CZ's "Exchanges Are Safer" Claim Looks Bold-2025 Saw $158B in Illicit Flows and Big Holders Still Pull Money Out

CZ is challenging the post-FTX default assumption

CZ is entering an active debate. The familiar crypto slogan is "not your keys, not your coins", and that mindset gained fresh traction after FTX. Large holders moved funds from centralized exchanges into personal wallets, especially after the 2022 collapse. That makes CZ's claim sound provocative: if exchanges can fail, why trust them with value at all?

The more useful answer is that the right default depends on the threat. For everyday users, centralized exchanges can still be the safer starting point because self-custody carries hard operational risks. If the platform fails, a wallet is compromised, or the password is lost, recovery is often impossible. That is why the reflex toward self-custody is not irrational.

But CZ's framing gets weaker as "risk" is stretched beyond exchange failure. Crypto risk is not only counterparty risk. Illicit crypto volume reached $158 billion in 2025, and sanctions-related activity was dominated by Russia-linked flows. So self-custody is not a clean escape from freezing, flagging, or geopolitical friction either.

That is why the claim matters. It forces a narrower question: which risk is the portfolio actually trying to avoid? If the fear is platform insolvency, exchange exposure is real. If the fear is user error, fraud, or irreversible transfers, self-custody is not a guaranteed improvement.

Why CZ has a case for typical users

For the average user, CZ's argument is less about elite-grade platform risk than about the most likely everyday threat. On-chain data still shows illicit volume at 1.2% of overall crypto volume last year, suggesting that sanctions screens, seizure risk, and criminal friction are not the main concern for most activity. The bigger day-to-day vulnerability remains ordinary users facing scams, wrong transfers, or compromised access, where centralized platforms can still intervene.

Exchanges can add friction where users are most exposed

The advantage is structural. Exchanges sit between the user and much of the execution. They can flag suspicious activity, slow withdrawals, and offer support channels that self-custody does not. That matters because crypto scams still exploit human judgment, and early signs suggest prevention can work. Lincoln police reported crypto cases are down almost 60% year over year, with projected losses on pace for $1.1 million this year versus $4.4 million in 2025.

That local trend is small, but it points to a broader mechanism: education and visible friction can reduce mistakes. Centralized exchanges could apply the same logic at scale through alerts, cooldowns, destination checks, and withdrawal friction. Self-custody removes that buffer. If you send cryptocurrency to the wrong person, lose the password, or get compromised, there is often no one to call.

Self-custody still matters for large or technically sophisticated holders

This is where the debate gets more honest. Large holders have still been moving funds into personal wallets, especially after market stress, and institutional money led the recent charge out of centralized exchanges. That suggests self-custody serves a real purpose for users who value direct control and are prepared to manage the operational burden.

But that does not erase the everyday math. If illicit flows remain a small share of overall crypto volume, the typical user is not primarily navigating sanctions risk. They are navigating scams, impulsive moves, and basic operational error. For that group, the exchange is not perfect, but it is often still the safer default.

Where taking CZ's claim too far becomes risky

The problem is not that CZ is entirely wrong. It is that the line can be over-applied into bad portfolio practice.

If investors treat self-custody as the universal safety answer, they are also ignoring a clear market signal. During the FTX-era rush from centralized exchanges to personal wallets, large holders led the movement of funds from centralized services to personal wallets. The evidence supports the conclusion that institutional capital put a higher premium on direct control during a period of stress.

CZ's own claim carries a leadership caveat

The weak point is counterparty, rules, and access risk. Exchanges are not self-executing vaults; they are regulated, directed, and staffed organizations. At Binance, that is no longer abstract: Changpeng Zhao stepped down from Binance's top role, and daily decisions no longer answer to him directly.

That does not mean Binance suddenly became unsafe. It means the platform's risk profile is now tied more directly to new leadership, compliance priorities, and regulator expectations than to founder instinct alone. That is the boundary condition CZ's claim tends to gloss over: exchange safety can improve, but it can also change faster than a holder expects.

A more practical split is to match the storage method to the balance purpose

Bears will say users should still trust the institution more than themselves. Fair enough. But the cost of being wrong in self-custody can be harsh: if you send cryptocurrency to the wrong person, lose the password, or get compromised, no one can step in.

A more practical approach is to match the wrapper to the balance type. Operating capital needs liquidity, interface, and fast execution, so keeping smaller working balances on exchanges still makes practical sense. Reserve capital needs to reduce third-party access risk, which is why large holders have leaned toward direct control. That split keeps the main strength of exchanges-user support and intervention-without pretending they eliminate portfolio risk.