transferring assets in the event a firm can no longer operate.
Wyoming’s SPDI charter (Special Purpose Depository Institution) requires approved crypto banks to hold 100% reserves backing all deposited cryptocurrencies. Kraken was the first exchange to receive this charter. If your exchange operates under a Wyoming SPDI, your assets are backed one-for-one, a meaningful layer of protection.
What You Can Do Right Now to Protect Your Crypto
Whether you are an individual investor or a risk manager responsible for organisational crypto holdings, here are practical steps:
- Move significant holdings to self-custody. Hardware wallets (cold storage) eliminate exchange counterparty risk entirely. Keep only what you need for active trading on the exchange. Our guide on private key backup and recovery procedures covers how to do this securely.
- Read the terms of service. Specifically, look for language about asset ownership, segregation, and what happens in insolvency. If the terms say deposited crypto becomes property of the exchange, treat that as a red flag.
- Diversify across exchanges. Do not concentrate all holdings on a single platform. Spread across multiple regulated exchanges to reduce single-point-of-failure risk.
- Check proof of reserves. After FTX, major exchanges began publishing proof-of-reserve audits. These are not perfect, but they provide a baseline indication of solvency. Look for third-party attestations, not just self-reported numbers.
- Monitor exchange health indicators. Watch for warning signs: withdrawal delays, sudden changes to terms of service, executive departures, regulatory actions, or unusual trading volumes. These are key risk indicators that should trigger pre-defined escalation procedures.
- For organisations: build incident response playbooks. Define RTO and RPO targets for crypto operations, document recovery procedures, and test them regularly. See our detailed guide on RTO/RPO requirements for crypto exchanges.
The Security Dimension: $3.4 Billion Stolen in 2025
Exchange failure is not always about bankruptcy. Sometimes the exchange is still standing, but your assets are gone because someone took them.
In 2025, over $3.4 billion in digital assets were stolen through high-impact breaches. The Bybit hack in February 2025 alone accounted for $1.5 billion in stolen Ethereum. North Korean-linked actors were responsible for 76% of service compromises, using sophisticated impersonation tactics and embedded IT infiltration.
These attacks exposed a critical gap: traditional security frameworks (NIST, ISO 27001) were not designed for the speed and sophistication of AI-driven crypto threats. For a risk management perspective on securing crypto operations, see our guide on key recovery, incident response, and wallet security.
The Bottom Line
Crypto exchanges are not banks. They do not carry deposit insurance. Their customers are, in most cases, unsecured creditors. And the history of exchange failures, from Mt. Gox to FTX to the near-misses of October 2025, tells a consistent story: when an exchange goes down, getting your assets back is slow, uncertain, and almost always involves receiving less than what you put in.
Regulation is improving. MiCA, the GENIUS Act, and updated SEC custody rules are adding guardrails. But these frameworks are still maturing, and they do not retroactively protect assets already on an unregulated platform.
The single most effective protection remains self-custody. If you control the private keys, an exchange failure becomes someone else’s problem. If you don’t, it becomes yours.
For organisations holding or managing crypto assets, the risk management imperative is clear: treat exchange counterparty risk as a first-order operational risk, document it in your risk register, build recovery procedures, and test them. The exchanges that survived 2025 are the ones that had business continuity plans that actually worked when the pressure hit.
Sources
- FTI Consulting: Crypto Crash October 2025 – Leverage Meets Liquidity
- CoinDesk: FTX Creditors Repayment Updates
- American Bankruptcy Institute: What Happens If a Cryptocurrency Exchange Files for Bankruptcy?
- SEC: Statement on Custody of Crypto Asset Securities (December 2025)
- American Bar Association: The Crypto Bankruptcy Wave
- NPR: Crypto Soared in 2025 and Then Crashed (January 2026)
- Comsure: Crypto Exchange Collapses – $30–50 Billion in Investor Losses
Want to stay ahead of risk? Subscribe to Risk Publishing for practical ERM, BCM, and project risk management content. Have questions or need a custom risk assessment for your crypto operations? Get in touch.
Chris Ekai is a Risk Management expert with over 10 years of experience in the field. He has a Master’s(MSc) degree in Risk Management from University of Portsmouth and is a CPA and Finance professional. He currently works as a Content Manager at Risk Publishing, writing about Enterprise Risk Management, Business Continuity Management and Project Management.