On Oct. 25, 2022 \u2014 about two weeks before the collapse of the world\u2019s third-largest cryptocurrency exchange, FTX \u2014 prominent DeFi architect Andre Cronje published<\/a> a foreboding article with a chilling warning on the state of centralized cryptocurrency exchanges:<\/p>\n \u201cRemedies under the current regulatory regime are ineffective. Most investors sign away their rights to their crypto in voluminous terms and conditions of crypto-exchanges and many will (at best) rank as unsecured creditors should these exchange services be liquidated. Crypto exchange and crypto investment service providers are essentially operating as banks, but without the safeguards and regulation which banks are required to follow.\u201d<\/p>\n What happened afterward is history. With the abrupt downfall of FTX, customers suddenly discovered that despite all previous guarantees, their assets had been locked as the defunct exchange filed for bankruptcy amid an $8 billion shortfall<\/a> \u2014 the consequence of senior executives siphoning customer assets to trade in related hedge fund Alameda Research. Even though the new management claims they have recovered some customer assets, clients\u2019 funds still remain frozen in bankruptcy proceedings, with no end in sight and heavy legal fees to follow.\u00a0<\/p>\n In the aftermath, the crypto community has raised serious concerns regarding the state of CEXs. Demands such as proof of assets and liabilities, segregation of customer funds, and voluntary registration as broker-dealers have echoed in the industry. That said, haven\u2019t CEXs come this far by making an effort to legitimize their operations? Here\u2019s why the issue is more complicated than meets the eye.\u00a0<\/p>\n Jack Graves, a teaching professor at Syracuse University, tells Magazine, \u201cTo my knowledge, there is nobody acting as an exchange of cryptocurrencies and digital assets in the U.S. that is registered with the SEC. Instead, they simply stated that they don\u2019t trade securities. And that\u2019s a critical difference.\u201d<\/p>\n Graves explains that while exchanges such as Coinbase are licensed money transmitters, they are not broker-dealers. \u201cAs soon as you talk about broker-dealers of securities, that triggers a bunch of disclosure and custody requirements,\u201d Graves states. \u201cI happen to use Fidelity as my brokerage company, and if Fidelity goes bankrupt, I\u2019m not an unsecured creditor in bankruptcy. So, I have a claim to my assets before all the unsecured creditors.\u201d<\/p>\n At least in the U.S., crypto exchanges cannot become broker-dealers because the digital assets they facilitate are not classified as securities by the SEC. Yet, there is also ample confusion on the matter.<\/p>\n \u201cGary Gensler has essentially said that everything except Bitcoin and maybe Ether is probably a security,\u201d Graves says. \u201cSo, the exchanges are taking the view that until the SEC says it\u2019s a security, they are going to trade it. And as soon as the SEC says crypto assets are securities, they are going to quit.\u201d<\/p>\n The problem isn\u2019t unique to the United States. Lennix Lai, managing director at Singaporean crypto exchange OKX, explains to Magazine that crypto exchanges cannot, as of now, be registered as broker-dealers due to a fundamental difference in their business model:\u00a0<\/p>\n \u201cBy definition, a crypto exchange is actually a matching engine that matches orders from buyers and sellers. A broker-dealer license only governs the relationships that you, as the firm, have the capability to handle client orders and route them to a stock exchange. However, in the crypto world, most of the business models running are not the broker-dealer model but actually a \u2018stock exchange\u2019 model. So, that gives governments regulatory difficulty in that we don\u2019t have an exchange license to apply for.\u201d<\/p>\n Canada is one of the few jurisdictions that offer a clear regulatory pathway for exchanges to become registered broker-dealers \u2014 perhaps due to the sudden collapse of major Canadian crypto exchange QuadrigaCX in 2019.<\/p>\n In Canada, all prospective crypto exchanges must register with the Investment Industry Regulatory Organization of Canada and applicable provincial regulators to conduct business. On June 22, 2022, the Ontario Securities Commission announced it had issued an enforcement action<\/a> against Bybit and KuCoin, alleging the two operated unregistered crypto asset trading platforms in the country.<\/p>\n After registration, crypto exchanges in Canada become broker-dealers just like their stock-trading counterparts, even though regulators ruled that the assets facilitated by the exchanges are not securities. As Katrina Prokopy, chief legal officer at Canadian exchange Coinsquare, explains to Magazine:\u00a0<\/p>\n \u201cCoinsquare is the first crypto asset trading platform that proceeded to get registration as an investment dealer and an IIROC [Investment Industry Regulatory Organization of Canada] member. That took two years of working intensively with the regulators. Investors can take comfort knowing that IIROC dealers must keep sufficient regulatory capital and must have operational controls, financial controls, compliance, proficiency requirements, risk management, insurance requirements, and custodial requirements in using counterparties that are acceptable to IIROC and can have a certain amount of capital. Absent fraud, blatant fraud, it would be very difficult for the same situation as FTX to happen with an IIROC-regulated platform.\u201d<\/p>\n In addition, offshore CEXs can select governing jurisdictions far away from users\u2019 domicile residences, making it difficult to resolve disputes. As an example, according to Binance\u2019s terms of use, the Hong Kong International Arbitration Centre has the discretion to regulate disputes between the exchange and its clients. Although Binance has agreed to hear disputes raised in the said court of law in the past, users have complained that the process is quite expensive<\/a>. Meanwhile, Prokopy explains that Coinsquare\u2019s governing jurisdiction is in Ontario, Canada. Thus, users do not need to travel abroad or hire foreign international law attorneys to resolve a dispute between themselves and the exchange:<\/p>\n \u201cCustomers have access to our regulators, they have access to our legal and compliance department to help resolve matters, and they have ultimate recourse to the Canadian judicial system if that\u2019s what they want to pursue. And you know, as a corporation registered in Ontario, we have a registered address for service.\u201d<\/p>\n Read also<\/p>\n Crypto Pepes: What does the frog meme?<\/p>\n <\/a>\n <\/div>\n This is how to make \u2014 and lose \u2014 a fortune with NFTs<\/p>\n <\/a>\n <\/div>\n<\/div>\n<\/div>\n Graves summarizes the regulations under which offshore cryptocurrency exchanges<\/a> operate: It\u2019s like saying, \u201cLook, we\u2019re in good shape; but if we go bankrupt, you\u2019re an insecure general creditor.\u201d<\/p>\n According to Graves, unsecured creditors typically recover 10 cents on the dollar in the United States. \u201cI think we\u2019ve got a lot of work to do with an alternative that is meaningful, other than just breach of contract,\u201d Graves states. \u201cAnd breach of contract isn\u2019t worth much when you end up in bankruptcy.\u201d<\/p>\n \u201cAssuming everybody\u2019s doing the best, they try to make money, and it just doesn\u2019t work, and the exchange goes bankrupt, you still don\u2019t have any protection as the customer.\u201d<\/p>\n<\/blockquote>\n For example, Coinbase\u2019s terms of use state that the firm carries crime insurance that protects digital assets from theft and cybersecurity breaches. However, the policy does not cover \u201cunauthorized access\u201d to Coinbase accounts due to a breach of credentials. In addition, while U.S. customers\u2019 fiat deposits are covered up to $250,000 by the Federal Deposit Insurance Corporation in the event of a default in the custodial bank, the same protection does not extend to their digital asset holdings.\u00a0<\/p>\n Another exchange, OKX, explicitly states<\/a> in its terms of service that \u201cDigital assets of users are not protected by deposit protection or deposit insurance scheme. In the case of an irreconcilable shortfall, you may not receive some or any of your deposited assets or funds.\u201d<\/p>\n OKX\u2019s Lai explains that this is because the insurance industry does not have the full capability to underwrite risks within the cryptocurrency realm:\u00a0<\/p>\n \u201cMost of the insurance policies right now only cover a relatively restricted amount because they want to cap their appetite for risk, and also, they will cover a specific area of risk \u2014 for example, insider jobs.\u201d<\/p>\n Coinsquare\u2019s Prokopy confirms the limitations of insurance policies covering crypto firms. Coinsquare clients currently have insurance policies covering $1 million of their fiat Canadian dollar deposits, but Prokopy says the coverage does not extend to digital assets. She elaborates that the firm has been advocating for an expansion of coverage, as it is currently paying the same fees as other IIROC members for asset insurance:\u00a0\u00a0\u00a0\u00a0<\/p>\n \u201cThere is the Canadian Investor Protection Fund, which is the insurance coverage that IIROC member firms have for customer assets in the crypto space. It is available for the cash component in the trading accounts. But the CIPF is not at this point covering crypto. So, in the event that the IIROC dealer went bankrupt, there would be insurance protection to the cash component, not the crypto component.\u201d<\/p>\n As told by Lai, one way customers can receive assurance that their funds are secure is through a proof-of-reserves audit.\u00a0<\/p>\n \u201cThe proof of reserves we publish encompasses proof of liability,\u201d says Lai. \u201cFor every OKX customer that owns their deposit, OKX records a liability to them.\u201d\u00a0<\/p>\n The executive explains that by allowing users to self-verify the exchange\u2019s disclosures using open-source methods, OKX demonstrates to its customers that its asset coverage to liability \u201cis greater than one-to-one.\u201d The exchange updates its proof of reserves monthly.\u00a0<\/p>\n Other stakeholders, such as former Kraken CEO Jesse Powell, disagree. For Powell, a proof of reserves featuring Merkle tree verification is \u201chand wavey bullshit\u201d and cannot be used in lieu of a full traditional account. \u201cThe statement of assets is pointless without liabilities,\u201d he tweeted in November 2022.<\/p>\n I’m sorry but no. This is not PoR. This is either ignorance or intentional misrepresentation.<\/p>\n The merkle tree is just hand wavey bullshit without an auditor to make sure you didn’t include accounts with negative balances. The statement of assets is pointless without liabilities. https:\/\/t.co\/b5KSr2XKLB<\/a><\/p>\n \u2014 Jesse Powell (@jespow) November 25, 2022<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n Graves also noted the difficulty of finding auditors to work in the first place. \u201cThe problem right now, as I understand it, is the auditors don\u2019t know how to audit,\u201d he says.<\/p>\n Subscribe<\/p>\n The most engaging reads in blockchain. Delivered once a \u201cThey have no idea how to deal with this stuff. You can audit how many assets a crypto exchange has on-chain, but how much of it is pledged as collateral? That\u2019s a lot harder to figure out unless you have access to their financial services, books, and records. [\u2026] We saw this with FTX. Yeah, FTX has some money, but a whole lot of it was transferred to Alameda, and Alameda is investing in leveraged swaps. And so just looking at assets on-chain, you can verify that, but it really tells you nothing in terms of liabilities and leverage.\u201d<\/p>\n Currently, Coinbase is one of the few crypto exchanges to have an auditor \u2014 Deloitte \u2014 though much of it can be attributed to the fact that it\u2019s a publicly traded company. Previously, South African auditor Mazars claimed<\/a> that Binance users\u2019 Bitcoin was \u201cfully collateralized\u201d on the platform but then removed its proof-of-reserve verification for Binance, along with other crypto exchanges, from its website approximately one week later. Binance says it has reached out to multiple large auditing firms, but they are \u201ccurrently unwilling to conduct a PoR for a private crypto company.\u201d<\/p>\n While crypto users have largely agreed on the need for CEXs to become regulated in the aftermath of FTX\u2019s collapse, it may not be currently possible due to the lack of regulatory pathways<\/a>. Coinsquare\u2019s Prokopy certainly illustrated the trust brought to CEXs when there is a clear pathway forward. However, both Lai and Graves raised the issue of chaotic regulatory frameworks in the U.S., Singapore and other parts of the world, making obtaining a broker-dealer license impossible.<\/p>\n That said, regulators have been ramping up efforts in this new field. In a White House briefing on Jan. 27, lawmakers stated that they were working on \u201csafeguards\u201d to supplement the development of new digital asset technologies and unveil priorities for blockchain research. For now, CEXs face an uphill battle to demonstrate legitimacy to their users. But as Graves puts it, some essential corporate safeguards remain in place aside from the contractual obligation to customers.<\/p>\n \u201cI don\u2019t think the current structure with offshore exchanges is an issue. If exchanges like Binance.US and Binance International don\u2019t keep them independent, the U.S. regulators will go after Binance International and say we have jurisdiction because you\u2019re acting through the U.S. entity. If they were commingling funds, local creditors could also go after Binance International to pay off all those debts.\u201d<\/p>\nWhy not just get regulated? <\/strong><\/h3>\n
![\"Gary](\"https:\/\/cointelegraph.com\/magazine\/wp-content\/uploads\/2023\/02\/image-5.png\")
\n Features<\/span><\/p>\n
\n Features<\/span><\/p>\nAre user funds protected by law? <\/strong><\/h3>\n
\n
![\"Coinbase\"](\"https:\/\/cointelegraph.com\/magazine\/wp-content\/uploads\/2023\/02\/image-6-1024x560.png\")
Are proof of reserves legitimate? <\/strong><\/h3>\n
\n
\n week.<\/p>\n<\/p><\/div>\n![\"Subscribe](\"https:\/\/cointelegraph.com\/magazine\/wp-content\/uploads\/2022\/10\/reading-copy.png\")
\n<\/div>\n<\/div>\n<\/div>\n<\/div>\nCan we still trust CEXs?\u00a0<\/strong><\/h3>\n
![\"\"](\"https:\/\/lh5.googleusercontent.com\/QUdQB-PL-_VeArfvWKo_NfesZVjdbsjNe1BzDjeRyQWg2kceANJDY20n0Lakg66SBkp-KknimjpeBRdC8aFwaJUMyLxYwxga4bK6nKB1zdTcp2aKxVWyKx86YXZphlVmuPkjt8Dt1EsJI9nTADKeP2M\")
![\"\"](\"https:\/\/lh6.googleusercontent.com\/pKfaXAP0BtmOM2lt05DWja0f1uGhYqy5J0XI6a_ByxtpjlDZCNC-NiCuflZ0STfka0zoqjTpwJHFz7P-rNlAXPIMXPHCBCN1LZaXaUw6xbNZ5GMFp9K2Ipm7QklmnP5ETB_veyQ_1iu3FOqwqjgVXJs\")
![\"\"](\"https:\/\/cointelegraph.com\/magazine\/wp-content\/uploads\/2022\/01\/portrait_about_us_zhiyuan_sun_720.jpg\")