Two different designs
Crypto trading venues fall broadly into two groups. A centralized exchange is run by a company that takes deposits, keeps the records of who owns what, and matches orders on its own systems. A decentralized exchange runs as software on a blockchain: traders connect their own wallets and swap assets through smart contracts, without handing coins to a company first.
Both let you trade one asset for another. They differ in three main ways: who has custody of your funds, how orders are matched, and what can go wrong.
Custody
On a centralized exchange, you usually deposit coins to an address the platform controls. Your balance is then an entry in the company’s database. You can trade quickly because nothing moves on the blockchain until you withdraw, but you are relying on the company to hold the assets and honour withdrawals. If the platform is hacked, mismanaged, frozen or insolvent, access to your funds can be affected. The article on counterparty risk looks at past failures and what they show, and proof of reserves covers how some platforms try to demonstrate that they hold what customers are owed.
On a decentralized exchange, your coins stay in a wallet you control until the moment a swap executes. This is often described as self-custody. The trade-off is responsibility: you hold your own keys, and if you lose your seed phrase, or approve a malicious request, nobody can reverse it. Different wallet types give different levels of protection.
How trades are matched
Centralized exchanges generally run a matching engine with an order book. Buy and sell orders rest in a list, and the engine pairs them in order of price and time. This supports order types such as limit orders and stop orders and can handle very high volumes of orders quickly.
Decentralized exchanges take several forms. Many use pools, where a formula sets the price, as in automated market makers. Others run on-chain or hybrid order books, where orders are posted and matched with parts of the process handled off-chain. The details vary by platform, so it is worth checking how a particular one works rather than assuming.
Because each trade on a blockchain must be confirmed, decentralized trading is bounded by network speed and cost. Gas fees depend on how busy the network is, and some platforms operate on layer two networks to reduce those costs. Centralized exchanges typically charge a trading fee instead, with no blockchain fee until you withdraw.
Access and identity
Centralized exchanges often require identity verification before you can trade or withdraw in local currency, because they are usually subject to financial regulations in the places where they operate. They commonly offer bank deposits and card purchases, which makes them a common entry point for newcomers. Fiat on-ramps are a large part of why they remain popular.
Decentralized exchanges generally do not ask you to open an account; a compatible wallet is enough. That openness can mean access to many more tokens, including very new ones, but it also means fewer checks on what is being listed. Rules differ across countries and are changing, so what is permitted for you depends on where you live.
Comparing risks
| Aspect | Centralized exchange | Decentralized exchange |
|---|---|---|
| Who holds the coins | The company, while deposited | You, until the swap |
| Matching | Company’s order book engine | Pools, on-chain books or hybrids |
| Main failure points | Insolvency, hacks, frozen withdrawals, outages | Smart contract bugs, malicious tokens, user error |
| Account recovery | Often possible via support | Usually not possible |
| Typical costs | Trading fees, withdrawal fees | Network fees plus pool or protocol fees |
| Identity checks | Common | Often none at the platform level |
None of these points makes one design strictly safer. They move the risk to different places.
Risks specific to decentralized trading
- Smart contract flaws. A bug in a contract can be exploited, and funds in it can be lost.
- Fake or malicious tokens. Anyone can create a token with a familiar name. Checking that you are trading the genuine asset is your job.
- Approvals. Many apps ask you to approve access to a token in your wallet. Granting broad approvals to untrustworthy sites is a common way people lose funds. Phishing and scam attempts frequently target this step; see the article on wallet phishing for warning signs.
- Price impact. In shallow pools, a trade can move the price a lot, which is the same effect that slippage describes.
- Transaction ordering. Because pending transactions can be observed, other participants may place trades around yours, worsening your price. Setting a tolerance for price movement helps limit this, though it cannot remove it.
Risks specific to centralized trading
- Company failure or misconduct. Customer assets can be mixed with the company’s own, or lent out, without customers knowing in detail.
- Withdrawal limits and freezes. Platforms can pause withdrawals during stress, for compliance reasons or after an incident.
- Account security. Compromised passwords or weak two-factor setups can lead to stolen balances.
- Regulatory action. A platform can lose the ability to serve certain regions.
Which is “better”?
There is no universal answer. People weigh convenience, access to particular assets, comfort with managing keys, fees, and trust in a company against trust in code. Many people use both for different purposes. Whichever you choose, keeping only what you need on any platform and understanding what you are signing are common, sensible habits.
Cryptocurrency prices are volatile and you can lose some or all of your money on either type of venue. This article is general education and not financial, tax or legal advice.