How Crypto Exchanges Work: Order Books, Custody, and What FTX Taught Us

For most people, a crypto exchange is where crypto begins: the app where local currency becomes bitcoin or stablecoins. It looks like online banking and feels like a brokerage, and that familiarity hides how different it really is. An exchange is a marketplace, a custodian, and — in most of the world, to varying degrees — a lightly supervised financial institution all at once. Understanding what happens behind the buy button, and where the real risks sit, is the difference between using these platforms deliberately and trusting them blindly. FTX’s customers learned that difference the hard way.

What an exchange actually does

Strip away the interface and a centralized exchange (CEX) performs three distinct jobs:

• Matching: it connects people who want to buy with people who want to sell, and executes trades between them.
• Custody: it holds customers’ funds — both crypto and fiat — while they trade.
• On/off-ramping: it connects to the banking system so you can move local currency in and out.

Each job carries its own risks, and the second one — custody — is where the industry’s worst disasters have happened.

Order books, in plain language

The core machinery of an exchange is the order book: a live list of all standing offers to buy (bids) and sell (asks) at various prices. When you place a market order (“buy now at the best available price”), the exchange matches you instantly against the best standing offers. A limit order (“buy only at this price or better”) joins the book and waits. The gap between the best bid and the best ask is the spread, and the depth of offers around the current price is liquidity. Liquidity is why the same trade can be cheap on a large exchange and expensive on a small one: with a thin order book, even a modest order moves the price against you — that is slippage. Prices differ slightly between exchanges at any moment because each order book is its own little market; arbitrage traders keep them roughly aligned.

Custody: the part most people never think about

Here is the fact that should reframe how you see exchanges: when your balance shows 0.1 BTC, you usually do not hold bitcoin — the exchange does, and it owes you some. Customer funds are typically pooled in wallets the company controls, and your balance is an entry in its internal database, an IOU. This is efficient and makes trading instant, but it means your funds’ safety depends entirely on the company’s honesty, competence, and solvency. The crypto adage “not your keys, not your coins” is not ideology; it is a technical description of this arrangement. Reputable exchanges mitigate custody risk with cold storage (keys held offline), insurance funds, and segregated accounts — but the structural dependence on the operator remains.

KYC: why exchanges ask for your ID

Any exchange that touches the banking system operates under anti-money-laundering laws, which require it to verify customers’ identities (KYC — know your customer), monitor transactions, and report suspicious activity. This is not the platform being nosy; it is a legal condition of existing. The practical consequences: your trading activity on a regulated exchange is visible to authorities and, increasingly, to tax agencies, and platforms that promise “no KYC” are either operating outside the law, restricted to small amounts, or simply lying — each of which is its own warning sign.

CEX vs DEX: two very different animals

A decentralized exchange (DEX) like Uniswap replaces the company with code. There is no account, no custodian, and usually no order book: most DEXs use liquidity pools, where prices are set by a formula against pooled funds, and you trade directly from your own wallet. The trade-offs are real on both sides. A DEX never holds your funds (eliminating custody risk) and requires no permission to use — but you carry full responsibility for your keys, face smart contract bugs, scam tokens, and no customer support whatsoever. A CEX offers convenience, fiat ramps, and someone to email — at the price of trusting it with custody. Neither model is simply “safer”; they concentrate risk in different places.

FTX: what happens when custody fails

In November 2022, FTX — then one of the largest exchanges on Earth, fronted by the industry’s most celebrated founder — collapsed in about a week. The core failure was custodial: billions of dollars in customer deposits had been quietly funneled to Alameda Research, its affiliated trading firm, and lost on risky bets. When a leaked balance sheet triggered a bank-run of withdrawals, the money simply was not there — a hole of roughly $8 billion. Founder Sam Bankman-Fried was convicted of fraud in 2023 and sentenced to 25 years in prison. The lesson is not “that exchange was bad.” It is that an opaque custodian holding pooled customer funds can misuse them for years while looking perfectly healthy from the outside — and that size, fame, celebrity endorsements, and Super Bowl ads verify nothing.

What to check before using any exchange

No checklist eliminates risk, but these questions separate serious platforms from the rest:

• Is it registered or licensed where you live? Regulation is not a guarantee, but operating legally raises the bar and gives you recourse.
• Does it publish proof of reserves or audits? Post-FTX, serious exchanges document that customer assets exist. Look for third-party verification, not just a webpage.
• Are customer funds segregated from company funds, and does it claim not to lend or reinvest deposits?
• Can you withdraw easily? Test with a small amount first. Delayed or restricted withdrawals are the classic early symptom of trouble.
• What are the real fees? Trading fees, spreads, and withdrawal fees add up differently than advertised headline rates.
• Does it push you toward yield products? “Earn” programs mean your deposits are being lent out. That is added risk, not a bonus.

And one habit above all: an exchange is a place to trade, not a vault. Holdings you do not actively trade are safer in a wallet whose keys you control.

The bottom line

Exchanges are genuinely useful infrastructure — they are how virtually everyone enters crypto, and the good ones invest heavily in security and compliance. But they concentrate exactly the risk crypto was designed to remove: trusting a third party with your money. Learn how the order book sets your price, remember that your balance is an IOU until you withdraw, and let FTX serve its one useful purpose — as a permanent reminder that no platform is too big to fail.

This content is for informational purposes only and does not constitute financial or investment advice.