A crypto exchange protection fund is a pool of the exchange's own money set aside to compensate users after a platform-side failure such as a hack or a system fault. It is not deposit insurance, itA crypto exchange protection fund is a pool of the exchange's own money set aside to compensate users after a platform-side failure such as a hack or a system fault. It is not deposit insurance, it
Your Crypto Exchange Protection Fund Does Not Cover the Loss You Will Actually Have
A crypto exchange protection fund is a pool of the exchange's own money set aside to compensate users after a platform-side failure such as a hack or a system fault.
It is not deposit insurance, it is paid at the exchange's discretion, and it almost never covers the loss you are most likely to suffer.
Key Takeaways
- Binance's SAFU is the largest disclosed user protection fund in this comparison, holding 15,000 BTC at an address anyone can check, with a public commitment to top it back up if its value falls below $800 million.
- The biggest exchange loss ever absorbed without users losing funds, Bybit's $1.4 billion breach in February 2025, was covered by emergency loans and reserves rather than by any protection fund.
- Three different mechanisms are marketed as an "insurance fund," and only the user protection pool has anything to do with your spot balance.
- No published fund terms in this comparison cover phishing, SIM swaps, account takeovers or your own trading losses.
- Coinbase stopped publishing its crime policy limit, and the $255 million figure still quoted across the industry traces back to 2019.
- Fund size is the weakest signal available, and a published wallet address plus a documented payout record tell you far more.
The promise that stops working when the exchange does
BitMart's trading services ended on 26 August 2026, with users told to close all positions before 01:00 UTC and to submit withdrawal requests before 05:00 UTC that day.
The platform is scheduled to close permanently on 31 January 2027.
The exchange announced the wind-down a month earlier, attributing it to its operating conditions, market environment and future strategic direction, without naming a specific trigger, and its BMX token fell about 58% in 24 hours, as reported by CoinDesk.
No protection fund was relevant to any of it.
That is the gap this article exists to close.
Exchanges announce funds constantly, and the numbers get bigger every year, but the documents that would tell you when a fund pays, who qualifies, and what the cap is are usually missing.
One press release from April 2026 announcing a $100 million user protection fund said outright that the fund's structure, trigger mechanisms and coverage scope would be disclosed in later announcements.
The number came first and the terms were left for later, which is the pattern across most of this category.
Three different things get called an "insurance fund"
Most confusion in this category comes from one place.
Three unrelated mechanisms share the same vocabulary, and they protect different people against different events.
Derivatives insurance funds
This is the oldest version and it lives entirely inside the leveraged trading engine.
When a liquidated position closes below its bankruptcy price, the shortfall has to be absorbed by someone.
The insurance fund absorbs it so that the winning trader on the other side keeps their profit instead of being clawed back through auto-deleveraging.
These funds are built mostly from liquidation fees, they grow in calm markets and shrink in violent ones, and they do nothing whatsoever for your spot wallet.
User protection pools
This is the SAFU-style reserve, and it is the one retail users usually have in mind.
Binance created the category in July 2018 by allocating 10% of trading fees to a dedicated pool.
The money belongs to the exchange, sits under the exchange's control, and is paid out when the exchange decides the situation warrants it.
Reading the trigger language matters more than reading the size, because "we may compensate" and "we will compensate under defined conditions" are not the same commitment.
Third-party crime insurance
A smaller group of exchanges and custodians buy commercial crime policies from real underwriters.
These typically cover theft from hot wallets by external parties, carry hard caps, and exclude anything that happens inside your own account.
This is the only one of the three backed by an outside balance sheet rather than the exchange's own.
Protection fund comparison: size, terms and payout record
The table below separates the two fund types instead of blending them, and it adds the three columns that decide whether a headline number means anything.
Platform | User protection fund | Derivatives insurance fund | Published scope or terms | Balance independently verifiable | Documented payout precedent |
Binance | SAFU, about $1.005B in 15,000 BTC (Feb 2026) | Multiple separate pools, balances exposed via a public API endpoint and an Insurance Fund History page; no single consolidated figure published | Support FAQ describes protection in "extreme cases" | Yes, BTC wallet address published | Yes: 2019 breach (about $40M); Dec 2025 Trust Wallet losses ($7M) |
MEXC | Guardian Fund, $100M established June 2025; expansion to $500M over two years announced May 2026 | Futures Insurance Fund, 751M USDT at latest disclosure (Aug 2026) | Scope stated in transparency reporting: system compromise and critical technical failure | Yes, fund wallet addresses published | None publicly documented |
Bitget | Protection Fund, launched 2022 at $300M; averaged $561M during April 2025 (high $617M, low $496M) | Not separately disclosed as a distinct figure | Academy pages describe purpose, not trigger conditions | Not verified | Pledged: VOXEL compensation announced April 2025 |
Bybit | Not disclosed as a separate pool | About $400M (mid-2026), with a daily historical balance page | Help centre documents fund mechanics in detail | Yes, daily balance history published | Yes: Feb 2025, about $1.4B loss absorbed, withdrawals never paused |
OKX | Not disclosed as a separate pool | Documented; current figure not verified | Help centre documents the fund's role | zk-STARK proof of reserves published | Not verified |
KuCoin | Insurance fund established 2018; current size not disclosed | Not verified | Not verified | Not verified | Yes: 2020 breach, users made whole |
Coinbase | No SAFU-style pool; $255M commercial crime policy | Not applicable | Yes, with explicit written exclusions | Not applicable to an insurance policy | Not applicable |
Kraken | None disclosed; states exchanges do not qualify for deposit insurance programs | Not verified | Yes, support article plus Terms of Service section 3.2 | Not applicable | No major breach of customer funds on record |
Data verified as of 27 August 2026 against each platform's official disclosures, published API documentation, regulatory sources and mainstream media reporting. "Not verified" means no figure was obtainable from a publicly accessible official source at that date, and it is recorded rather than estimated.
Which Crypto Exchange Protection Funds Have Ever Paid Out?
A fund that has never been tested is a promise.
Four cases in this comparison have been tested, and the results are more instructive than any of the headline numbers.
Binance, 2019 and 2025
When roughly 7,000 BTC worth about $40 million was stolen in 2019, SAFU covered user losses in full.
In December 2020 Binance's founder publicly committed the SAFU fund to reimbursing $10,107,505 to users affected by the COVER token exploit.
That record is thin in absolute terms, but it is a real one, and it is more than most exchanges can show.
KuCoin, 2020
Attackers obtained hot wallet private keys in September 2020 and took roughly $281 million, as reported by CoinDesk at the time.
About 84% was recovered through on-chain tracking, contract upgrades and legal recovery by November 2020.
The remaining 16%, roughly $45.6 million, came out of the insurance fund KuCoin had established in early 2018, and users were kept whole.
Bitget and the VOXEL rollback, 2025
On 20 April 2025, between 08:00 and 08:30 UTC, abnormal trading in the VOXEL perpetual futures market pushed the token's volume on the platform above Bitcoin's for the day.
Bitget suspended the accounts involved, rolled back the irregular trades within 24 hours, and pursued legal action over roughly $20 million in suspected illicit profits.
Whether the fund was ultimately drawn on has not been publicly disclosed.
This one deserves a note in Bitget's favour: the incident was not a breach of its custody systems, so the payout covered a trigger sitting outside what most protection funds are written for.
Bybit, 2025, and the case that undermines the whole category
In February 2025 attackers took roughly $1.4 billion from a Bybit cold wallet, the largest single theft in crypto history.
Bybit kept withdrawals open throughout, and its CEO said all pending requests had been processed within about twelve hours as roughly $5.5 billion left the platform.
Reserves were restored inside 72 hours through emergency loans from Galaxy Digital, FalconX and Wintermute plus large deposits, and a Hacken proof of reserves audit confirmed collateralisation above 100%, as CNBC reported.
Read that sequence again, because the money did not come from a protection fund.
It came from the balance sheet and from relationships with counterparties who moved within hours.
The largest user loss ever absorbed in this industry was covered by solvency and credit, which is the strongest available argument that fund size is the wrong thing to be ranking.
What No Crypto Exchange Protection Fund Covers
Here is where the marketing and the documents part ways.
Every fund whose terms are published excludes the following, and the exclusions are more consistent across platforms than the coverage is.
- Your account being compromised. Phishing, SIM swaps, credential theft, or a malicious signature you approved yourself are your loss.
- Your trading losses. Liquidations, adverse price moves and bad decisions are outside every policy.
- Token failures. A depeg, a protocol exploit, or a project collapse is not a platform incident.
- Insolvency. A discretionary pool is not a priority claim in a bankruptcy proceeding.
- Most cold storage scenarios. Commercial crime policies concentrate on hot wallets.
Coinbase states its position in bold in its own documentation: the crime policy does not cover losses from unauthorised access to a personal account through a breach or loss of credentials.
That distinction became concrete in 2021, when a 2FA flaw let attackers reach more than 6,000 individual Coinbase accounts.
Now put the scale in context.
Coinbase's crime policy covers hot wallets rather than total holdings, and the company no longer publishes the limit.
The $255 million figure still quoted across the industry traces back to disclosures made in 2019.
The most institutionally scrutinised name in this comparison stopped publishing the one number readers most want, which is itself the answer to how seriously this category is documented.
What US regulators say about the word "insurance"
The FDIC issued an advisory on 29 July 2022 warning that inaccurate statements about deposit insurance by non-bank entities, crypto companies included, can lead customers to believe they are protected against any kind of loss.
Its accompanying public fact sheet states plainly that deposit insurance does not extend to crypto assets and does not cover assets issued by non-bank entities.
Three weeks later the agency sent cease and desist letters to five companies over claims about FDIC coverage, one of which was FTX US.
SIPC, which backstops customer securities at failing US broker-dealers, does not cover crypto assets held at exchanges either.
If an exchange's marketing borrows banking language without linking to a policy document, treat the language as marketing.
MEXC's Guardian Fund: what it covers and what it does not
MEXC launched the Guardian Fund in June 2025 with $100 million.
In May 2026 it announced a commitment to expand the fund to $500 million over the following two years, alongside the purchase of 1,000 BTC to create a dual reserve of USDT liquidity and Bitcoin holdings.
Those are two different numbers and this article is not going to blur them.
The fund established and in place is $100 million, and $500 million is a two-year target announced in May 2026.
Anyone quoting the larger figure as a current balance is doing exactly what the rest of this page warns against.
The stated scope, in the platform's own terms
MEXC describes the Guardian Fund as a dedicated security reserve for large-scale hacks, targeted attacks and serious system vulnerabilities.
Its transparency reporting names two categories specifically: compensation where MEXC's systems are compromised, and losses arising from critical technical problems.
That is narrower than "we protect your assets," and the narrowness is the useful part, because a scope you can quote is a scope you can hold someone to.
MEXC's published description covers platform-side failure, and it does not extend to losses that originate inside a user's own account.
Readers should apply the same test to every fund and check the published scope rather than assuming.
No protection fund at any exchange is designed to resolve an account freeze or a risk-control review, because those are operational matters rather than loss events.
What you can actually check
Four things about MEXC's disclosures are verifiable by a reader without taking anyone's word for it.
Guardian Fund wallet addresses are published, so the balance can be read directly from a block explorer.
Proof of reserves has been published since February 2023, moved from bi-monthly to monthly, and is independently audited by Hacken, with the audit report archive retained for historical snapshots.
The August 2026 report put the BTC reserve ratio at 288% against 4,282.20 BTC in user holdings, USDT at 115% against 1,691,925,884.19 USDT, and USDC at 114%.
The Merkle tree generation and verification source code is published on GitHub, so a technically capable user can verify their own balance's inclusion rather than trusting a dashboard.
The number that matters if you trade perpetuals
For derivatives traders the Guardian Fund is the wrong fund to be looking at.
The one that determines whether a winning position gets clawed back through auto-deleveraging is the Futures Insurance Fund, which MEXC disclosed at 751 million USDT in August 2026.
That is among the larger separately disclosed derivatives backstops in this comparison, and Bybit is the only platform here that publishes a daily balance history rather than a single point-in-time figure.
Binance splits its insurance funds across multiple pools and exposes balances through an API rather than one published figure, so a like-for-like total comparison is not available.
Here is what the difference means in practice.
If you hold a $50,000 profitable long through a violent move and the exchange's insurance fund is exhausted, your position is a candidate for auto-deleveraging and your realised profit gets cut regardless of how correct your trade was.
A larger insurance fund does not make that impossible, but it moves the point at which it starts happening, and it is the only fund on this page whose size has a direct mechanical effect on a specific trade you might be holding right now.
Checking the disclosed balance for the contract you trade takes about a minute and most traders have never done it once.
Crypto Exchange Security Audits: Four Things People Confuse
The word "audited" is doing an enormous amount of unearned work across this industry.
Four distinct exercises hide behind it, and they prove four different things.
Proof of reserves is not a security audit
A proof of reserves attestation confirms that on-chain holdings at a moment in time cover the user balances the exchange declares.
It says nothing about liabilities the exchange did not declare, nothing about borrowed assets moved in for a snapshot, and nothing about whether the platform's systems are secure.
It is a solvency snapshot, and a useful one, but it is not evidence that a fund will pay.
SOC 2 and ISO 27001 test controls, not solvency
A SOC 2 Type II report examines whether stated controls operated effectively across a period.
ISO/IEC 27001 certifies that an information security management system meets the standard.
KuCoin announced SOC 2 Type II in April 2025 and ISO/IEC 27001:2022 in May 2025, and Bitget holds ISO 27001:2022.
Both are meaningful signals about process discipline and neither tells you anything about whether your assets are backed.
Penetration testing and bug bounties measure attack surface
These probe whether an attacker can get in, which is upstream of every other question on this page.
They are also the least standardised of the four, because scope is set by whoever commissions the test.
How to read a scope statement
Every audit report carries a scope section and almost nobody reads it.
Check which entity was assessed, which systems and which assets were in scope, what period was covered, and what the auditor explicitly excluded.
An audit of one subsidiary's hot wallet infrastructure and an audit of the group's full custody stack can carry the same word on a marketing page.
How to check a fund yourself in under a minute
The single most useful habit in this whole category costs less time than reading a review.
- Find whether the exchange publishes a wallet address for the fund, not just a dashboard figure.
- Paste the address into a block explorer and read the balance yourself.
- Check the date on every number the exchange quotes, because crypto-denominated funds move with the market.
- Look for the trigger language, and treat "we may" differently from "we will, under these conditions."
- Search whether the fund has ever been deployed, and for what.
Step three catches more errors than the rest combined.
Bitget's own educational pages describe a Protection Fund of $300 million, which was the 2022 launch allocation, while its own May 2025 announcement reported the fund averaging $561 million through April 2025 with a high of $617 million.
The fund has been larger than its launch allocation for some time, which is why the date attached to a figure matters more than the figure.
Fake support agents target exactly these moments
Exchange incidents and wind-downs generate a predictable second wave of losses that no fund covers.
Users are anxious, expecting unusual messages, and willing to act fast, which is precisely the condition impersonation scams are built for.
During the BitMart wind-down, the exchange had to publish warnings that there is no paid priority withdrawal service and no expedited processing channel.
Any request for an expedited processing fee, an account unfreezing fee, or a security deposit is a scam, without exception, on any platform.
Real exchanges do not charge you to release your own funds.
MEXC users can confirm whether a contact is genuine through MEXC Verify, and the platform's guide to common scam patterns covers the impersonation tactics currently in circulation.
Who should weigh this heavily, and who should not
There is no single winner here, and any page telling you otherwise is selling something.
If you hold significant long-term spot balances.
No fund on this page makes you whole, and the honest answer is self-custody for anything you are not actively trading.
Hardware wallets cost between $50 and $200 and remove counterparty risk entirely, which no policy can match.
If you keep an exchange balance anyway, the largest disclosed protection pool belongs to Binance and that is a defensible reason to hold there.
If you trade perpetual futures actively.
The derivatives insurance fund is the number that affects you and the protection fund mostly is not.
MEXC is our pick within this comparison on that specific measure, with 751 million USDT disclosed as of August 2026 and monthly independently audited reserve reporting alongside it.
Check the disclosed balance for the contracts you actually trade before you size a position.
If you are choosing based on the biggest headline number.
Stop, because that is the least predictive signal available.
Bybit had no separate protection pool and still absorbed the largest loss in the industry's history without pausing a single withdrawal.
If regulatory protection is your priority.
Then a fund is not what you are looking for and you should be comparing licences, not reserves.
Regional and regulatory disclosures
MEXC's User Agreement lists prohibited jurisdictions including the United States, and the UK's FCA lists MEXC Global Ltd on its Warning List as a firm not authorised in the UK.
Readers in either country should use a locally licensed platform, and in the US that means FDIC coverage on eligible cash balances at partner banks and SIPC coverage on securities, neither of which extends to crypto assets.
MEXC is not licensed or authorised as a financial services provider in the EU, the UK or the United States, and it appears on regulatory warning lists in several jurisdictions, including Hong Kong, where the SFC added MEXC to its Suspicious Virtual Asset Trading Platforms Alert List in March 2024, as well as the Netherlands, Germany and Japan.
Nothing on this page should be read as suggesting MEXC operates under a regulated deposit protection scheme, because it does not, and neither do the other non-US platforms compared here.
The MEXC User Agreement lists prohibited jurisdictions and governs any account relationship.
Frequently asked questions
What is a crypto exchange protection fund?
It is a reserve of the exchange's own capital set aside to compensate users after a platform-side incident such as a hack.
Payouts are discretionary and it is not deposit insurance.
Does a protection fund cover me if my account gets hacked?
No.
Every fund reviewed here excludes phishing, SIM swaps, credential theft and transactions you approved yourself.
Is crypto on an exchange covered by FDIC or SIPC insurance?
No, and the FDIC issued a formal advisory in July 2022 specifically to correct that belief.
SIPC does not cover crypto assets held at exchanges either.
What is the difference between a protection fund and an insurance fund?
A protection fund compensates users after platform incidents, while a derivatives insurance fund absorbs liquidation shortfalls to prevent auto-deleveraging.
Only the first one relates to your spot balance.
Which crypto exchange has the biggest protection fund?
Binance's SAFU, at roughly $1.005 billion held in 15,000 BTC as of February 2026.
Size alone is a weak indicator of whether you would actually be paid.
How can I verify an exchange's protection fund is real?
Look for a published wallet address you can check on a block explorer rather than a dashboard number.
Binance and MEXC both publish fund addresses.
Does proof of reserves mean my funds are insured?
No, it is a point-in-time solvency snapshot showing declared user balances are covered.
It says nothing about undeclared liabilities or about whether any fund will pay out.
What happens to a protection fund if the exchange shuts down?
In an orderly wind-down the fund is irrelevant and withdrawal access is what matters.
Move assets early rather than waiting for a published deadline.
Risk disclosure
Trading cryptocurrencies and derivatives carries substantial risk, including the total loss of deposited funds.
Leveraged positions can be liquidated rapidly during volatile conditions and losses can exceed initial margin in extreme scenarios.
Protection funds and insurance funds described in this article are discretionary commitments by private companies and are not government-backed guarantees.
Figures cited reflect disclosures available on 27 August 2026 and crypto-denominated funds change in value continuously.
This article is informational and is not investment, legal or tax advice.
Assess your own circumstances and consider taking independent professional advice before trading.
Check the numbers before you trust them
The habit this article is really arguing for takes sixty seconds and applies to every platform you use, including this one.
Read the date, read the scope, and read the balance on-chain rather than on a marketing page.
Market Opportunity
Notcoin Price(NOT)
$0.0004054
$0.0004054$0.0004054
USD
Notcoin (NOT) Live Price Chart
This article is provided by Sarah Chen for informational purposes only and does not constitute financial or investment advice. Cryptocurrency markets involve significant risk. Please conduct independent research or consult a qualified professional before making any investment decisions. The views expressed do not necessarily represent those of MEXC or its affiliates.
Popular Articles
View More
Best Crypto Exchanges in Africa (2026): Fees, Local Rails and Country Availability Compared
MEXC is our top pick among the exchanges in this comparison, on one number: 0.0500% spot taker against 0.10% or higher on every other platform in this comparison. On R10,000 of Bitcoin that is R5
Best Crypto Exchanges in Latin America 2026: Is Your Local Exchange Charging You 8x More?
Latin America needs two accounts, not one, and within this comparison MEXC is our top pick for the second one. A local venue moves your pesos, reais or soles, and it should. Everything after that
Can You Trust a Crypto Exchange Review Written by an Exchange? Here Is Our Entire Methodology
Across the six dimensions this methodology scores, MEXC is our top pick for traders whose decision turns on trading cost, breadth of listed assets and speed of access to new listings. It is not our
Hot Crypto Updates
View More
Pre-Market Briefing on Aug 27: NVIDIA Guides Approximately 70% Growth for Fiscal 2027 — Yet the Day's Biggest Gainer Is MSTR With 840K BTC
On August 27th, the US stock market closed with all three major indexes rising, but the gains were very different: the Nasdaq rose by 1.57%, while the Dow Jones Industrial Average only rose by 0.20%.
NVIDIA Earnings Highlights: $96.2B in Q2 Revenue, $108B Q3 Outlook— Yet the Day's Biggest Gainer Was AI Networking Switch Stock ANET
On August 26th, the US stock market closed narrowly and all three major indexes fell slightly, with a decline of less than 0.25%. The market is waiting for one thing: NVIDIA's quarterly report will
Why Is KOSPI Rising Despite a Bank of Korea Rate Hike? Samsung and SK Hynix Lead AI Rally
Overview On the morning of August 27, the Bank of Korea raised its benchmark rate by 25 basis points to 3.00%, the first back-to-back hike since January 2023. Conventional logic says a tightening
Trending News
View More
Stablecoins as Cash Equivalents: What FASB Proposes
The Financial Accounting Standards Board has proposed guidance explaining when certain stablecoins may qualify as cash equivalents under U.S. generally accepted accounting principles. The proposal rep
Grayscale Zcash Trust Seeks NYSE Arca Listing
Grayscale Investments has advanced its effort to move the Grayscale Zcash Trust toward an exchange-listed structure, filing Amendment No. 4 to its Form S-3 registration statement on August 18, 2026. T
Related Articles
View MoreBest Crypto Exchanges in Africa (2026): Fees, Local Rails and Country Availability Compared
MEXC is our top pick among the exchanges in this comparison, on one number: 0.0500% spot taker against 0.10% or higher on every other platform in this comparison.On R10,000 of Bitcoin that is R5 again
Best Crypto Exchanges in Latin America 2026: Is Your Local Exchange Charging You 8x More?
Latin America needs two accounts, not one, and within this comparison MEXC is our top pick for the second one.A local venue moves your pesos, reais or soles, and it should.Everything after that fiat c
Best Crypto Exchanges in Southeast Asia 2026: 10 Platforms Were Named by Regulators, and One of Them Is Us
There is no single best crypto exchange in Southeast Asia.Each of the six main markets licenses its own platforms through its own regulator, and an exchange that is legal in one country can be unlicen
