Centralized exchanges (CEX) are the dominant venue for Bitcoin spot trading and the principal fiat on-ramp globally. US-aligned multi-asset exchanges (Coinbase, Kraken, Gemini, Bitstamp) provide regulated infrastructure with heavy KYC/AML compliance; a smaller US-aligned Bitcoin-only cluster (Swan, River, Strike) serves accumulation and payments without altcoin exposure; offshore exchanges (Binance, Bybit, OKX, KuCoin) offer broader products with less regulatory clarity. CEXs combine three operational functions — spot trading, custody, and fiat on/off-ramping — and the custody function creates the principal structural concern: exchange-custody Bitcoin is not self-custody, and repeated failures (Mt. Gox 2014, FTX 2022) have demonstrated the risk. The 2024 spot ETF approvals shifted institutional flows toward ETF-custody (largely via Coinbase Custody), moving the concentration concern rather than diminishing it. For retail, CEXs remain the dominant on-ramp, but the "not your keys, not your coins" discipline argues for moving Bitcoin to self-custody after acquisition; post-FTX consolidation continues, with major participants now at scale under increasing regulatory engagement.


Why this note matters

Centralized exchanges are operationally critical infrastructure for the Bitcoin ecosystem — most Bitcoin acquisition happens through them, most institutional trading flows through them, and exchange-custody concerns are the principal operational-risk vector. Understanding the major participants, the operational tradeoffs, and the structural concerns is the precondition for engaging the broader Bitcoin investing landscape.

This note treats the centralized-exchange landscape; Decentralized and P2P exchanges treats the trust-minimized alternatives; Custody concentration risks treats the substantive analytical critique.


US-aligned Bitcoin-only financial services

A small cluster of US-regulated providers operate as Bitcoin-only platforms, distinguished by explicit refusal to offer altcoin products. They are accumulation-and-payments focused rather than trading-and-derivatives focused; the relevant comparison set is not the multi-asset exchanges below but each other.

Swan. US-based; Cory Klippsten CEO; founded 2019. Recurring-purchase DCA is the primary product; Swan IRA enables tax-advantaged accumulation; custody is provided through partnership with BitGo. Substantial educational presence (Swan Signal podcast and broader media ecosystem). Explicit Bitcoin-only positioning that excludes altcoin services.

River. US-based; Alex Leishman CEO; founded 2019. Distinguishing features include native Lightning support (Lightning deposits and withdrawals), zero-fee recurring buys, the River Mining product (consumer-facing mining-pool access), and the River Intelligence research arm. Audited proof-of-reserves attestation. Bitcoin-only positioning.

Strike. US-based Bitcoin-and-Lightning payments platform; Jack Mallers CEO; founded 2019. Lightning-focused product set including instant USD-to-BTC purchases, native Lightning send/receive, and cross-border remittance corridors routed over Lightning (substantial growth in El Salvador and Argentina). Bitcoin-only positioning.

The Bitcoin-only cluster is structurally smaller than the multi-asset cluster but is the institutionally-natural home for holders who want to limit altcoin exposure in their fiat on-ramping. The tradeoff is narrower product menus (no derivatives; no margin trading) in exchange for an aligned editorial posture.


Major US-aligned multi-asset exchanges

Coinbase. Largest US-regulated exchange by trading volume and custody assets. Public company (NASDAQ: COIN) since 2021 direct listing. Substantial regulatory engagement (SEC investigations and ultimate settlement; CFTC engagement; FinCEN registration). Coinbase Custody serves as principal custodian for major Bitcoin ETFs (substantial concentration concern). Operationally well-regarded; insurance coverage; SOC compliance; institutional-grade infrastructure.

Kraken. US-based; private company; established 2011. Strong reputation for operational reliability and security; substantial international presence. More conservative regulatory positioning than some competitors; less aggressive product expansion. Notable for early Bitcoin support and continued operational consistency.

Gemini. Founded by Winklevoss twins; NYDFS-regulated; substantial focus on institutional and high-net-worth segments. ActiveTrader institutional platform. Has experienced specific operational difficulties (Genesis lending exposure in 2022; subsequent restructuring).

Bitstamp. European-headquartered (Luxembourg); long history (founded 2011); substantial European institutional presence. Recently acquired by Robinhood Markets in 2024. Considered operationally reliable.


The major offshore exchanges

Binance. Largest global exchange by trading volume. Hong Kong / Cayman Islands / Malta domiciled (varies by jurisdiction); CZ (Changpeng Zhao) settled criminal charges with US in 2023 for AML violations; new CEO Richard Teng appointed. Despite regulatory issues, Binance remains operationally dominant globally. Substantial product breadth (spot, derivatives, lending, staking).

Bybit. Singapore-headquartered with substantial offshore presence; established 2018. Strong derivatives focus; substantial spot trading; specific operational difficulties (February 2025 hack of substantial Ethereum holdings).

OKX. Originally OKEx; Seychelles-domiciled with operational presence in multiple jurisdictions. Substantial derivatives and spot volume; Web3 platform integration.

KuCoin. Seychelles-domiciled; substantial spot and derivatives presence; specific regulatory issues in various jurisdictions.

Bitfinex. Hong Kong-headquartered; iFinex parent; tied to Tether (USDT issuer). Long operational history including substantial 2016 hack. Recently substantial focus on Liquid Network integration.

The offshore-exchange characteristics:

  • Broader product offerings (more altcoins, more derivatives, more leverage)
  • Less regulatory clarity in individual jurisdictions
  • Lower KYC friction historically (though tightening over time)
  • Higher operational-risk profile for serious institutional engagement

The custody concentration concern

The principal structural concern with centralized exchanges is custody concentration:

Coinbase Custody specifically. As principal custodian for major Bitcoin ETFs (IBIT, FBTC, ARKB, BITB, several others), Coinbase Custody holds approximately $100B+ in Bitcoin as of 2026. This is the largest single custodial concentration in Bitcoin’s history. The concentration creates structural risk: a Coinbase compromise (operational, regulatory, or malicious) would have substantial cascading effects.

Exchange operational custody. Beyond ETF custody, Coinbase, Kraken, Binance, and other major exchanges custody substantial Bitcoin on behalf of trading users. The aggregate is several hundred thousand BTC across exchanges.

Sovereign Bitcoin holdings. The US government’s ~200,000 BTC (from criminal seizures, increasingly retained under Strategic Bitcoin Reserve framework) is itself a custody concentration of a specific kind.

The structural framing. Total Bitcoin in custodial or quasi-custodial arrangements (exchange custody + ETF custody + sovereign holdings + custodian-operated arrangements like Onramp, Casa-with-shared-key) is estimated at ~25-35% of total circulating supply as of 2026. This is up substantially from pre-2024 levels.

The “not your keys, not your coins” framing. The Bitcoin maximalist position has long emphasized self-custody as ideal; the post-2024 custody-concentration trajectory has substantially complicated this framing. Mainstream Bitcoin adoption has substantially gone through custodial channels rather than direct self-custody.

See Custody concentration risks (Criticisms) for the substantive analytical engagement.


Exchange failures and the operational track record

Centralized exchanges have a substantial historical track record of failures:

Mt. Gox (2014). Approximately 850,000 BTC lost; the formative self-custody-discipline lesson. See Mt. Gox (History) for the historical-narrative treatment.

FTX (November 2022). Approximately $8B in customer funds lost through alleged fraud. SBF (Sam Bankman-Fried) convicted in 2023. Substantial cascading effects (BlockFi, Voyager, others). The formative post-2022 self-custody-discipline lesson.

Various 2014-2025 failures. Bitfinex 2016 hack; QuadrigaCX 2019; Voyager 2022; Celsius 2022; BlockFi 2022; Genesis 2023; various smaller exchanges and lending platforms. The cumulative empirical record is substantial.

The operational lesson. Exchange custody risk is real and recurring. The “not your keys, not your coins” discipline emerged from this empirical record and is operationally relevant for any Bitcoin holder.

The post-FTX consolidation. The 2022 FTX failure produced substantial consolidation: smaller exchanges failed or were acquired; remaining major exchanges increased regulatory engagement and operational transparency. The current landscape is structurally more concentrated but more reliable than the pre-2022 landscape.


Tradeoffs and design choices

Convenience vs trust-minimization. Centralized exchanges provide substantial operational convenience at the cost of custodial-trust dependence. The right tradeoff depends on the holder’s specific situation; the maximalist position generally favors self-custody after acquisition.

Regulated vs offshore. US-regulated exchanges (Coinbase, Kraken, Gemini) provide more regulatory clarity and operational reliability at the cost of more restrictive product offerings and higher fees. Offshore exchanges (Binance, Bybit) provide broader access at higher operational and regulatory risk.

Spot-trading vs derivatives. Spot exchanges allow Bitcoin acquisition; derivatives exchanges add leverage-and-hedging capability. Most centralized exchanges offer both; users should distinguish their use cases.

The proof-of-reserves framework. Post-FTX, most major exchanges have adopted some form of proof-of-reserves attestation. The frameworks vary in rigor; Merkle-tree-based attestations have been the dominant approach. The attestations provide partial verification but not full liability transparency.

The ETF-custody concentration as structural feature. ETF custody requires substantial institutional infrastructure; the concentration at Coinbase Custody is partially structural (few alternatives provide equivalent institutional-grade capability). The concentration is real but the alternatives are limited.

Substantive analytical critique lives in Custody concentration risks (Criticisms).


Open questions for further development

  • How does the post-2024 custody-concentration trajectory evolve? ETF growth could substantially increase concentration; self-custody trends could partially offset.
  • What is the realistic post-FTX regulatory trajectory? Major US legislation (the CLARITY Act, successor to the 2024 FIT21 bill, House-passed July 2025 and awaiting the Senate) may clarify exchange regulation; the trajectory is still evolving.
  • Will alternative custody arrangements (collaborative custody, Layer-2 federated mints) reduce centralized-exchange concentration? Growth has been gradual.
  • How does sovereign Bitcoin custody evolve? Strategic Bitcoin Reserve frameworks at federal and state level may produce sovereign-custody concentration.
  • What is the long-run equilibrium between regulated US exchanges and offshore alternatives? Regulatory dynamics are evolving; the equilibrium is uncertain.

Canonical sources for this note

  • Major-exchange public filings and disclosures
  • Exchange-specific operational documentation
  • Mt. Gox (History) — formative case study
  • Various academic and journalistic engagement with exchange operational dynamics
  • Chainalysis Crypto Crime Report — exchange-related criminal-activity analysis (industry-aligned framing)
  • Coin Center exchange-regulation analysis