Vetting a Crypto Exchange for Solvency and Payout Risk (Post-FTX Lessons)

When a crypto exchange partner goes insolvent, your commissions don't just stop — they can disappear along with any balance sitting in your affiliate wallet, and your audience's trust in your recommendation disappears with it. The FTX collapse in November 2022 turned "which exchange should I promote" from a payout-rate question into a solvency question, and that shift hasn't reversed. If you're an introducing broker (IB) building a crypto referral business, vetting an exchange's financial health before you commit an audience to it is now the first filter, ahead of commission structure or commission model.

This guide covers what solvency and payout risk actually mean for an exchange, which evidence is worth trusting, and how to build a repeatable vetting process instead of a one-time gut check.

Why Solvency Risk Is an IB Problem, Not Just a Trader Problem

Your referred users' funds sitting on an exchange are the exchange's liability to them. If the exchange collapses, two things happen to you specifically, on top of the harm to your referrals:

• Your unpaid affiliate balance becomes an unsecured claim. Most exchange affiliate agreements pay in arrears — weekly or monthly. Whatever commission has accrued but not yet been paid out is, legally, money the exchange owes you. In a bankruptcy, IB payables rank behind client custodial funds and often behind secured creditors, which in practice means partial or zero recovery.
• Your audience remembers who sent them there. A referred user who loses access to funds during a freeze or bankruptcy proceeding associates that loss with the person who recommended the platform. This reputational cost outlasts any single commission cycle, and it compounds for content creators and community owners whose business rests on trust.

What "Solvency" Actually Means for an Exchange

A solvent exchange holds enough liquid assets to cover 100% of what it owes customers, on demand, at any time. What can go wrong:

1. Rehypothecation — the exchange lends out or trades with customer deposits instead of holding them 1:1, then can't unwind those positions fast enough when withdrawals spike. This was the core mechanism behind FTX's roughly $8.9 billion shortfall.
2. Commingling — customer funds and the exchange's own operating capital sit in the same accounts, so a company-side loss directly depletes what customers are owed.
3. Illiquid or related-party collateral — the exchange's own token, or a sister company's shares, is counted as reserve backing that evaporates exactly when needed, because a crisis of confidence tanks its price as customers try to withdraw.
4. Maturity mismatch — assets are locked in illiquid positions (staking, lending, venture bets) while liabilities to customers are payable on demand.

None of these are visible from the outside by default, which is why the evidence you look for has to substitute for the transparency the exchange itself won't volunteer.

The Evidence Hierarchy: What to Actually Trust

Not all "proof" is equal. Rank what an exchange shows you, strongest to weakest:

Proof of reserves is the mechanism most exchanges now lean on, and it's worth understanding rather than treating as a checkbox. In its strongest form, the exchange assigns every customer account a leaf in a Merkle tree containing a balance hash, combines leaves into a single root hash, and publishes that root along with proof its on-chain reserves cover aggregate liabilities. A user can verify their own balance is included without seeing anyone else's. The best current implementations, as Phemex's explainer on Merkle-tree proof of reserves describes, pair this with third-party attestation and, increasingly, zero-knowledge proofs confirming reserves cover liabilities without revealing exact asset composition.

A Practical Vetting Checklist

Before committing to promote an exchange, work through this list:

• [ ] Reserve ratio, per asset. Look for a per-asset breakdown (BTC, ETH, stablecoins), not an aggregate percentage. An exchange can be over-collateralized on its own token while under-collateralized on the stablecoins customers actually hold.
• [ ] Audit cadence and auditor identity. Monthly or quarterly beats annual. A named, recognizable accounting or blockchain-analytics firm beats an unnamed "independent auditor."
• [ ] Segregation of client funds. Confirm client custodial wallets are legally and operationally segregated from operating capital, ideally under a custodian (a regulated third party holding assets separate from the exchange that trades them) rather than self-custodied.
• [ ] Regulatory license and jurisdiction. Check which regulatory jurisdiction licenses the exchange for custody, not just for a marketing entity. A regulated broker-style license requiring capital adequacy and periodic reporting is meaningfully different from an offshore shell with none. An unregulated broker structure is a yellow flag, not automatically disqualifying, but it removes a layer of external checking.
• [ ] Insurance or protection fund. Does the exchange maintain a dedicated fund with a documented claims process, or is it a marketing line with no mechanism behind it?
• [ ] Cold storage percentage. What share of customer assets sits offline versus in hot wallets used for daily withdrawals? Well-run exchanges disclose 90%+ in cold storage; materially lower without explanation is worth asking about.
• [ ] Withdrawal history under stress. Search for any past withdrawal delays, caps, or freezes, even brief ones. A clean record through at least one market-wide stress event is more informative than any single audit.
• [ ] Corporate structure and management. As Harvard Business School's case study on the FTX collapse outlines, opaque structures and management with no track record outside crypto correlated strongly with failure. A shared trading arm and exchange arm with no operational separation deserves extra scrutiny.

Red Flags That Should Stop You Immediately

Some signals override an otherwise attractive commission model or payout speed:

• Reserve figures that only show an aggregate percentage, never a per-asset breakdown.
• A native exchange token making up a large share of disclosed "reserves."
• Ownership overlap between the exchange and a trading firm, market maker, or lending arm that uses customer assets.
• No named auditor, or one that has never worked with a regulated financial institution.
• A jurisdiction chosen specifically because it has no capital-adequacy or custody-segregation requirement.
• Aggressive affiliate recruitment (unusually high CPA or fee-share offers) from an exchange simultaneously vague on reserves — a common pattern when compensating for outflows by pushing new deposits through affiliates.

Worked Example: Comparing Two Hypothetical Exchanges

Here's how the checklist plays out against two illustrative, hypothetical profiles (not real exchanges):

Exchange A isn't necessarily paying the highest commission, and that's the point: the evaluation has to happen before the commission comparison, not instead of it. An exchange that fails half this table can still offer double the revenue share and be the wrong partner, because a solvency event wipes out your audience's funds and your unpaid balance at once.

Common Mistakes IBs Make When Vetting Exchange Partners

• Treating trading volume as a solvency proxy. A high-volume exchange can still be commingling funds; volume measures activity, not custody practices.
• Accepting a single point-in-time audit as an ongoing guarantee. An audit from 18 months ago tells you nothing about the balance sheet today.
• Skipping the jurisdiction check because "it's crypto, it's all offshore anyway." There's a real difference between a licensed VASP under an active regulator and a shell entity with no reporting obligations.
• Ignoring KYC and geo-restriction chaos as a solvency signal. Exchanges scrambling to exit jurisdictions, or applying inconsistent KYC, are often responding to regulatory pressure that also correlates with financial stress.
• Not re-checking after signing. An exchange that passed vetting a year ago can have changed ownership, leadership, or reserve practices since.

Does a Proof-of-Reserves Badge Mean an Exchange Is Safe to Promote?

No, on its own. Treat proof of reserves as necessary but not sufficient: it confirms liabilities were covered at one snapshot, with a specific methodology, as FinanceFeeds' 2026 overview of proof-of-reserves systems explains. Pair it with audit cadence, cold-storage disclosure, licensing, and withdrawal history before treating an exchange as vetted.

Where This Fits in Your Broader Partner Selection

Solvency vetting is one input into the larger decision covered in the complete guide to choosing a crypto exchange affiliate program — commission structure, payout reliability, and audience fit all still matter. It connects to the same discipline covered in the IB due-diligence checklist, which applies across every market. If you're weighing a lifetime revenue share against a one-time bounty, solvency changes that math too: a lifetime fee share only beats a bounty if the exchange is still solvent years from now.

Once you've narrowed your options to exchanges that clear these checks, compare them side by side, including regulatory standing and payout track record, on Revenika's crypto exchange comparison — a surface built to let you filter on the same signals covered here, rather than relying on an exchange's own marketing claims.

Frequently Asked Questions

What happened to affiliate and IB payouts in the FTX collapse?

FTX's bankruptcy left an estimated $8.9 billion shortfall in customer funds. Affiliates and IBs with unpaid commission balances became unsecured creditors, ranked behind customer fund recovery. Recovery for unsecured creditors in crypto bankruptcies has historically been partial and taken years to distribute, when it happens at all.

Is proof of reserves the same as a financial audit?

No. A financial audit examines a company's full balance sheet, including liabilities and off-balance-sheet obligations, over a period. Proof of reserves is narrower: it verifies on-chain assets match disclosed liabilities at one snapshot. An exchange can look strong on proof of reserves while carrying undisclosed liabilities a full audit would catch.

How often should I re-check an exchange's solvency signals after I start promoting it?

Quarterly at minimum for the reserve ratio and any withdrawal-issue news; immediately on any reported delay, cap, freeze, or leadership change. Solvency risk builds gradually and surfaces suddenly, so infrequent checking defeats the purpose.

Are regulated exchanges automatically solvent?

No, but they're structurally harder to run insolvent without detection. A license requiring capital adequacy reporting, custody segregation, and periodic review adds an external check unregulated offshore entities don't have. Regulation reduces the probability and detection lag of insolvency; it doesn't eliminate the risk.

What's the single strongest solvency signal if I only have time to check one thing?

Cross-reference the reserve ratio against jurisdiction and custody structure together, not the ratio alone. A strong-looking reserve percentage from an exchange with no independent custodian and no capital-adequacy regulation is weaker evidence than a modest but independently attested, regulator-supervised position.

Conclusion

Payout rate and cookie duration decide how much you earn from a crypto exchange partnership. Solvency decides whether you get paid at all, and whether your audience still trusts you afterward. Build the habit of checking reserve reporting, custody structure, licensing, and withdrawal history before you promote any exchange, and revisit those signals on a schedule once you're live. It's a small amount of recurring work against a risk that, when it materializes, wipes out the relationship completely rather than partially.