Managing Counterparty & Platform Risk
Lesson by Uvin Vindula
The collapse of FTX, Celsius, Voyager, and BlockFi in 2022 taught the crypto industry a brutal lesson: not your keys, not your coins is not just a slogan — it is a survival rule. Counterparty risk — the risk that a platform you trust fails, steals, or loses your funds — has caused more real-world losses than any market crash.
Exchange Risk
When you hold crypto on an exchange, you are trusting that exchange with custody of your assets. You do not actually own the crypto — you own an IOU from the exchange. If the exchange is hacked, goes bankrupt, or turns out to be fraudulent, your assets may be gone forever.
Strategies to manage exchange risk:
- Minimize exchange balances: Only keep on exchanges what you actively need for trading. Move the rest to self-custody (hardware wallets).
- Diversify across exchanges: Do not keep all your funds on a single exchange. If one fails, you still have the rest.
- Evaluate exchanges carefully: Look for proof of reserves, regulatory compliance, track record, and transparent leadership. Avoid exchanges with anonymous founders or those operating in regulatory gray zones.
- Watch for warning signs: Withdrawal delays, unusual terms changes, sudden leadership departures, and aggressive yield offers are red flags.
DeFi Protocol Risk
Decentralized protocols remove the centralized counterparty but introduce smart contract risk. Strategies to manage DeFi risk include:
- Use battle-tested protocols: Protocols that have held billions of dollars for years without exploit (like Aave, Uniswap, Maker) are generally safer than new, unproven ones.
- Check for audits: Reputable protocols undergo multiple security audits from firms like Trail of Bits, OpenZeppelin, or Consensys Diligence. No audit guarantees safety, but un-audited protocols are significantly riskier.
- Start small: Never put a large amount into a new protocol on day one. Test with small amounts first.
- Understand what you are signing: Every transaction approval is a potential vulnerability. Revoke unnecessary approvals using tools like revoke.cash.
Stablecoin Risk
Stablecoins carry their own counterparty risks:
- USDT (Tether): The largest stablecoin, but questions about reserve transparency persist. A USDT depeg would be a systemic event for all of crypto.
- USDC (Circle): More transparent and regulated, but still relies on Circle's solvency and banking relationships. During the March 2023 Silicon Valley Bank collapse, USDC briefly depegged to $0.87.
- Algorithmic stablecoins: UST/LUNA's collapse in May 2022 destroyed $40 billion and proved that algorithmic stability is extremely fragile.
Practical Steps for Sri Lankan Investors
Sri Lankan crypto investors face additional counterparty challenges due to limited local exchange options. Key practices include:
- Use reputable international exchanges that serve Sri Lanka (like Binance or OKX), but never keep more than necessary on the exchange.
- Invest in a hardware wallet (Ledger, Trezor, or Coldcard) — the one-time cost of LKR 20,000-50,000 is trivial compared to the risk of losing your entire portfolio.
- Diversify stablecoin holdings across USDT and USDC rather than holding all in one.
- Be especially wary of platforms offering high yields — if it sounds too good to be true, it almost certainly is.
Key Takeaways
- •"Not your keys, not your coins" — minimize funds held on exchanges
- •Diversify across exchanges and move long-term holdings to hardware wallets
- •Battle-tested DeFi protocols with multiple audits are safer than new unproven ones
- •Stablecoins carry their own risks — even USDC depegged during a banking crisis
- •Platforms offering unusually high yields are major red flags
Quick Quiz
Question 1 of 3
0 correct so far
What does "not your keys, not your coins" mean?