WikiBit Exchange Exit Risk Ranking · Summary of Episodes 1-10: 10 Exchanges, 8 With Serious Issues — This “Crypto Risk Avoidance Guide” Is Worth Saving

Introduction: Why Do We Need This Summary？

Over the past two weeks, we have systematically investigated 10 cryptocurrency exchanges — from the fully licensed and compliant HashKey, to HTX, which has faced sanctions from the UK, to UZX with its DAO disguise, and Azbit and FameEX, which were publicly challenged by Seychelles regulators.

10 episodes, 10 exchanges, covering almost every possible “exit scam pattern” in the crypto industry.

Some people may ask: After investigating so many exchanges, are there any common patterns？ Which ones are genuine risks, and which ones are merely poor user experiences？ How can ordinary users identify the difference？

In this stage summary, instead of analyzing individual exchanges, we will connect the findings from Episodes 1-10 and extract the core principles and evaluation framework.

After reading this article, you will be able to conduct a basic “health check” on almost any crypto exchange yourself.

I. Overview of the 10 Exchanges: One Table to Understand the Full Picture

II. Five Core Patterns: The “Reality Check” for Crypto Exchanges

Pattern 1: The “License Sticker” Phenomenon — The Marketing Sounds Better Than Reality

After 10 episodes, we discovered a shocking pattern:

Almost all high-risk exchanges use the same marketing strategy:

“We hold a license from XX country.”

But when investigated further, more than 80% of these so-called “licenses” are actually MSB registrations or offshore registrations:

U.S. MSB:

• Registered with FinCEN
• Very low entry threshold
• Does not require review of business models
• Does not verify solvency

Canada MSB:

• Similar nature
• Far from being equivalent to real financial supervision

SVG FSA (Saint Vincent and the Grenadines):

• Offshore island jurisdiction
• Extremely limited regulatory oversight

Lithuania VASP:

• Small-country registration
• Regulatory strength far below Hong Kong SFC or Singapore MAS

So what does a truly “hard-core license” look like？

Look at HashKey‘s Hong Kong SFC license and Coincheck’s Japan FSA license.

These require:

• Continuous compliance investment
• On-site regulatory inspections
• Asset segregation requirements
• Criminal penalties for serious violations

One sentence summary:

MSB is registration, not regulation. Offshore licenses are stickers, not insurance policies.

Pattern 2: Withdrawal Problems — The Most Direct “Reality Detector”

Across all 10 investigations, we found a large number of user complaints regarding withdrawals.

However, withdrawal issues fall into three categories:

Category One: Poor Experience (Still Acceptable)

HashKey: Whitelist verification + private key signatures + cold wallet delays

Coincheck: Users were deceived by phishing websites impersonating the platform

Upbit: Extremely strict KYC requirements, including bankbooks and paper statements

Category Two: Serious Problems (Leave Quickly)

HTX: Withdrawals reportedly delayed until 2027; accounts frozen after receiving only 7.5 USDT

Phemex: “Withdrawal leads to account suspension”; 60% of reviews gave 1 star

Deepcoin: Users required to pay a 10% “service fee” + “blockchain tax” before withdrawal

Category Three: Pure Scam Behavior (Report Immediately)

UZX: Balance exists but cannot be withdrawn; continues operating under rebranded names

Tapbit: User reportedly asked to pay 13,000 USDT in “advance fees” to withdraw 30,000 USDT

Azbit: Users claimed “never, ever, ever expect to withdraw a single cent”

FameEX: The higher the balance, the harder withdrawal becomes; users allegedly required to pay a 30% penalty

Evaluation rule:

If even a small withdrawal requires endless excuses and obstacles — do not hesitate. Leave immediately.

Pattern 3: Regulatory Blacklisting Is a Fatal Warning, Not a Minor Issue

Some exchange problems are not simply “bad user experience.”

They have already been officially identified by regulators:

• HTX: Sanctioned by the UK (the first sanctions targeting a crypto exchange) and also sanctioned by the EU
• Phemex: Permanently banned in Canada; warned by the UK FCA and Austrias FMA; removed from South Korea
• Tapbit: Listed on Frances AMF blacklist
• UZX: Listed on Canadas BCSC warning list
• Azbit: Seychelles FSA publicly stated it was “never authorized and in bad standing”
• Deepcoin: Seychelles FSA stated it “never received a license application”
• FameEX: Restricted by Canadas AMF

These are official regulatory records — not merely user complaints.

An exchange blacklisted by regulators from G7 countries means:

No matter how large its trading volume is or how many users it claims to have, the regulated financial world is gradually closing its doors to it.

If your money is inside, withdrawing it may become increasingly difficult.

Pattern 4: Hacker Attacks — Not Just “Accidents,” But Warning Signals

Among the 10 exchanges, three suffered major hacking incidents:

• Coincheck (2018): $530 million worth of NEM tokens stolen
• Phemex (January 2025): $69 million stolen across multiple chains, including ETH, Solana, and XRP
• Upbit (2019 + 2025): Attacked twice by North Korea-linked Lazarus Group; second attack involved $36 million

Interestingly:

None of these three exchanges collapsed.

• Coincheck survived after being acquired by Monex Group
• Phemex compensated users using its own funds
• Upbit fully reimbursed affected users

However, the key issue remains:

Being hacked once means it can happen again.

Especially in Upbits case — being successfully attacked twice by the same hacking group within six years suggests potential structural weaknesses in its security system.

Evaluation rule:

Compensation after a hack does not mean the platform is secure.

The hack itself proves that the security system had vulnerabilities.

Pattern 5: Anonymous Teams — The Biggest Red Flag

Almost all high-risk exchanges share one common characteristic:

You cannot find the founders.

Examples:

• UZX: Who founded it？ Unknown.
• Tapbit: CEO recently changed; core team information unavailable.
• Azbit: Four founders, but almost invisible in public records.
• Deepcoin: No verifiable evidence supporting Ego Huangs claim of managing $7 billion.
• FameEX: Lee BoonGin is almost impossible to verify within the crypto industry.

Now compare them with lower-risk exchanges:

• HashKey: Xiao Feng (founder of Bosera Asset Management) + Lu Weiding (Wanxiang Group)
• Coincheck: Four publicly known founders; one later created Palworld
• Upbit: Song Chi-hyung and Kim Hyung-nyeon, with reported fortunes of $2.7 billion and $1.4 billion

An exchange whose founders refuse to show their faces:

Would you really trust it with your assets？

III. The Logic Behind the Risk Ratings: Why Are Some Exchanges Considered “Low Risk”？

We divided the 10 exchanges into four risk categories. The logic behind the classification is actually very clear:

Low Risk (3 Exchanges): HashKey, Coincheck, Upbit

Common characteristics:

• They have genuine and meaningful regulatory oversight (Hong Kong SFC / Japan FSA / South Korea VASP)
• Their parent companies are publicly listed or backed by listed companies
• Their founding teams have publicly identifiable names and verifiable backgrounds
• Although they also receive user complaints, the problems are mainly related to “poor user experience” rather than “fraud”

Core logic:

The cost of an exit scam would be extremely high for these exchanges.

The founders careers, listed company reputation, and regulatory accountability are all at stake.

For them, the cost of running away is far greater than the potential benefits.

Medium-High Risk (1 Exchange): Phemex

Characteristics:

• Strong team background (former Morgan Stanley executives)
• However, serious regulatory issues exist (permanent ban in Canada)
• A major security incident occurred ($69 million stolen)

Core logic:

The foundation is strong, but there are too many problems.

It may survive, but every step is being taken on the edge of a knife.

High Risk (4 Exchanges): UZX, Tapbit, Deepcoin, HTX

Characteristics:

• Regulatory “stickers” or operating with limited regulatory oversight
• Serious withdrawal issues (not just “slow,” but users being unable to withdraw)
• Unclear team backgrounds or unverifiable identities
• Named or warned by at least one national regulatory authority

Core logic:

These exchanges could encounter serious problems at any time.

The question is not “whether they will collapse,” but rather:

“When will they collapse？”

Extremely High Risk (2 Exchanges): Azbit, FameEX

Characteristics:

• Publicly criticized by regulators (Seychelles FSA warnings)
• Withdrawals are reportedly almost impossible
• Trading volume appears heavily inflated (CoinPaprika estimated actual trading volume at zero)
• The team is almost completely unverifiable

Core logic:

At this point, it is difficult to even call them “exchanges.”

They are more like scams wearing the outer shell of a cryptocurrency exchange.

IV. User Risk Avoidance Guide: Three Things to Check, Three Things Not to Ask

Three Things to Check

1. Check the Regulator — Not Whether There Is a License, But Who Issued It

Hong Kong SFC, Japan FSA, Singapore MAS = genuine regulatory oversight

U.S. MSB, Canada MSB, Lithuania VASP, Saint Vincent registrations = mostly registration “stickers”

Any exchange blacklisted by G7 regulators = leave immediately

2. Check Withdrawals — Not Whether You Can Withdraw, But How Smoothly You Can Withdraw

First deposit a small amount and complete the full process:

Deposit → Trade → Withdraw

If withdrawals are blocked with endless excuses — leave immediately

If customer service ignores withdrawal issues — leave immediately

3. Check the Team — Not How Powerful the Marketing Sounds, But Whether Real People Can Be Found

• Search the founders names — cannot find them？ Red flag
• Search the team background — only claims like “former executive at XX major company” without specific names？ Red flag
• Company registration locations constantly change (Singapore today, Seychelles tomorrow)？ Red flag

Three Things You Should NOT Ask

1. Do Not Ask: “How Large Is the Trading Volume？”

Trading volume can be manipulated.

Some exchanges with “estimated actual trading volume of zero” on CoinPaprika still report daily trading volumes in the tens of billions of dollars.

2. Do Not Ask: “Does a Celebrity Endorse It？”

Azbit was promoted by Roger Ver, yet it was still publicly challenged by Seychelles FSA.

Endorsement ≠ credibility.

Celebrity involvement ≠ safety.

3. Do Not Ask: “Are Other People Making Money？”

The most dangerous mindset in crypto is:

“Everyone else is fine, so I will definitely be fine too.”

Many users who later posted “SCAM” complaints on Trustpilot once thought exactly the same way.

V. Final Conclusion: There Is No “Absolute Safety” in Crypto, But There Is “Relative Safety”

After completing the first 10 episodes of the Exchange Exit Risk Ranking, the biggest conclusion can be summarized in one sentence:

There is no absolutely safe cryptocurrency exchange, but there are clear standards for relatively safer exchanges — strong regulation + reputable teams + smooth withdrawals.

• HashKey, Coincheck, and Upbit belong to the “relatively safer” category. They all have their own problems, but the probability of an exit scam is extremely low.
• HTX and Phemex belong to the “troubled but not necessarily doomed” category. They may not collapse, but risks continue accumulating.
• UZX, Tapbit, Deepcoin, Azbit, and FameEX belong to the “high-risk” category. Users are advised to withdraw assets as early as possible.

Finally, one sentence for all crypto users:

In the crypto industry, when judging whether an exchange deserves your trust, do not look at what it advertises — look at whether it can withstand investigation.

The value of WikiBit is to uncover and display the information that cannot survive scrutiny.

Risk Disclaimer:This article represents personal analytical opinions only and does not constitute investment advice. Cryptocurrency investments involve significant risks. Please conduct your own research and invest cautiously.