CEX vs DEX: What FTX Reveals About Custody Risk
For a long time, choosing between a centralized exchange (CEX) and a decentralized exchange (DEX) was largely a matter of perception. You trusted a platform because it was well-known, because others used it, because it seemed legitimate. The collapse of FTX, announced on November 11, 2022, changed all that: it left behind measurable capital flows and price movements that researchers could analyze statistically. Trust became an observable variable rather than a feeling. But what these data show is not that one architecture is safer than the other. Rather, they reveal that private investors never escape risk entirely—they only choose what kind of risk to take.
Key Takeaways
- A CEX requires entrusting your assets to the exchange, held in shared wallets: this is institutional counterparty risk.
- A DEX relies on smart contracts or peer-to-peer networks, without custodial intermediaries, but does not eliminate risk altogether.
- DEXs reduce reliance on a central custodial entity, but shift that risk toward code, developers, and infrastructure (admin keys, interfaces, oracles, governance)—at the cost of higher technical complexity and distinct vulnerabilities (contract bugs, lack of recourse, market manipulation).
- Historical volatility of crypto-assets far exceeds that of diversified European equity and bond markets, regardless of platform used, according to the European Central Bank (May 2022).
What Really Distinguishes a CEX from a DEX?
On a centralized exchange, transactions do not occur on the blockchain in real time: they are recorded and executed by the exchange itself, on behalf of the client, according to an econometric study on trust migration between CEX and DEX published on arXiv in 2024 (arXiv:2404.17227v3). The user does not directly hold private keys; assets rest in shared wallets managed by the platform. This architecture relies on an intangible ingredient: trust in the exchange's reputation, its user base, or public recommendations, notes the same study.
A DEX operates differently. It relies on smart contracts or peer-to-peer networks to enable non-custodial trading, where the user retains control of private keys at every step. Two major implementation families coexist, according to the same research: order books, like EtherDelta, and automated market makers (AMMs), such as PancakeSwap. This distinction matters because it shows a DEX is not monolithic: execution mechanics vary from one platform to another, even if the custody principle remains constant.
FTX: The Natural Laboratory That Made It Possible to Quantify Trust
The collapse of FTX, voluntarily declared on November 11, 2022, did more than cause financial losses. It revealed misappropriation of client assets and internal governance failures, eroding confidence in centralized sector institutions, according to the 2024 arXiv study cited above. For researchers, this episode represents a rare case study: a sufficiently sudden and dated confidence shock to be isolated statistically.
Their method relies on an indicator called NetFlow, which measures the difference between capital inflows to CEXs and DEXs. A negative value signals net migration toward decentralized platforms. At the moment of FTX's collapse, the study observes a NetFlow discontinuity of -291,928.65 at the analyzed threshold, statistically significant: capital clearly reoriented toward DEXs, and in a substantial way.
The same work documents an effect on prices. A negative discontinuity of -223.82 appears in WETH price at the time of the shock, via regression discontinuity methodology. To verify this effect exceeds general market trends, the researchers compare WETH to gold in a differences-in-differences analysis: the measured treatment effect reaches -950.03, with a 95% confidence interval between -950.13 and -949.93. These figures date from the FTX episode of late 2022.
Does a DEX Really Eliminate Risk, or Just Displace It?
The temptation is to read these data as validation of DEXs. That would be jumping to conclusions. The arXiv study itself emphasizes that elimination of central counterparty risk does not make risk disappear altogether: it shifts it to other failure points.
Concretely, a DEX eliminates the need to trust a company and its management. But it demands in return a higher level of technical understanding: autonomous management of private keys, direct interaction with smart contracts, no contact person if you make an error or encounter a failing contract. Institutional counterparty risk gives way to complexity and execution risk, borne entirely by the user.
Market Risk Does Not Disappear With Your Choice of Architecture
The migration observed after FTX answers one specific question: where to place custodial trust. It settles no other questions. The European Central Bank (ECB), in its Financial Stability Review of May 2022, recalls that crypto-assets have no intrinsic economic value, that they are highly speculative and volatile, and that they raise issues of investor protection and market integrity independent of the platform through which they pass.
The ECB notes that historical volatility of crypto-assets far exceeds that of diversified European equity and bond markets. And most importantly, it documents a point that CEX or DEX choice cannot correct: the correlation between crypto-assets and equity markets increased during stress episodes in March 2020, December 2021, and May 2022—which raises questions about their value as a diversification tool precisely when you need it most. Conversely, the correlation between crypto-assets and gold turned negative during a period of rising inflation expectations and geopolitical tensions, a behavior that further complicates risk assessment.
In other words, fleeing a CEX to a DEX after an institutional confidence shock protects against one specific type of failure—counterparty risk—but leaves underlying market risk intact. Even assets perceived as safe havens within the crypto ecosystem do not escape it: the ECB notes that stablecoins are not as stable as their name suggests, citing the collapse of TerraUSD and the de-pegging observed with Tether.
Decision Framework: What Kind of Risk Are You Prepared to Bear?
Rather than pitting CEXs against DEXs as opposing camps, it is more useful to ask yourself four concrete questions to assess your risk tolerance.
- Who should control the private key? On a CEX, the exchange holds keys in shared wallets; on a DEX, the user keeps them, with full responsibility in case of loss or error.
- What level of technical complexity are you willing to manage? Interacting directly with smart contracts, verifying an address before a transaction, understanding how an AMM works—these are not trivial steps for a casual user.
- Do you need a contact person if something fails? A CEX offers a human point of contact, however imperfect. A DEX offers none: a manipulation error or poorly audited contract cannot be resolved with a call to customer service.
- What is your investment horizon? The longer the horizon, the more a CEX's point-in-time counterparty risk compounds over time; the more frequent your trades, the more a DEX's operational complexity becomes burdensome day-to-day.
None of these answers eliminates risk: they only allow you to choose which kind you are best equipped to bear, and a split between both architectures remains as legitimate an option as an exclusive choice.
Frequently Asked Questions
Is a DEX safer than a CEX? Neither safer nor more dangerous: risk changes in nature rather than degree. On a CEX, the platform bears custody responsibility; on a DEX, that responsibility falls entirely on the user, including verifying an address or assessing a contract's reliability before interacting with it.
Should you choose one architecture exclusively, CEX or DEX? No: a split between both remains as legitimate an option as an exclusive choice. It limits exposure to a single type of failure, institutional on one side, technical on the other, without eliminating the market risk common to both architectures.
Does the ECB consider crypto-assets a systemic risk today? In its May 2022 report, the ECB estimates that if the crypto ecosystem's trajectory of growth in size and complexity continues, with increasing involvement by financial institutions, crypto-assets will represent a risk to financial stability.
Conclusion
Post-FTX data illustrate a notable shift: they make it possible to transform a feeling of trust into an observable statistical series. The next evolution likely will not come from another swing toward one or the other architecture, but from both CEXs and DEXs making their own internal mechanics verifiable by those who deposit assets with them. In the meantime, market risk continues to traverse both worlds without distinction.
--- This article is published for informational purposes only and does not constitute investment advice. Consult a licensed financial advisor before making any investment decision.
