coinport

Crypto Exchange Security: A 5-Point Checklist

Pay 20% less on every trade

Most people just share a referral link. We give you 20% of our commission back — automatically, through the fee discount. Pick your exchange; the code is built into the button.

Affiliate links, 20% lower spot and futures trading fees on all five. Welcome offers are set by the exchanges.

Before depositing funds on any exchange, five checks take under ten minutes and lock your account down: authenticator-app 2FA, an anti-phishing code, withdrawal address whitelisting, offline recovery codes and a small test deposit.

The Checklist

CheckWhy it matters
Enable 2FA via an authenticator app, not SMSSMS can be intercepted through SIM-swap attacks; app-based codes can't
Set an anti-phishing codeReal exchange emails will show your code; phishing emails won't
Enable withdrawal address whitelistingBlocks withdrawals to any address you haven't pre-approved, even if your account is compromised
Save recovery codes offlineLets you regain access without relying on email or phone alone
Test with a small deposit firstConfirms the deposit flow and network work before committing larger sums

What "Proof of Reserves" Means

Some exchanges publish a proof-of-reserves audit — a snapshot showing they hold enough assets to cover customer balances. Gate.io, for example, listed a total reserve ratio of 127.11% on its own site as of 9 September 2026, meaning it reported holding more in reserve than customer balances require. Not every exchange publishes this figure in the same format; when comparing, check each exchange's own transparency or proof-of-reserves page rather than assuming.

Where to Check Each Exchange’s Own Security Page

Security posture changes quickly, so each exchange's own security and transparency page is the source to check. The checklist above applies on whichever exchange you choose.

Frequently Asked Questions

Is SMS two-factor authentication safe enough?

It is better than no 2FA, but an authenticator app is safer because SMS can be intercepted through SIM-swap attacks. Use an app-based authenticator where the exchange offers one.

What is a proof-of-reserves audit?

A published snapshot showing an exchange holds enough assets to cover customer balances. Gate.io reported a 127.11% total reserve ratio on its own site as of 9 September 2026; check each exchange's own transparency page for its current figure.