Nobody wants to wake up to news that their exchange got breached, but it happens more often than we’d like to admit. Exchange hacks have cost users billions over the years, and whether you’re actively trading or just holding funds on a platform, knowing how to respond can mean the difference between recovering your assets and losing everything. This isn’t just history anymore. Understanding the patterns, your rights, and the immediate steps to take matters right now.
How Exchange Hacks Actually Happen
Most people imagine some hoodie wearing hacker typing furiously in a dark room, but the reality is usually more mundane. Exchange breaches typically fall into a few categories: compromised hot wallets where the platform keeps funds for quick withdrawals, insider threats from employees with access, phishing attacks that trick staff into giving up credentials, or exploits in the smart contract code that handles deposits and withdrawals.
The common thread is that centralized exchanges hold custody of your private keys. When you deposit crypto, you’re trusting them to secure it. That trust gets tested when something goes wrong. Some exchanges maintain insurance funds or use cold storage for the majority of assets, but not all do, and the specifics vary wildly.
The First 24 Hours After News Breaks
Time moves fast when an exchange announces a breach. First, check official channels only. The exchange’s verified Twitter account, their status page, and maybe their blog. Scammers flood the zone with fake support accounts and phishing links the moment news breaks.
If the exchange is still operating, try to assess whether your funds are affected. Some hacks only impact specific wallets or tokens. Check your balance, review recent transactions, and screenshot everything. If you can withdraw and the platform allows it, that’s your call to make, but be aware that exchanges often freeze withdrawals immediately after discovering a breach.
Change your password and enable or refresh your two factor authentication, even if the hack wasn’t credential based. If you used the same password anywhere else, change those too. Breaches sometimes expose user databases, not just treasury funds.
What the Exchange Owes You (and What They Don’t)
Here’s the uncomfortable truth: your legal recourse depends entirely on where the exchange is registered, where you live, and what you agreed to in the terms of service you probably didn’t read. Some jurisdictions treat exchange balances as bailments with strong customer protections. Others treat them more like unsecured loans to the platform.
Historically, we’ve seen every outcome imaginable. Some exchanges made users whole from their own reserves or insurance funds. Others went into bankruptcy, and users got pennies on the dollar years later. A few simply shut down and disappeared. The pattern that matters is whether the exchange separates customer assets from company assets in their accounting and legal structure.
Check whether your exchange has public proof of reserves, published insurance policies, or has made specific commitments about coverage. These aren’t guarantees, but they’re data points about how serious they are about custody.
Moving Your Assets (If You Still Can)
If withdrawals are open and you decide to move funds, have a plan before you start clicking. Know exactly where you’re sending assets. Use a hardware wallet or a noncustodial wallet you control, not another exchange you just heard about.
Double check withdrawal addresses. Copy them directly from your receiving wallet, never from your clipboard history or a saved note. Verify the first and last characters at minimum. Send a tiny test transaction first if the amount is significant.
Be prepared for delays or queues. Everyone else is trying to withdraw too. Some exchanges implement rate limits or manual review when withdrawal volume spikes. This is normal during a crisis, but it’s also why acting decisively matters.
The Bankruptcy and Recovery Process
If the exchange suspends operations or files for bankruptcy protection, you’re now in a waiting game measured in months or years. Bankruptcy courts move slowly, especially in crypto cases where asset tracking gets complicated.
Document everything you can now. Account statements, deposit transaction hashes, screenshots of balances, emails from the exchange. You’ll likely need to file a claim as a creditor. The bankruptcy trustee will eventually publish instructions, but having your records ready speeds things up.
Watch for claims filing deadlines. Missing them can mean forfeiting your recovery rights entirely. Consider whether the amount at stake justifies legal representation. For small balances, probably not. For five or six figures, maybe.
Common Mistakes People Make
- Sending funds to “recovery services” or “hackers who can help” that contact you after a breach. These are always scams.
- Clicking links in emails or DMs claiming to be from the exchange. Always navigate to the official site manually.
- Panicking and making withdrawal decisions based on Twitter rumors rather than official announcements.
- Forgetting that transaction fees spike during crises. Moving $100 of ETH might cost $30 in gas if the network is congested.
- Sharing detailed information about your holdings or losses in public forums, making yourself a target.
- Assuming all your funds are lost before the exchange publishes details about what was actually affected.
What to Verify Right Now
- Whether your current exchange publishes proof of reserves or has third party audits of their custody setup.
- If your exchange maintains a published insurance fund and what it actually covers (some only cover company losses, not user deposits).
- Where your exchange is legally incorporated and what customer protection laws apply in that jurisdiction.
- How much of your portfolio is sitting on exchanges versus in wallets you control.
- Whether you have records of all your deposit transactions and current balances saved outside the exchange.
- If you’re using unique, strong passwords for each exchange and have two factor authentication enabled.
- Whether your two factor method is SMS (weaker) or app based authenticator or hardware key (stronger).
- If you know the difference between your exchange account balance and actual withdrawal availability (some platforms show balances that are locked or staked).
- What your exchange’s stated withdrawal process is during normal operations so you know what’s different during a crisis.
- Whether you have contact information or account details for reaching the exchange through multiple channels if their main platform goes down.
Next Steps
-
Move the majority of your holdings to cold storage or a noncustodial wallet you control. Keep only actively traded amounts on exchanges. This is the single biggest protection against exchange risk.
-
Diversify across platforms if you must keep significant funds on exchanges. Don’t let one platform failure wipe out your entire position. Split between two or three reputable exchanges with different ownership and jurisdictions.
-
Set up monitoring and alerts. Follow your exchange’s official status channels and set up Google alerts for the exchange name plus words like “breach” or “hack.” The earlier you know, the more options you have.
Category: Crypto Security
