CEX.IO

CEX.IO stores approximately 98% of customer funds in offline cold wallets protected by multi-signature technology and physical armed security for its Hardware Security Modules. Hot wallets undergo annual third-party PCI DSS Level 1 audits. The platform requires 2FA for withdrawals, offers withdrawal address whitelisting, and monitors accounts for suspicious login activity. A bug bounty programme via HackerOne was launched in 2024. No major platform-wide hack or funds breach has been publicly confirmed in its operating history.

Yes, but with limitations. CEX.IO relaunched spot trading for US residents in February 2024 after obtaining Money Transmitter Licences in 30+ states. Basic buy/sell and wallet services are available in most eligible states. However, staking and automated staking services remain suspended for US users since April 2023 while the company awaits regulatory clarity. Availability of specific assets may differ for US customers due to local securities regulations.

CEX.IO holds over 40 licences and registrations. Key ones include: FCA MLR registration in the UK (via FCA-designated firm Gateway 21, as of August 2024); a DLT Provider licence from Gibraltar's GFSC; FinCEN MSB registration in the US (since 2015) plus 30+ state Money Transmitter Licences; a crypto licence in Lithuania; and registration in Spain. These registrations govern AML/KYC compliance rather than providing bank-level deposit guarantees.

No. As of 2025, CEX.IO does not publish cryptographic Proof of Reserves audits or Merkle-tree attestations. This is a notable transparency gap relative to exchanges like Kraken, Binance, and OKX, which have commissioned third-party PoR audits. CEX.IO does claim cold storage of 98% of funds and holds PCI DSS Level 1 certification, but neither constitutes a formal PoR.

In October 2023, CEX.IO voluntarily suspended onboarding of new UK clients to comply with the FCA's expanded Financial Promotions regime. The UK represented over 69% of CEX.IO's European customer base at the time. After approximately 10 months updating compliance infrastructure, CEX.IO resumed full UK operations in August 2024, operating under the approval of Gateway 21, an FCA-designated firm.