Though cryptocurrency exchanges are often considered to be a convenient way to manage cryptocurrencies, this convenience usually comes at the cost of privacy.
Cryptocurrency exchange wallets are currently one of the most popular ways to store Bitcoin and other cryptocurrencies. But there are serious drawbacks to using them that often go overlooked.
If privacy, security, and self-sovereignty of your funds are important to you, you might want to reconsider keeping your Bitcoin in an exchange wallet.
Not Your Keys, Not Your Crypto
Although it isn’t immediately apparent in many cases, creating a cryptocurrency wallet also entails the creation of private keys. These are essentially the keys that prove ownership over cryptocurrency funds, and allow them to be spent, staked, and otherwise used.
However, the vast majority of cryptocurrency exchanges do not allow their users to access their private keys. This is because exchanges actually generate addresses from a master seed, and allocate these addresses to its users, using an index system to keep track of how much was sent to and from each address to allow it to balance trades internally.
The annual Proof of Keys movement sees exchange users withdraw their Bitcoin funds to user-controlled wallets to ensure exchanges are not operating a fractional reserve. Photo: Proof of Keys
Because of this, cryptocurrency exchange users are essentially subject to the quirks and whims of the exchange and its owners. If the exchange goes offline for maintenance, the user cannot access their funds. If the exchange is hacked, the user cannot forcibly withdraw their funds. If the exchange is otherwise rendered unavailable, the user’s funds also cannot be accessed.
This situation was demonstrated by the recent QuadrigaCX debacle, which saw thousands of users lose their funds because the exchange CEO died suddenly – and he was the only person with access to the exchange wallet private keys.
By withdrawing your funds from your exchange wallet to a mobile or desktop wallet that provides private key access, you can ensure that your cryptocurrencies remain accessible at all times.
Exchange Hacks are Common
Cryptocurrency exchange hacks have risen up to become a recurring theme in the cryptocurrency industry, as even some of the largest and most popular exchanges have struggled to keep their coffers safe from hackers.
According to a recent report by the CipherTrace, around $4.4 billion was stolen through fraud or hacks in the first three quarters of 2019. This is the equivalent of around 2% of all cryptocurrency being stolen throughout 2019 – the bulk of which was stolen from breached cryptocurrency exchange accounts and direct attacks on exchange hot wallets.
Coin.Space and several other Bitcoin wallets allow you to easily derive all of your private keys from your recovery phrase. Photo: Coin.Space
This issue was faced by several major cryptocurrency exchange platforms in recent years. Binance, currently the largest cryptocurrency spot exchange by trading volume, was hacked for over $40 million in Bitcoin in May 2019. Likewise, CoinBene was hacked for $100 million in March 2019, whereas Bithumb was hacked for $31.5 million in June 2018 and $13 million in April 2019.
These centralized wallet providers make prime targets for hackers since they frequently hold a large amount of cryptocurrency in a single wallet, and suffer from less than stellar security. Since most cryptocurrency exchanges are not insured against such attacks, affected customers can suffer potentially total losses.
Take Back Your Privacy
Though cryptocurrency exchanges are often considered to be a convenient way to manage cryptocurrencies, this convenience usually comes at the cost of privacy.
Not only do the large majority of cryptocurrency exchange enforce stringent KYC requirements on their users, potentially requiring identity and address verification to unlock certain features, but they also sacrifice several important privacy features that are available in most mobile wallets.
One of these is the ability to generate new addresses for each transaction. Popular mobile wallets like Coin.Space and Electrum will automatically generate a new address every time a payment is received. This prevents a privacy issue known as address reuse, whereby outside observers are able to gather an increasing amount of data on a user the more times they reuse the same address.
Photo: USAspending.gov
Some exchange platforms might also be actively working against the privacy ideals most cryptocurrency users seek by sharing internal insights and blockchain analytics with external agencies. This includes Coinbase, a popular exchange platform, and fiat on-ramp that recently licensed its Coinbase Analytics tool to the Department of Homeland security’s Secret Service.
Fortunately, taking back control of your Bitcoin privacy is as simple as switching to a wallet that automatically prevents address reuse and doesn’t include 3rd party tracking – re-establishing the privacy, security and self-sovereignty that centralized exchanges tend to destroy.
