You’ve probably heard people say “not your keys, not your crypto” a thousand times, but the exchange vs wallet question still trips up a lot of folks who should know better. The difference isn’t just philosophical. It’s about who controls your assets, what risks you’re taking, and what you can actually do with your coins. Let’s break down when you need each one and how to think about the tradeoff.
What Exchanges Actually Do
Exchanges are platforms where you buy, sell, and trade crypto. Think of them like a traditional brokerage mixed with a casino cage. When you deposit Bitcoin or USDC to Coinbase, Binance, Kraken, or any centralized exchange, you’re handing over custody. The exchange holds the private keys. You get an IOU in your account balance.
This setup makes trading fast and convenient. You can move between hundreds of trading pairs instantly without paying network fees for every swap. The exchange handles order matching, liquidity, and settlement internally. Your balance updates in milliseconds, not minutes.
But here’s the catch: you’re trusting the exchange to stay solvent, secure, and honest. When FTX collapsed in November 2022, users learned this lesson the expensive way. Billions in customer funds vanished because the exchange was using deposits as their personal piggy bank. That kind of counterparty risk is baked into every centralized exchange.
What Wallets Actually Do
A wallet is software (or hardware) that stores your private keys and lets you sign transactions. When you control the private keys, you control the actual onchain assets. No company can freeze your account, file for bankruptcy with your funds, or decide you can’t withdraw.
Wallets come in different flavors. Hot wallets like MetaMask or Phantom stay connected to the internet and work great for frequent transactions or DeFi interactions. Cold wallets like Ledger or Trezor keep your keys offline, which makes them much harder to hack but less convenient for daily use.
Self custody means you’re the security team. Lose your seed phrase? Your crypto is gone forever. Click a phishing link? Drained. Sign a malicious transaction? Same result. The tradeoff is total control for total responsibility.
When to Use Each One
Most people who are serious about crypto use both, just for different purposes. Keep trading capital on exchanges where you need liquidity and speed. Keep long term holdings in wallets where you have full control.
Here’s a concrete scenario: You’re swing trading ETH and a few altcoins. You might keep 30% of your portfolio on an exchange for active trades, 50% in a hardware wallet for cold storage, and 20% in a hot wallet for DeFi positions or NFT purchases. The exchange portion turns over frequently. The cold storage barely moves. The hot wallet handles your experimental plays.
The percentages shift based on your activity level and risk tolerance. Day traders might keep 80% on exchanges. Long term holders might keep 95% in cold storage and only touch an exchange when they’re making a major buy or sell.
The Custody Spectrum
Not everything fits cleanly into “exchange” or “wallet.” Some platforms blur the lines.
Exchange wallets give you a wallet address, but the exchange still controls the keys. Crypto.com’s app wallet or Binance’s spot wallet fall into this category. You get a receive address, but you’re still trusting the platform.
Noncustodial exchange aggregators like 1inch or Matcha let you trade directly from your wallet using DEX liquidity. You never give up custody, but you’re interacting with smart contracts that carry their own risks.
Custodial wallet services like BitGo or institutional providers hold your keys but with more security and insurance than a typical exchange. This appeals to companies that need controls but can’t self custody.
Common Mistakes
- Keeping everything on one exchange because it’s convenient. You’re making yourself a sitting duck for platform risk.
- Using a hot wallet for serious money. If your laptop gets compromised, you just funded some hacker’s vacation.
- Not testing small amounts first. Send $20 before you send $20,000. Wrong address mistakes are permanent.
- Storing seed phrases digitally. Screenshots, password managers, and cloud backups all defeat the purpose of having a seed phrase.
- Ignoring withdrawal fees and minimums. Some exchanges charge outrageous fees to move coins to your wallet, which traps small balances.
- Trusting exchange insurance claims at face value. Most “insurance” only covers specific scenarios like exchange hacks, not fraud or insolvency.
What to Verify Right Now
- Check current withdrawal fees on any exchange you use. They change constantly and vary wildly by asset.
- Confirm whether your exchange allows direct withdrawals to your preferred network. Some only support certain chains for specific tokens.
- Review the withdrawal limits and verification requirements on your exchange account. Regulations and policies shift.
- Test your wallet recovery process with a small amount. Make sure you actually have your seed phrase and know how to use it.
- Verify that your hardware wallet firmware is updated. Old firmware can have security vulnerabilities.
- Check what insurance or proof of reserves your exchange publishes. Some provide third party audits, others provide nothing.
- Confirm whether your wallet supports the tokens you want to hold. Not all wallets support all chains or token standards.
- Look up current network fees for the chains you use. Moving assets during high congestion can cost more than the position is worth.
- Double check smart contract permissions if you use DeFi from your wallet. Old approvals can become attack vectors.
- Review whether your exchange supports the withdrawal method you need. Some don’t allow withdrawals to certain wallet types or contracts.
Next Steps
- Decide on a custody split that matches your trading frequency and risk tolerance. Write it down and stick to it.
- Set up at least one self custody wallet if you haven’t already. Start with a small amount to learn the workflow.
- Schedule regular sweeps from exchange to cold storage. Monthly or quarterly works for most people who aren’t active traders.
Category: Crypto Security
