
Track record – Has it been hacked before, and how did it handle it (made users whole, or not)?
Proof of reserves – Does the exchange publish audited proof that it actually holds the funds it claims?
Regulatory status – Is it licensed/regulated in a recognizable jurisdiction, or operating in a legal gray area?
2FA and withdrawal whitelisting – Does it support (and encourage) strong account security features?
Insurance fund – Some exchanges maintain a fund specifically to cover user losses from a breach.
Last edited: