Where your exchanger's reserves actually sit - and what an exchange or processor can do with them

Ask an exchanger owner where their reserves physically sit, and the answer is often the same: on an exchange. On Binance, Bybit, MEXC - wherever it's convenient to cycle liquidity and buy on demand. Or with an external processor that "handles everything for us". This is convenient right up until the day access to that money disappears through no choice of yours.

Reserves are not speculative money. They are the working capital you use to serve clients. If they get frozen, the exchanger stops: you can't pay out withdrawals, and the reputation you built over years burns down in hours. Below is a breakdown of what a third party can actually do with the capital you keep with them. Not theory: each point has recent cases from 2025-2026.

Risk 1. An exchange can freeze your account - without court or warning

Every centralized exchange reserves the right, in its terms of service, to restrict or freeze an account on suspicion, on a compliance request, on a "risk signal". You are not a party to that decision - you simply find out that withdrawals are unavailable.

The worst part is that almost anything can trigger it. A KYC mismatch, an atypical operation pattern, a large sum, a link from even one incoming transaction to an address the exchange considers risky. For an exchanger this is especially dangerous: high operation frequency and a constant flow of different counterparties mean far more reasons for risk control to fire than an ordinary trader would face.

It's worth knowing the timeframes, because they are written into the platforms' rules. Any change to security settings or KYC data automatically freezes withdrawals for 24 hours - a standard "protective" measure that triggers even if you just changed your password or email. An AML review with a document request can take up to 30 days. And if "risk control" fires, the freeze can become indefinite.

The loudest case of 2025 was the trader known as White Whale, whose MEXC account holding $3 million was frozen over an alleged rules violation. Only after months of a public campaign did MEXC admit the mistake, return the funds and apologize. But the key thing surfaced along the way: White Whale reported hundreds of other cases of indefinite account freezes where people simply had no access to their funds. One user reported $2 million in USDT frozen with no resolution expected for nearly a year.

The market reaction is telling too: after the story went public, Bitcoin withdrawals from MEXC spiked from around 40 per day to over 1,200 in mid-July 2025 - people pulled their money en masse, fearing their accounts might be next.

For a trader, a frozen account is an annoyance. For an exchanger whose working reserves sit on that exchange, it's a business stoppage: clients wait for payouts and you can't get the money out. A month of downtime means lost clients and reputation you can't recover.

Risk 2. The exchange holding your reserves can fall under sanctions

This is the scenario most dangerous for an exchanger owner, because it hits everyone who kept funds there at once - and it happens suddenly.

In May 2026 the exchange Rapira (along with several other platforms) fell under UK sanctions. For users this meant an immediate problem: access to funds gets restricted, assets are in question, and you need to withdraw urgently. And here's what matters for understanding the mechanics: even before the official sanctions announcement, clients of these platforms began receiving notices demanding withdrawal within 24 hours - after which access to some accounts was restricted.

Restoring access proved hard: support chats are answered by AI assistants, and live support takes days. A separate risk is that platforms review not only new but also old transactions: an account can be restricted even over a transfer made years ago.

But there's a second, less obvious layer. When an exchange falls under sanctions, it's not only its own addresses that get flagged, but also the addresses of those who received funds from it. So even if you never held reserves on that exchange but once accepted a transfer that traces back to it through a few hops, your funds can get a risk flag with AML providers. That's exactly why analysts in such situations advise withdrawing assets not to another exchange (where they'll be screened again and may get stuck) but to your own non-custodial wallet.

Imagine your working reserves sat on an exchange that suddenly fell under sanctions. You have 24 hours to withdraw, support doesn't respond, and part of the funds is already blocked. The business stops not because of your mistake, but because you kept capital on someone else's platform whose fate you didn't control.

Risk 3. An exchange can halt withdrawals - "due to market conditions"

When the market is turbulent, platforms "temporarily" stop withdrawals. The wording is vague - "technical reasons", "market conditions", "scheduled maintenance" - but the result for you is the same: the money is inside, you can't get it out, and precisely when you need it most.

February 2026, amid a sharp market drop, became such a stress test for the industry. Several platforms wound down or restricted operations in exactly this period: Bit.com switched to "withdrawal-only" mode with a limited window, ProBit Global set hard deadlines after which services ended. For a client whose funds were on such a platform at the worst possible market moment, this meant a race to get the money out before the window closed. Those who didn't make it within the window were moved to individual support requests - that is, into uncertainty.

It's important to distinguish an honest planned wind-down (where the platform announces dates in advance) from a sudden halt in a moment of panic. The latter is more dangerous: you don't get time to react. But for an exchanger both situations are equally painful, because of a double dependency - it can neither withdraw its own reserves nor pay out to its own clients. And the exchanger's clients don't know, and shouldn't have to know, that their payouts depend on whether withdrawals currently work on some third-party exchange. To them it just looks like "the exchanger isn't paying".

Risk 4. A counterparty can become insolvent - and your reserves enter the bankruptcy estate

When you keep money with a third party, you legally become its creditor. This is a key point many don't realize: funds on an exchange are not "your money in storage", they're your claim against the exchange. If it goes bankrupt, your reserves become part of the bankrupt's assets, divided among all creditors in order of priority. You join that queue and, at best, recover a portion - after months or years of legal proceedings.

The history of the crypto market is a series of such collapses, from major exchanges to small processors. And each time the same scenario repeats: until the last moment the site shows a pretty reserves figure and promises of reliability, and on the day of the collapse it turns out the funds are gone, rehypothecated or withdrawn. "Proof of reserves" on the storefront and actual solvency are different things, more on which below.

Risk 5. Opacity - you don't know what's really happening with your money

When reserves sit with a third party, you see a number in your dashboard - and you trust it. But you don't control what backs that party, whether the funds are rehypothecated, whether the declared reserves are real, whether client money is being used for the platform's own operations.

Even the "proof of reserves" mechanism, meant to solve this, gives a limited picture in practice. It shows that at a given moment the platform had assets of a certain value, but it doesn't show liabilities: how much the exchange owes, to whom, and whether the assets were borrowed for exactly the moment of the check. Questions about proof of reserves have arisen even for major platforms. The absence of standardized, regular and verifiable reporting is what separates an exchange from a transparent system. And you learn the real state of affairs only at the moment you try to withdraw a large sum - and can't.

Risk 6. Secondary and jurisdictional risk - the problem comes from a side you weren't watching

Even if the exchange itself is honest and solvent, your funds can get stuck because of its surroundings. An exchange has its own counterparties: partner banks, payment providers, liquidity providers. If the exchange's partner bank has problems, or a payment channel is cut off, it hits end-user withdrawals - that is, you - even though the exchange itself did nothing "wrong".

Jurisdictional risk belongs here too. The exchange is registered in one country, you operate in another, and a regulator in a third jurisdiction makes a decision that cuts off access for a whole category of users. Geography stops being your choice: you depend on which jurisdiction the platform is in, what licenses it holds, and who supervises it. When the situation shifts, your reserves become hostage to someone else's regulatory arrangements.

This risk is insidious precisely because you can't assess it in advance by looking at the exchange alone. You can check its reserves, reputation, history - and still suffer because of its bank or a regulator's decision you have nothing to do with.

What follows from all this

The common denominator of all six risks is one thing: you don't control the keys. As long as your reserves sit on an exchange or in someone else's processor, the decision about access to your money is made not by you. The exchange, its compliance department, its partner bank, a regulator, a court, a bankruptcy administrator - anyone but you.

This doesn't mean "don't use exchanges". An exchange is a normal and necessary tool for buying liquidity on demand and running operations. The problem isn't using an exchange, it's keeping your main working reserve there permanently. An exchanger's working capital should sit where only you control access to it.

How to distribute reserves in practice

Let's move from risks to what to do about them. A healthy reserve-management model for an exchanger rests on a few principles.

Split reserves by purpose. Not all capital should sit in one place. A sensible scheme has three tiers. A small "hot" portion on an exchange for operational liquidity and on-demand buying: exactly as much as current operations need, no more. The main working reserve - in your own infrastructure, under your keys. And a "cold" portion - in deep offline storage with no network access at all.

Keep the minimum on an exchange. An exchange is a working tool, not a safe. The amount on an exchange should cover operational needs for a short horizon (a day, a few days), not be the main store of capital. If tomorrow that exchange freezes the account or halts withdrawals, you should lose access to operational pocket change, not to the business.

Don't concentrate on one platform. If operational reasons require keeping funds on exchanges, spread them across several rather than piling into one. Then a problem with one platform won't paralyze the whole business.

Look not only at an exchange's reserves but at its surroundings. Jurisdiction, licenses, partner banks, withdrawal history during crisis periods - all of it is part of the risk. A platform with a transparent regulatory history in a stable jurisdiction is safer than one that looks good but is registered who-knows-where and serviced by who-knows-whom.

Key control isn't "paranoia", it's the foundation of the business. If your working capital sits under your keys in your infrastructure, none of the six risks above can stop your business with a single third-party decision. A frozen account elsewhere, sanctions against someone else's platform, its outage or bankruptcy stop being a threat - because your capital isn't tied to them.

This is exactly what the self-hosted custody model exists for: infrastructure on your servers, keys with you, funds under your control, not with a third-party custodian, exchange or processor. In this model the exchange remains a tool for liquidity - but stops being the point your business's survival depends on.