Coldcard Exploit Drives Record Crypto Inflows to…

Why Are Users Moving Funds To Centralized Exchanges?

The Coldcard hardware-wallet exploit appears to be pushing some cryptocurrency holders away from self-custody and back toward centralized exchanges, reversing the behavior seen after the collapse of FTX. “We’re seeing record levels of inflows now to centralized exchanges post-Coldcard,” OKX Chief Compliance Officer Jonathan Brockmeier said. “It's interesting — it's sort of the flip side of FTX. FTX happens and everybody moves their money into self-custody and it's coming back now.” Galaxy Research linked the recently disclosed Coldcard vulnerability to the theft of more than 1,300 bitcoin, worth over $80 million, from thousands of addresses across several waves. The scale of the losses has renewed questions about whether individual users can safely manage private keys without institutional security support. Self-custody removes reliance on an exchange, but it also transfers responsibility for wallet setup, device security, backups and transaction verification to the holder. A compromised device, malicious firmware or social-engineering attack can leave victims with little ability to recover stolen assets. “Self-custody puts a lot on the user and asks them to be their own security engineer,” Brockmeier said. He added that centralized platforms can offer customers layered monitoring and a global security team able to review threats before funds leave an account.

How Is OKX Using AI To Stop Fraud?

OKX said it prevented $26.3 million in scam-related losses during the first half of the year by stopping suspicious transfers before they were completed. The exchange is using artificial intelligence to examine account and blockchain activity for patterns associated with fraud. These can include compromised devices, abnormal transaction behavior and social-engineering attempts designed to persuade users to send funds to criminals. The goal is to identify danger before a customer completes an irreversible blockchain transfer. Unlike bank payments, cryptocurrency transactions generally cannot be recalled once confirmed, making early detection more important than recovering funds after an attack. OKX is also allowing customers to choose stricter security settings when they believe their holdings require additional protection. “If you want to batten down the hatches and put your account on super lockdown mode, we support that,” Brockmeier said. Those controls may add more authentication requirements or review steps, increasing friction for legitimate users. Brockmeier argued that some friction is necessary because weak controls can attract higher levels of fraud. The exchange’s investigative team includes former law-enforcement officials, including former Drug Enforcement Administration personnel and an agent involved in the investigation that brought down the Silk Road marketplace.

Investor Takeaway

The Coldcard losses show that the security debate is no longer a simple choice between exchanges and self-custody. Investors must compare platform counterparty risk with the operational risk of protecting their own devices, keys and recovery phrases.

Does Centralized Custody Remove Crypto Security Risk?

Moving assets to an exchange may reduce the chance of a user losing funds through a compromised personal wallet, but it creates a different set of risks. Customers become dependent on the exchange’s custody systems, internal controls, solvency and ability to withstand a large attack. That risk remains substantial. Dubai-based exchange Bybit lost about $1.4 billion last year when attackers drained wallets linked to the platform, the largest known cryptocurrency theft. During the first half of this year, blockchain security company Blockaid said crypto projects lost more than $1 billion to hacks as the number of verified exploits reached a record. The comparison means neither custody model is automatically safe. Hardware wallets can reduce exposure to exchange failures, but only when devices and recovery procedures remain secure. Exchanges can provide transaction monitoring and fraud teams, but they also concentrate large pools of assets that attract sophisticated attackers. For customers, the decision may depend on technical experience, account size and access to security tools. Some investors may divide holdings between personal wallets and regulated custodians rather than depend entirely on one model.

Can Security Help OKX Expand In The U.S. And Europe?

OKX is using security and compliance controls as part of its effort to expand beyond its traditional base in Asia and offshore markets. In Europe, the exchange has promoted its authorization under the Markets in Crypto-Assets framework. The approval may give OKX an advantage over platforms that failed to secure a license before the regulation’s July 1 deadline, including Binance. OKX is also trying to attract institutional and retail customers in the United States after launching operations there in 2025. Earlier this year, Intercontinental Exchange, the parent company of the New York Stock Exchange, invested in OKX at a valuation of $25 billion. Security could become a commercial differentiator as exchanges compete for users concerned about both hacks and personal custody failures. The Coldcard exploit gives centralized platforms an opportunity to argue that active monitoring can protect customers from threats that hardware wallets alone cannot stop. That argument will depend on whether exchanges can prevent fraud without making accounts difficult to use. Stronger controls may reassure institutions and high-value customers, but excessive restrictions can delay withdrawals or frustrate ordinary traders. OKX’s challenge is to offer more protection while preserving the speed and accessibility users expect from a cryptocurrency platform.