Why Wall Street Remains Skeptical of Cryptocurrency Exchange Security Claims

The cryptocurrency market has experienced significant growth, with trading volumes reaching approximately $190-$192 billion in 24 hours. Despite this growth, crypto exchanges are still struggling to provide robust security, with over $3 billion in assets stolen in 2025. Major exchanges have been hacked, resulting in losses of over $1 billion, highlighting that a lack of resources is not the primary issue, but rather the treatment of security as a marketing tool. The industry's focus on 'security theater' – where exchanges prioritize appearances over actual security – is a significant concern. This approach involves investing in dashboards, reserve snapshots, and public statements, rather than implementing genuine security measures. As a result, even the largest platforms remain vulnerable to stress and potential hacks. The concept of 'performative security' is particularly problematic, as it prioritizes optics over substance. When a business is growing rapidly, security controls can be seen as a hindrance, slowing down decision-making and triggering uncomfortable questions. However, this mindset is short-sighted, as it can lead to catastrophic consequences when stress hits. The WazirX breach in 2024, which resulted in a $235 million loss, is a prime example of how quickly a seemingly secure system can fail. Genuine exchange security requires a system that can withstand stress, with three core traits: proof-of-reserves, strict internal rules, and quick incident response. Proof-of-reserves provides evidence of asset existence, but it is essential to have transparency, with independent checks and verifiable 'proof' through cryptographic methods. Internal rules should include no single person having control over customer funds, unusual activity triggering reviews, and large transfers requiring approval from at least two people. Quick incident response is also crucial, with a serious exchange knowing exactly what to do in the first hour of a breach, isolating the issue, and communicating clearly. While these measures do not cover every possible risk, they form the backbone of true exchange durability. By 2026, a simple 'trust us' statement will no longer be sufficient. Exchanges must provide evidence of controls, separation of duties, independent assurance, and a response plan that works under pressure to attract serious investors and retain customers. Ultimately, security is about building systems that mitigate damage, slow down bad decisions, and hold up under stress. Exchanges that prioritize genuine security measures will be the ones to maintain trust and thrive in the long run.