WikiBit Exchange Exit Risk Ranking #34 — Toobit: ZachXBT Calls It “Untraceable,” User Says $5,000 in Profits Was Deducted in Full

Introduction: An Exchange with “Countless Awards” but “No One to Be Found”

Over the first 33 editions, we have investigated a series of exchanges ranging from HashKey to Pionex. For the 34th edition, we turn to one of the most heavily packaged anonymous players in the market — Toobit.

On paper, Toobit has quite an impressive résumé: “Founded in 2022,” “built by former core teams from Huobi, Bybit, and Xiaomi,” “more than 4 million users worldwide,” “ISO 27001 certified,” “Poland KNF VASP license,” “U.S. FinCEN MSB registration,” “independent Hacken PoR audit with reserves exceeding 100%,” “official regional partner of LALIGA in the Middle East and North Africa,” a “$50 million Toobit Shield Fund,” and “$100 million in PoR reserves.”

Sounds like a rising star in the industry, right？

But on the other side of the story, blockchain investigator ZachXBT publicly called out Toobit, saying that “Toobit has never publicly disclosed any details about its co-founders, legal entity, or licenses.” ZachXBT also criticized the platform for listing the known investment-fraud project BDAG.

TradersUnion gave Toobit a security score of just 5.5/10, stating that it is “not regulated by Tier-1 regulators.” CoinPaprika explicitly labels Toobit as “not MiCA compliant.” Users have complained about cases such as “$5,000 in profits being deducted in full” and “a $550 withdrawal being frozen for a week with no response.” A Chinese anti-fraud article went even further, accusing the platform of “license fraud, profit lockups, and aggressive targeting of Chinese investors through pig-butchering scams.”

So how can an exchange with a LALIGA sponsorship, ISO certification, and Hacken audit still be publicly called out by a blockchain investigator as essentially “untraceable”？

Lets take it apart layer by layer.

1. Regulatory Compliance: Plenty of “Compliance Packaging,” but a Lack of Hard Investor-Protection Licenses

The “Compliance Package” Promoted on Its Website

Toobit has invested heavily in its compliance marketing. According to its official materials and third-party information, the platform claims:

U.S. FinCEN MSB registration (Registration No. 31000267410788)

Poland KNF VASP registration

ISO/IEC 27001:2022 certification, verified by Swiss Approval

VerifyVASP membership

Integration with Bithumb through the CODE Travel Rule Alliance

Toobit's official press releases and anniversary pages have repeatedly emphasized that “compliance is a core priority.”

Toobit's operating entity is Hopeful Technology Co., Ltd., registered in the Cayman Islands, a typical offshore jurisdiction. Its dispute-resolution terms specify arbitration in Singapore, creating a relatively high barrier for ordinary users seeking legal remedies.

The platform claims U.S. FinCEN MSB registration, Australian AUSTRAC registration, and VASP registration with Poland's KNF.

Here is the key distinction: MSB registration and VASP registration are not equivalent to holding a heavily supervised financial license. Such registrations are primarily related to anti-money-laundering and regulatory registration requirements. They generally do not provide the same level of investor or customer-asset protection associated with comprehensive financial licenses, nor do they mean that a regulator will recover users' funds if a dispute or insolvency occurs.

Toobit does not hold major European financial licenses such as those issued by the FCA or CySEC, leaving its core operations largely within an offshore regulatory framework with relatively limited supervisory constraints.

TradersUnion: 5.5/10 and “Not Regulated by Tier-1 Regulators”

TradersUnion gave Toobit a security and regulatory score of only 5.5/10, explicitly noting that it is “not regulated by Tier-1 regulators,” which it says reduces the platform's overall reliability and regulatory oversight.

TradersUnion's conclusion was that Toobit is not a regulated exchange and therefore has a relatively weak overall regulatory position.

CoinPaprika: Explicitly Marked “Not MiCA Compliant”

CoinPaprika lists Toobit's regulatory status as “not MiCA compliant.”

For users evaluating access to the European market, this is an important warning sign. CoinPaprika gives Toobit a trust score of 54.36%.

Chinese Anti-Fraud Article: Accusations of “License Fraud”

In July 2026, a Chinese anti-fraud platform published an article titled Warning: The Offshore Toobit Exchange Is Full of Traps — Fake Licenses, Profit Lockups, and Aggressive Pig-Butchering Scams Targeting Chinese Investors. The article focused on several key concerns:

“Toobit's operating entity is Hopeful Technology Co., Ltd., registered in the Cayman Islands. It is a typical offshore shell company with no publicly disclosed physical office address or traceable person in charge.”

“The U.S. FinCEN MSB is only an anti-money-laundering registration, not a financial trading license... Promoters repeatedly claim that the platform holds a legitimate U.S. financial license, when in fact an MSB is merely a registration for money-transfer activities and provides no investor-fund protection.”

“The Polish VASP registration has a limited scope and does not serve users in mainland China... Soliciting customers among mainland Chinese residents in a disguised manner itself constitutes non-compliant operations.”

In plain English: Toobit's “compliance” appears to rely heavily on two pieces of regulatory packaging — the MSB registration is an AML-related registration, while the Polish VASP registration does not authorize services to users in mainland China.

Yet the platform has been accused of aggressively attracting users from mainland China. The anti-fraud article characterizes this as effectively soliciting mainland Chinese residents, which it considers non-compliant.

Risk Rating: High Risk

2. Account Security and Withdrawals: “$5,000 in Profits Was Deducted in Full”

“I Made $5,000 in Profits, and They Took It All”

A user on the Russian-language crypto forum VC.ru detailed their experience:

“I traded several altcoins ranked between the top 30 and 90 by market capitalization on Toobit. All of them were normal spot trades. I did not use any software, API, or automation tools. The platform contacted me and said they had ‘detected trading violations’ and asked me to explain my trading strategy. I provided a complete explanation — I traded manually and did not violate any rules.”

“But the platform replied: ‘Due to the violation, we had no choice but to deduct all the profits from your account.’ And it wasn't just the profits from those trades on February 26. It was all of my profits from the entire period. They even deducted the commissions I had received from referrals. I disagreed and denied all allegations of violations. But they didn't care. They also said they were considering not only confiscating my profits but withholding my principal as well.”

In other words:

Normal trading → $5,000 profit → platform alleges a violation → all profits deducted → principal potentially at risk.

From a user-risk perspective, the key issue is not merely a poor withdrawal experience, but the platform's alleged ability to unilaterally classify trading activity as a violation and then confiscate accumulated profits.

“My $550 Withdrawal Was Frozen for a Week With No Response”

One Vietnamese user complained:

“I wanted to withdraw $550, but they immediately froze my account and wouldn't let me withdraw for a week. They also didn't respond to any customer-service questions on the website or iPhone app.”

“My Account Was Blocked for No Reason, and I Never Claimed Any Bonus”

Another user on Trustpilot reported:

“I deposited my own funds into Toobit, but they blocked my account and prevented me from withdrawing for no reason. I had never even claimed any of their ‘deposit bonuses’ in order to avoid any problems.”

The user specifically said they had avoided the platform's promotional bonus programs, yet still experienced an account restriction.

Anti-Fraud Article: A Complete “Harvesting Script”

The anti-fraud article summarized what it described as Toobit's alleged user-fund extraction pattern:

“At the beginning, small deposits and small withdrawals work normally, building investor trust. Once the account generates significant profits and the investor attempts to withdraw funds, the platform immediately launches a ‘risk-control review.’ Reviews are delayed indefinitely, endless documents are requested, and accounts may even be frozen directly. Some victims are asked to pay additional deposits or risk-control release fees before they can withdraw, resulting in a second round of fraud. Customer service only provides mechanical automated responses without a clear resolution timeline, resulting in prolonged delays.”

The platform's overall user rating is reportedly only 2.7/5, with complaints concentrated around withdrawal restrictions and allegedly unjustified account closures.

The Core Pattern Reported by Users

The complaints surrounding Toobit show a recurring pattern:

Users deposit and trade normally; small withdrawals work.

The account generates significant profits.

The platform initiates a “risk-control review.”

Profits are allegedly deducted for “trading violations,” with some users claiming their principal was also threatened.

Withdrawals are frozen, while customer service allegedly becomes unresponsive or provides template responses.

Users may be asked to pay “security deposits” or “unlocking fees” before withdrawals can proceed.

This goes beyond a simple complaint about poor withdrawal service. If the reported cases are accurate, the pattern raises serious concerns about account controls, withdrawal transparency, and the platform's handling of user funds.

Risk Rating: Extremely High Risk

3. Reserve Transparency: 100%+ in Hacken Audit, Yet “Audited Reserves” Coexist with Frozen Withdrawals

Hacken Audit: Reserve Ratio Above 100%

Toobit has indeed made considerable efforts to improve reserve transparency. According to a Proof of Reserves (PoR) audit conducted by Hacken on April 20, 2026, Toobit maintained collateralization ratios above 100% across all digital assets covered by the audit, including BTC, ETH, USDT, and USDC. Hacken examined the individual balances of more than 640,000 accounts and confirmed that the assets were backed at a ratio of at least 1:1.

Toobit's PoR page shows reserve ratios of 108% for BTC, 106% for ETH, 103% for USDC, and more than 100% for USDT. Toobit has also integrated Merkle Tree technology, allowing users to verify whether their accounts were included in the audit and independently verify the results using open-source verification tools.

But where is the problem？

First, PoR is a “snapshot,” not continuous financial auditing. Hacken's audit verifies reserves at a specific point in time. It is not equivalent to continuous financial supervision. An exchange can have 108% BTC reserves at the time of the audit while subsequently freezing user withdrawals.

Second, PoR proves “asset coverage,” not “willingness or ability to process withdrawals.” The user who reportedly had $5,000 in profits deducted could also have had an account showing 108% asset coverage in the PoR report. But the platform could still choose not to allow the user to withdraw.

Third, Hacken is a “security auditing company,” not a traditional financial auditing firm. Hacken's core business focuses on blockchain security, smart-contract audits, and penetration testing. Its PoR work is more focused on technical verification than on comprehensive financial auditing. This is different in nature from the quarterly independent audits conducted by The Network Firm LLP, a professional accounting firm, for Bitvavo.

Risk Rating: Medium-High Risk

Toobit performs relatively well in the PoR category — independent Hacken verification, Merkle Tree technology, user self-verification, and 108% BTC reserves.

But good PoR does not automatically mean your money can be withdrawn. These are two different issues.

4. Asset Strength: 4 Million Users and $30 Billion in Trading Volume — But the “Former Huobi/Bybit Team” Has Little Verifiable Evidence

Impressive Numbers on Paper

Founded: October 2022

Registered users: More than 4 million

Cumulative trading volume: More than $30 billion

Peak daily trading volume: $20 billion

Trading pairs: 1,000+

CoinMarketCap ranking: Previously reached the top 5

CoinPaprika trust score: 54.36%

But the Numbers Raise Questions

First, CoinPaprika's trust score is only 54.36%. For an exchange claiming daily trading volume of $20 billion, this figure is relatively low. It suggests that, from the perspective of professional market-data platforms, there may be questions surrounding the reliability of Toobit's reported trading-volume data.

Second, “built by former core teams from Huobi, Bybit, and Xiaomi” — but who exactly are these people？

Multiple sources have described Toobit as being founded by former executives or senior personnel from Huobi, Bybit, and Xiaomi. However, there are few specific names that can be independently verified.

ZachXBT's criticism goes directly to the heart of the issue:

“Toobit has never publicly disclosed any details about its co-founders, legal entity, or licenses.”

Third, what is the source and custody arrangement for the $50 million Toobit Shield Fund and $100 million in PoR reserves？

There does not appear to be independent third-party verification publicly establishing the source, custody structure, and availability of these funds.

Risk Rating: Medium-High Risk

5. Internal Operations and Team: The CEO Is “Mr. Kwon,” the CCO Is “Oleg Polunin” — But What Are Their Full Names？

Team Information: Highly Anonymous

This is one of the most concerning aspects of Toobit.

A detailed investigation by Critics24 stated:

“Whether it is Mr. Kwon (CEO of Toobit Asia), Chento (CEO Europe), or Marc (Chief Product Officer), none has a surname, biography, or publicly available personal profile.”

In the CIS region, Toobit has been promoted by blogger Oleg Polunin, who identifies himself as “CCO Toobit.” However, Oleg Polunin's identity, professional background, and relationship with Toobit have not been independently verified.

CB Insights lists only four executives at Toobit, including a co-founder identified as “Kelly W.” Even the full name is incomplete. Prospeo identifies the co-founders as Kelly Wang and Ray Lee, but there appears to be very little publicly verifiable information about either individual within the crypto industry.

ZachXBT: Toobit Listed the Alleged Fraud Project BDAG

In May 2026, blockchain investigator ZachXBT publicly criticized Toobit for listing BDAG, which he described as a known investment-fraud project.

ZachXBT wrote in a post:

“Toobit announced the listing of BDAG — a known investment fraud project. Toobit has also never publicly disclosed any details about its co-founders, legal entity, or licenses.”

For an exchange to be publicly criticized by a well-known on-chain investigator over the listing of an alleged investment-fraud project is, at minimum, a significant due-diligence and reputational risk signal.

Registered in the Cayman Islands: Another Offshore Jurisdiction

Toobit's operating entity, Hopeful Technology Co., Ltd., is registered in the Cayman Islands. The anti-fraud article described it as:

“A typical offshore shell company with no publicly disclosed physical office address or traceable person in charge.”

So, what is the Cayman Islands？

It is one of the world's best-known offshore financial and corporate-registration jurisdictions, widely used for international corporate structures and investment vehicles.

But offshore registration should not automatically be equated with “no regulation.” The more important issue is whether the specific operating entity is subject to meaningful supervision, whether its licenses are valid for the services it provides, and whether users have practical legal remedies in the event of a dispute.

Risk Rating: Extremely High Risk

The CEO is identified only as “Mr. Kwon” without a full name; the identity and background of CCO “Oleg Polunin” have not been independently verified; and the co-founder is listed as “Kelly W.” in some databases.

For an exchange claiming more than 4 million users, the limited amount of independently verifiable information about its core management team is a significant transparency concern.

ZachXBT's criticism that Toobit has “never publicly disclosed its co-founders” is therefore particularly notable when assessing the platform's corporate transparency and accountability.

6. Product Experience and Trading Depth: Feature-Rich, Up to 200x Leverage, but Questionable Liquidity for Small-Cap Tokens

Toobit's product lineup is extensive: spot trading, perpetual contracts with leverage of up to 200x, copy trading, grid bots, staking and wealth-management products, and fiat on-ramp services through third-party channels. Its app interface is relatively beginner-friendly, and the platform has also run zero-fee spot trading campaigns to attract users.

But there are several critical concerns.

1. Up to 200x leverage on derivatives

Toobit offers leverage of up to 200x. Extremely high leverage can expose retail traders to substantial liquidation risk. The platform does not appear to provide sufficiently prominent risk-tier warnings for inexperienced users, making it easy for beginners to suffer rapid losses or liquidation.

2. Reasonable liquidity for BTC and ETH, but questionable depth for smaller tokens

Trading depth for major assets such as BTC and ETH appears relatively adequate. However, many newly listed altcoins and low-cap speculative tokens reportedly have significant slippage and thin order books, potentially making their prices more vulnerable to sharp movements and market manipulation.

3. Promotional bonuses can function as an “incentive trap”

Toobit has offered new-user bonuses and trading cashback campaigns. However, these promotions may come with stringent trading and withdrawal conditions. Critics argue that many participants may find it difficult to satisfy the requirements, turning the bonuses into incentives for continued deposits rather than genuinely accessible rewards.

Risk Rating: High Risk

7. Community Feedback: Withdrawal Risk Controls and Inefficient Customer Service Drive Negative Reviews

Community feedback is highly polarized.

Positive Feedback

Some small-scale retail traders report that registration is straightforward, small deposits and withdrawals work smoothly, the platform offers a wide range of trading tools and promotional benefits, and the app runs smoothly. For users engaging in short-term trading with relatively small amounts, these features can be attractive.

Main Areas of Negative Feedback

1. Slow customer-service response after risk controls are triggered

Users have complained that once their accounts trigger risk-control measures, customer-service responses can be slow and ticket resolution can take a long time.

2. Additional KYC requirements after significant profits

Some users report being asked to provide extensive additional KYC documentation after generating substantial profits, followed by restrictions on withdrawals.

3. Questions surrounding abnormal price movements and liquidations

After being liquidated while using highly leveraged derivatives, some users have questioned whether the platform experienced unusual price movements or so-called “wicks.”

4. Low overall Trustpilot rating

Toobit's overall Trustpilot rating is reportedly only 2.7/5, with negative reviews largely concentrated around withdrawal-related risk controls and inefficient customer service.

A large number of negative reviews does not by itself prove that an exchange is preparing to exit the market or abscond with user funds. However, it does indicate that the platform's risk-control and withdrawal mechanisms are subject to significant user complaints, meaning users should exercise particular caution when holding large amounts of capital on the platform.

Risk Rating: Extremely High Risk

8. Comprehensive Exit-Risk Assessment

Overall Rating: Extremely High Exit Risk

Toobit now joins Azbit, FameEX, CoinUp, BiFinance, OrangeX, Hibt, BVOX, MGBX, Zoomex, Hotcoin, Biconomy, KCEX, Deepcoin, CoinW, and Ourbit among the highest-risk exchanges covered in this series.

Its risk profile can be described as a particularly striking combination of contradictions:

1. An “Untraceable” Team

The CEO is identified only as “Mr. Kwon,” the CCO as “Oleg Polunin,” and one co-founder as “Kelly W.” There is limited publicly verifiable information providing full identities and professional backgrounds.

ZachXBT's criticism that Toobit has “never publicly disclosed any details about its co-founders, legal entity, or licenses” is particularly significant when assessing corporate transparency.

2. Regulatory “Stickers” Are Not Enough

The reported MSB status is described as “expired”; TradersUnion gives Toobit 5.5/10 and says it is “not regulated by Tier-1 regulators”; CoinPaprika labels it “not MiCA compliant”; and a Chinese anti-fraud article has accused the platform of “license fraud.”

The Polish VASP registration is one of the more substantive registrations associated with Toobit, but the article cited above claims it does not cover users in mainland China, while also alleging that Toobit has actively attracted users from that market.

3. A Withdrawal “Pig-Butchering” Pattern Alleged by Critics

Reports include:

“$5,000 in profits deducted in full”

“$550 withdrawal frozen for a week”

“Account blocked without explanation”

These reports have led critics to compare the alleged pattern with common characteristics associated with investment scams and so-called pig-butchering schemes.

4. Alleged Links Between Anti-Fraud Concerns and Toobit Channels

The anti-fraud article cited earlier alleges that “pig-butchering teams have worked closely with Toobit channels,” and claims that users' losses could generate commissions for the people promoting the platform.

These are allegations made by the source and should not be treated as independently established facts without further evidence.

The central issue is therefore not simply whether Toobit has a “high exit risk.” The broader concern is whether an exchange with limited corporate transparency, significant withdrawal-related complaints, and criticism from blockchain investigators provides sufficient transparency and user protection for customers holding substantial funds.

9. Recommendations for New and Existing Users

For New Users

1. Consider the transparency and withdrawal risks before depositing funds.

The combination of limited publicly verifiable team information, criticism from ZachXBT, reported cases involving profit deductions, and allegations made in anti-fraud publications warrants careful due diligence before making any deposit.

2. If you have already registered but have not deposited funds, avoid rushing into a deposit.

Verify the platform's current regulatory status, legal entity, withdrawal terms, and the identity of its operators before committing capital.

3. Be especially cautious with 200x leverage and copy trading.

High leverage can magnify both gains and losses. Users should also independently verify the identity, track record, and incentives of anyone they choose to copy.

The anti-fraud article cited above alleges that certain promotional channels may be connected with scam operations. This allegation should be independently verified before being treated as established fact.

4. Do not confuse LALIGA sponsorships or ISO certification with financial regulation.

Sports sponsorships and ISO certifications may demonstrate marketing activity or the adoption of certain management and security standards. They do not, by themselves, establish that an exchange is comprehensively regulated or that user funds are protected.

For Existing Users

1. Review your exposure.

If a substantial portion of your total assets is held on Toobit, consider whether that level of concentration is consistent with your own risk tolerance and liquidity needs.

2. Test the withdrawal process with a small amount.

A successful withdrawal demonstrates that the process is functioning at that particular moment, but it does not guarantee future access to funds.

3. If withdrawals are restricted, be cautious about paying “unlocking fees.”

If someone asks you to pay additional “risk-control fees,” “verification fees,” or “security deposits” before releasing your funds, carefully verify the request through official channels before sending additional money.

4. Preserve all evidence.

Keep screenshots, transaction records, customer-service conversations, KYC requests, account notices, and blockchain transaction hashes. Documentation can be important if a dispute arises.

5. Avoid depositing additional funds simply to resolve a withdrawal problem.

If an account is already subject to a withdrawal restriction, adding more money can increase your exposure without necessarily resolving the underlying issue.

Final Takeaway

Who might find Toobit attractive？ Users looking for high-leverage derivatives, copy trading, and a broad range of trading products may find its feature set appealing.

Who should exercise particular caution？ Users who place a high priority on transparent corporate ownership, strong regulatory supervision, and predictable access to their funds should carefully examine Toobit's current legal entity, regulatory status, withdrawal policies, and independent verification before using the platform.

Toobit's position is complicated.

Compared with smaller offshore platforms, Toobit has more visible infrastructure: Hacken PoR verification, ISO certification, and a LALIGA sponsorship. At the same time, questions remain regarding the identities of its leadership, the scope of its regulatory registrations, withdrawal-related complaints, and criticism from blockchain investigator ZachXBT.

It is therefore important not to judge the platform solely by its marketing credentials.

The core question for users is much simpler:

Can you independently verify who operates the exchange, what regulatory protections actually apply to you, and whether you can reliably withdraw your funds when you need them？

Those are the questions that matter most when evaluating counterparty risk.

Next Episode Preview

WikiBit Exchange Exit Risk Ranking #35 — Gemini

Stay tuned.

Risk Disclaimer

This article represents an individual analytical perspective and does not constitute investment advice. Cryptocurrency investments involve substantial risk. Please conduct your own due diligence and invest cautiously.

The information in this article was updated on September 24, 2026. For the latest information, readers should cross-check relevant details through multiple authoritative sources.