Exchange Solvency Checklist 2026: Fourteen Red Flags Before You Leave Funds on a CEX
Every major centralised exchange failure followed a pattern. Not the same pattern -- the details differ between Mt Gox in 2014, QuadrigaCX in 2019, FTX in 2022, and the lending platform collapses that bracketed them. But the warning signs share a structural similarity that becomes obvious only in retrospect. Withdrawal queues stretched. Executives gave evasive answers. Proof-of-reserves data had gaps. Yield products offered returns that made no economic sense.
The purpose of this checklist is to make those patterns visible before the collapse, not after the bankruptcy filing. These fourteen red flags are drawn from observable behaviours across multiple exchange failures, cross-referenced against the structural indicators we track in our Exchange Watch coverage. None of these flags alone confirms insolvency. Several appearing simultaneously should prompt immediate action.
Red Flag 1: Withdrawal Delays Without Technical Explanation
The single most reliable early indicator of exchange distress is a pattern of withdrawal delays. Not a one-time maintenance window or blockchain congestion event, but recurring delays across multiple assets, accompanied by vague explanations about "system upgrades" or "enhanced security procedures."
Mt Gox began pausing Bitcoin withdrawals weeks before its collapse. FTX experienced intermittent delays in the days before the bank run accelerated. Celsius paused all withdrawals on 12 June 2022, framing it as necessary to "stabilize liquidity and operations." In each case, withdrawal delays were the first publicly visible signal.
When evaluating this flag, context matters. A brief pause during a blockchain hard fork is normal. A rolling pattern where different users report multi-day delays on different assets, especially if the exchange attributes each delay to a different technical cause, is not.
Red Flag 2: Audit or Attestation Avoidance
An exchange that previously published proof-of-reserves attestations and then stops -- or delays a scheduled publication without explanation -- is communicating something. The question is what.
After FTX's collapse, several exchanges rushed to publish proof-of-reserves data. As covered in our analysis of proof-of-reserves practices, the quality and scope vary enormously. But the trajectory matters more than any single report. An exchange that was publishing monthly and then goes quiet may have encountered a result it does not want to share.
Equally concerning is an exchange that switches attestation providers without explanation, or that downgrades from a recognised accounting firm to an unknown entity. Mazars Group exited crypto PoR work entirely in 2022, and the scramble by its former clients to find replacement attestors was itself an informative signal.
Red Flag 3: Native Token Concentrated in Reserves
When a significant portion of an exchange's reserves consists of its own native token, the circular risk is severe. The token's value depends on the exchange's continued operation. If the exchange faces a solvency crisis, the token's price collapses at the exact moment those reserves are needed to cover withdrawals.
FTX held billions of dollars in FTT token on its balance sheet. Alameda Research used FTT as collateral for loans from FTX. When FTT's price dropped, the entire structure unravelled because the collateral and the reserves were the same reflexive asset.
Check an exchange's proof-of-reserves composition. If the native token represents more than ten to fifteen percent of total reserves, the effective coverage ratio is lower than the headline number, because that portion would lose value precisely during a stress event.
Red Flag 4: Key Executive Departures
A chief financial officer, chief risk officer, or head of compliance leaving an exchange is a data point. Three C-suite departures within six months is a pattern. Executives with fiduciary responsibilities who resign unexpectedly may be distancing themselves from something they have seen internally.
Before QuadrigaCX's collapse, key employees departed. Before FTX filed for bankruptcy, compliance staff turnover was elevated. Voyager Digital's risk team experienced departures before the withdrawal freeze.
Not every executive departure signals fraud. People leave jobs for ordinary reasons. But when departures cluster in risk-sensitive roles -- legal, compliance, finance, audit -- and the exchange does not provide clear succession announcements, the pattern warrants attention.
Red Flag 5: Regulatory Enforcement Actions
A distinction exists between an exchange operating in a regulatory grey area and an exchange that has received formal enforcement actions. The former is common in crypto. The latter indicates that a regulator has examined the exchange's operations and found specific violations.
Enforcement actions from the SEC, CFTC, or equivalent regulators often surface operational deficiencies beyond the specific charges. Settlement terms may include operational restrictions. Ongoing litigation drains management attention and financial resources.
Track not just the headline enforcement actions but the exchange's response. An exchange that settles quickly, pays fines, and implements remediation is in a different category from one that litigates aggressively, changes jurisdiction, or restructures legal entities to evade enforcement.
Red Flag 6: Proof-of-Reserves Scope Gaps
An exchange can publish a technically valid proof-of-reserves report that covers only a fraction of its actual liabilities. The most common gaps include: exclusion of derivatives positions, omission of earn or staking product balances, absence of fiat liabilities, and failure to account for intercompany loans.
When reading a PoR report, check the scope section. It will list which assets and which product types are included. If the exchange offers margin trading, futures, options, earn products, and staking -- but the PoR covers only spot balances -- the report covers a subset of what the exchange actually owes its users. The methodology behind our exchange assessments includes evaluating attestation scope against product offerings.
Red Flag 7: Customer Support Degradation
This flag is anecdotal by nature, but it has preceded every major exchange failure. A sudden increase in unresolved support tickets, automated responses replacing human agents, and social media complaints about weeks-long response times can indicate either cost-cutting driven by financial stress or a surge in user complaints driven by operational problems.
Celsius users reported deteriorating support quality months before the withdrawal freeze. FTX's support response times lengthened in October 2022, weeks before the collapse. The mechanism is straightforward: an exchange under financial pressure reduces headcount, and customer support is typically the first department to feel the cuts.
Monitor community channels -- Reddit, Twitter, Telegram groups -- for shifts in the volume and tone of support complaints. A gradual increase is normal as a platform grows. A sudden spike, especially if it coincides with other flags on this list, is not.
Red Flag 8: Fee Structure Changes Indicating Revenue Pressure
Exchanges generate revenue primarily from trading fees, withdrawal fees, listing fees, and interest on customer deposits. When an exchange suddenly increases fees, introduces new fee categories, or restructures its fee tiers in ways that extract more revenue from existing users, it may be compensating for a revenue shortfall or an unexpected financial obligation.
Watch for: introduction of previously free services becoming paid, withdrawal fee increases that exceed network cost changes, maker fee increases that reduce the exchange's competitiveness, and new "maintenance" or "processing" fees on idle accounts. None of these individually confirms distress, but they indicate financial pressure when combined with other flags.
Red Flag 9: Aggressive Marketing Spend
An exchange running aggressive referral bonuses, deposit match promotions, and cashback offers while simultaneously exhibiting other flags on this list may be attempting to attract new deposits to cover outflows from existing users.
Voyager Digital offered yield rates and referral bonuses that required a continuous inflow of new deposits to sustain. Celsius marketed aggressively even as its financial position deteriorated. The mechanism mirrors classic Ponzi dynamics: new money funds old obligations, and marketing spend is the acquisition cost for that new money.
Red Flag 10: Liquidity Crunch Signals on Order Books
Thin order books -- where the spread between best bid and best ask widens, and the depth of orders at each price level decreases -- can indicate that market makers are pulling liquidity from the exchange. Market makers are often among the best-informed participants about counterparty risk, and their withdrawal of liquidity is a meaningful signal.
Compare an exchange's order book depth for major pairs (BTC/USDT, ETH/USDT) against the same pairs on other exchanges. If spreads are significantly wider or depth is meaningfully thinner, liquidity providers may be reducing their exposure.
Red Flag 11: Insurance Fund Opacity
Most major exchanges maintain an insurance fund intended to cover losses from liquidation failures, security breaches, or other adverse events. The transparency of these funds varies enormously.
Check whether the exchange discloses: the fund's total value, the fund's asset composition, the fund's historical usage, and the conditions under which the fund can be deployed. An insurance fund denominated primarily in the exchange's native token has the same circular risk described in Red Flag 3. A fund that was previously quantified and is now described only as "substantial" or "adequate" has become less transparent, and the reduction in disclosure is itself a signal.
Red Flag 12: Banking Partner Loss
Centralised exchanges require banking relationships to process fiat deposits and withdrawals. When an exchange loses a banking partner, it disrupts fiat on-ramps and off-ramps and forces the exchange to find alternatives -- often smaller, less regulated financial institutions willing to accept the risk.
The loss of a banking partner is sometimes visible through changes in deposit instructions (new bank names, new jurisdictions), introduction of intermediary payment processors, restrictions on certain fiat currencies, or increased processing times for fiat withdrawals.
Multiple exchange failures were preceded by banking relationship disruptions. The loss of banking access does not cause insolvency directly, but it constrains the exchange's ability to process redemptions and can accelerate a liquidity crisis during periods of elevated withdrawals.
Red Flag 13: Legal Entity Shuffling
When an exchange restructures its corporate entities -- creating new subsidiaries, moving operations between jurisdictions, changing the entity that holds customer funds, or migrating user agreements to a different legal entity -- the motivation matters.
Legitimate reasons exist: regulatory compliance, tax optimisation, operational efficiency. But entity restructuring can also move assets beyond creditor reach or create jurisdictional confusion in bankruptcy. FTX maintained over 130 affiliated entities across multiple jurisdictions, obscuring fund flows between Alameda Research and the exchange. Any unexplained restructuring of the entity that custodies your funds should prompt questions.
Red Flag 14: Yield Product Unsustainability
If an exchange offers yield on deposits -- earn programmes, staking rewards, savings accounts -- the fundamental question is where the yield comes from. Legitimate sources include: lending to margin traders at a higher rate than paid to depositors, staking rewards from proof-of-stake networks passed through with a fee, and market-making revenue shared with depositors.
Illegitimate or unsustainable sources include: using new deposits to pay yield to existing depositors, trading customer funds in high-risk strategies, and subsidising yield from the exchange's own treasury to attract deposits.
When yield rates significantly exceed what is available through direct on-chain staking or through institutional lending markets, the excess return must come from somewhere. Celsius offered rates on stablecoins that were multiples of what institutional lending markets could justify. Voyager offered yields that required perpetual deposit growth. Both collapsed.
Calculate the spread between an exchange's offered yield and the equivalent on-chain rate. If the exchange offers 8% on ETH staking when direct staking yields 3-4%, the additional 4-5% represents either genuine alpha from the exchange's operations or a cost the exchange is absorbing to attract deposits. The former is possible but rare. The latter is unsustainable.
Using the Checklist
No single red flag on this list justifies panic. Several of these flags can have benign explanations in isolation. The checklist becomes actionable when multiple flags appear simultaneously, especially when they cluster around financial stress indicators (flags 1, 3, 8, 10, 12) rather than governance indicators (flags 4, 5, 13).
The practical response to multiple concurrent flags is not to short the exchange or post alarming threads on social media. It is to reduce your exposure: withdraw funds to self-custody or distribute across multiple platforms, reduce the proportion of your holdings on any single exchange, and move assets out of earn or staking products that may have lockup periods.
Self-custody introduces its own risks -- key management, hardware failure, phishing attacks -- but those risks are within your control. Counterparty risk on a failing exchange is not. The Exchange Watch section maintains ongoing coverage of structural risk indicators across major platforms.
FAQ
How many red flags should trigger action?
There is no fixed threshold, but the combination matters more than the count. Two financial stress indicators -- such as withdrawal delays plus banking partner loss -- carry more weight than four governance flags. If you observe three or more flags from this list simultaneously on a single exchange, reducing your exposure is a reasonable precaution even if each flag has a plausible innocent explanation.
Are large exchanges immune to these risks?
No. FTX was the second-largest exchange by volume at the time of its collapse. Size provides no guarantee of solvency. Larger exchanges may have more resources to maintain appearances longer, which can actually increase the severity of the eventual failure. Evaluate each exchange on its observable behaviour, not its market position.
Should I avoid centralised exchanges entirely?
That depends on your operational requirements and risk tolerance. Centralised exchanges provide liquidity, fiat on-ramps, and convenience that decentralised alternatives do not yet fully replicate for most users. The goal is not to avoid exchanges but to manage counterparty exposure: limit the amount and duration of funds held on any single platform, use self-custody for long-term holdings, and monitor the indicators on this checklist for platforms where you do maintain balances.
How quickly can an exchange go from appearing healthy to collapsing?
FTX went from publicly operational to filing for bankruptcy in approximately ten days in November 2022, though the underlying insolvency had been building for months or years. Celsius paused withdrawals on a Sunday with little warning. The visible collapse is fast, but the underlying deterioration typically develops over months. That gap between hidden deterioration and public collapse is exactly why proactive monitoring of these flags matters -- by the time the collapse is obvious, withdrawals may already be frozen.
Where can I check these indicators in real time?
On-chain wallet monitoring is available through analytics platforms that track known exchange addresses. Order book depth can be observed directly on exchanges. Executive departures and regulatory actions are covered by crypto news outlets. No single source covers all fourteen flags, which is why maintaining awareness across multiple information channels is necessary.