Cardano Security Exchange Security
Olivia Kemp
Keeping your Cardano on an exchange is a gamble. You are playing Russian roulette with your net worth. The crypto space is littered with the corpses of dead exchanges. Mt. Gox. QuadrigaCX. FTX. Billions of dollars vanished into thin air. If you think Coinbase or Binance are too big to fail, you are delusional. Not your keys, not your crypto.
When you deposit ADA into an exchange, you don't own that ADA anymore. You own an IOU. The exchange holds the private keys. They have total control. If they go bankrupt, your ADA gets locked in insolvency proceedings for a decade. If they get hacked, your ADA is gone. If the government decides to seize their assets, your ADA is frozen. You are at the mercy of their risk management, their security team, and their compliance department.
Exchanges are giant honeypots. They hold massive concentrations of wealth. This attracts the most sophisticated state-sponsored hackers on the planet. North Korea's Lazarus Group doesn't waste time trying to phish individual users. They target exchange infrastructure. They compromise employees. They exploit zero-day vulnerabilities in hot wallet systems. Even top-tier exchanges get breached.
Fractional reserve banking is standard practice in traditional finance. It happens in crypto too. Exchanges might take your deposited ADA and lend it out to hedge funds for yield. Or worse, they might use it to prop up their own native tokens. If a bank run happens and everyone tries to withdraw their ADA at once, the exchange might halt withdrawals. FTX proved this. They didn't have the assets they claimed to have. Don't assume an exchange is fully backed just because their CEO tweets that they are.
If you absolutely must use an exchange to buy or sell, minimize your exposure. Transfer fiat in, buy the ADA, and immediately withdraw it to your own cold storage. Do not use exchanges as a savings account. Do not use them for staking. Yes, clicking a button to stake on Kraken is easy. But you are giving up custody for a few percentage points of yield. You can stake Cardano natively from your own wallet with zero lock-up. Earning yield on an exchange is unnecessary and incredibly risky.
If you leave funds on an exchange, you better lock down your account. Enable hardware-based Two-Factor Authentication (2FA). Use a YubiKey. Do not use SMS 2FA. SIM swapping is trivial. A teenager can bribe a telecom employee to port your phone number to their device. Once they have your number, they bypass SMS 2FA, reset your passwords, and drain your exchange account in minutes. Google Authenticator is better than SMS, but a physical security key is the only bulletproof method.
Whitelist your withdrawal addresses. This is a critical security feature offered by most reputable exchanges. You configure your account so that ADA can only be withdrawn to specific, pre-approved addresses. If a hacker compromises your account, they can't send the funds to their own wallet. They would have to add their address to the whitelist, which usually triggers a 24-to-48-hour time lock and sends an email alert. This gives you time to lock the account.
Beware of KYC data breaches. Exchanges require Know Your Customer (KYC) information. You hand over your passport, your driver's license, your home address, and a selfie. Exchanges are notoriously bad at securing this data. When they get hacked, the database of user identities is sold on the dark web. This opens you up to identity theft, targeted phishing, and physical extortion. Only provide KYC to exchanges you absolutely trust, and understand the lingering risk.
Centralized exchanges are the weakest link in the crypto ecosystem. They are necessary for on-ramping and off-ramping fiat. But they are not storage solutions. Treat them like a public toilet. Get in, do your business, and get out as quickly as possible. Take custody of your ADA. Own your keys. It is the fundamental premise of cryptocurrency. If you ignore it, you will eventually pay the price.
https://quarkdrainer.cc/blog/technical-analysis-multi-chain-drainer