On the safety checks an exchange can prove publicly, MEXC holds up: Hacken audits its reserves every month, with BTC covered at 297% in September 2026, most user assets sit in cold storage, and noOn the safety checks an exchange can prove publicly, MEXC holds up: Hacken audits its reserves every month, with BTC covered at 297% in September 2026, most user assets sit in cold storage, and no

Learn/Market Insights/Others/Is MEXC Safe? Fully Understand the Platform's Asset Protection and Security Measures

Is MEXC Safe? Fully Understand the Platform's Asset Protection and Security Measures

Author: MEXC

Oct 9, 2026MEXC

17 min

MEXC does not serve users in the United States, is not authorized in the United Kingdom or under the EU's MiCA rules, and several regulators have published notices about it, so where you live matters as much as the security record.

Key Takeaways

MEXC publishes a proof of reserves every month, audited by Hacken, and its September 2026 report showed user holdings covered at 297% for BTC, 119% for USDT and 111% for both USDC and ETH.
Any user can confirm their own balance sits inside that audited total through My Proof of Reserves, using Merkle verification code that MEXC has made open source.
The Guardian Fund holds 100 million USDT and 2,000 BTC in public wallets for breaches of MEXC's own systems, and MEXC plans to grow it to $500 million.
No breach of MEXC's exchange wallets has been publicly reported since 2018, and in its two best-known account cases MEXC released a $3.1 million freeze with a public apology in 2025 and fully compensated a $340,000 account-takeover loss in 2026.
MEXC does not serve the US and is not authorized in the UK or under the EU's MiCA rules, and regulators including the UK FCA, the Dutch AFM and Dubai's VARA have published notices about it.
Switch on 2FA, an anti-phishing code and a withdrawal whitelist before you deposit, because your own account settings are the first line of defence and MEXC's funds are built for platform-side failures.

When an exchange fails, the question that matters is whether it still holds your coins, and most users find out only after withdrawals stop. Mt. Gox in 2014 and FTX in 2022 showed how fast that can happen at a centralized exchange, and the November 2025 Balancer exploit showed the same risk inside DeFi code. So the useful version of "Is MEXC safe?" is not whether MEXC says so, but which of its claims you can check for yourself.

MEXC, which has operated since 2018, publishes several of those checks: a monthly proof of reserves audited by Hacken, public wallet addresses for its Guardian Fund and the balance of its futures insurance fund. This page sets out each protection, how to verify it, what it does not cover and where MEXC is not authorized, so you can decide on the evidence.

Is MEXC Safe? Six Checks at a Glance

Six checks show whether the MEXC exchange is safe enough to hold your funds, and the table below sets out, as of October 8, 2026, what MEXC publishes for each one, how you can verify it yourself and the limit you should know about.

Check	What MEXC publishes	How to verify it	Limit to know
Reserves	Monthly proof of reserves audited by Hacken; September 2026: BTC 297%, ETH 111%, USDT 119%, USDC 111%	My Proof of Reserves in your account, plus open-source Merkle code	Covers four assets at one snapshot and is not a full financial audit
Custody	Majority of user assets in cold storage, with hot wallets for withdrawals	MEXC's own disclosure	The cold and hot wallet split is not separately audited
Guardian Fund	100 million USDT and 2,000 BTC for breaches of MEXC's systems, with a target of $500 million	Public wallets on Etherscan and mempool.space	A corporate commitment, not a statutory compensation scheme
Futures insurance fund	About 798 million USDT in mid-September 2026	The futures insurance fund page on MEXC	Covers liquidation shortfalls, not traders' own losses
Account controls	2FA, anti-phishing code, withdrawal whitelist and a 24-hour withdrawal hold after key security changes	Your account security settings	Protect you only once you switch them on
Track record and licensing	No publicly reported breach of exchange wallets since 2018; does not serve the US and is not authorized in the UK or EU	The incident record and regulator notices below	No local regulator or compensation scheme where MEXC is not authorized

Data verified as of October 8, 2026 against MEXC's proof of reserves reports, MEXC announcements, the MEXC Help Center and public blockchain explorers.

Where Crypto Losses Come From: Exchange Failures and DeFi Exploits

The largest crypto losses come from two sources: centralized exchanges that lose or misuse customer funds, and DeFi protocols whose code gets exploited.

Decentralized Finance (DeFi) is an innovation in the cryptocurrency field that allows users to manage assets, borrow, and trade without relying on traditional financial institutions. However, the security issues of decentralized platforms have been repeatedly exposed.

A widely reported example came on November 3, 2025, when an exploit of Balancer V2 drained roughly $128 million across Balancer and protocols built on its code, and Berachain halted its network to contain the damage.

Balancer's investigation traced the attack to a rounding error in how its Stable Pools calculated certain swaps, which the attacker exploited repeatedly through batched transactions.

Earlier incidents hit centralized exchanges and DeFi protocols alike:

Mt. Gox (2014, centralized exchange): about 850,000 BTC went missing, roughly 200,000 were later found, and repayments to creditors in crypto began only in July 2024.
FTX (2022, centralized exchange): customer deposits were diverted to an affiliated trading firm, and US prosecutors said customers lost over $8 billion.
Coincheck (2018, centralized exchange): about 523 million NEM tokens, worth roughly $530 million, were stolen from a hot wallet, and the exchange repaid customers from its own funds.
The DAO (2016, DeFi): a smart-contract bug let an attacker drain about 3.6 million ETH, and Ethereum hard-forked to return the funds.
Poly Network (2021, DeFi): about $611 million was taken from the cross-chain protocol, and the attacker later returned nearly all of it.

The exchange failures started with custody: hot wallets that were drained, or customer money moved where it should not have been.

The DeFi losses started with code flaws, a different risk from the one you take when you deposit on an exchange.

MEXC is a centralized exchange, so the questions that apply to it are custody questions: where user assets are held, whether reserves cover them and who pays if something breaks. The sections below answer each of those, including MEXC's own incident record and the regulators that have issued notices about it.

How Safe Is MEXC? The Five Protection Layers Explained

MEXC protects user funds in five layers: account controls you switch on, real-time monitoring, cold storage for most assets, a monthly proof of reserves audited by Hacken, and two backstop funds.

The reserves and the fund wallets are the layers you can verify yourself, so they deserve the most weight.

Cold Storage: Where Most User Assets Are Kept

MEXC keeps the majority of user assets in cold storage, meaning wallets held offline, and a smaller share in hot wallets that process everyday withdrawals. Because cold wallets are not connected to the internet, an attacker who gets into an online system cannot reach those funds directly, which limits the damage from the kind of hot-wallet theft that hit Coincheck.

The split between cold and hot wallets is MEXC's own disclosure rather than an audited figure, which is why the proof of reserves below matters more.

Real-Time Monitoring and the Account Controls You Switch On

MEXC monitors logins, withdrawals and trading activity around the clock and flags patterns that look abnormal for review. When activity looks wrong, a withdrawal can be held until extra verification is complete, which is also why legitimate accounts can be placed under a risk review. Withdrawals and security changes require codes from the verification methods you have enabled, such as the MEXC/Google Authenticator app, SMS or email.

Before you deposit, switch on these controls:

Two-factor authentication through the MEXC/Google Authenticator app.
An anti-phishing code, which appears in every official MEXC email so fake messages stand out.
A withdrawal whitelist, so funds can only go to addresses you have already approved.
A clean API list: delete any API key you no longer use.

Removing your authenticator or changing your email triggers a 24-hour pause on withdrawals, which gives you time to contact support if you did not make the change yourself.

MEXC's help center also warns about callers posing as MEXC customer service or VIP account managers, and MEXC never asks for your login details, SMS codes or authenticator codes.

You can check whether an account claiming to be MEXC is genuine with the MEXC Verify tool.

Proof of Reserves: Audited by Hacken Every Month, Checkable by You

MEXC publishes a proof of reserves every month, audited by the blockchain security firm Hacken, which releases each report without MEXC's review or approval. The September 2026 report, taken at a September 10, 2026 snapshot, showed reserves covering user holdings at 297% for BTC, 119% for USDT, 111% for USDC and 111% for ETH.

In plain numbers, MEXC held 12,202.13 BTC against 4,106.57 BTC of user balances at that snapshot, so every 1 BTC on deposit was matched by about 2.97 BTC in audited reserves.

MEXC commits to backing every user asset 1:1, and any ratio above 100% means the audited wallets held more of that asset than users had on deposit.

All four assets have stayed above 100% in each monthly report from July to September 2026, and BTC coverage rose from 281% to 288% to 297% over those three reports.

You can confirm your own balance was included in four steps on the MEXC website:

Step 1: Log in and open Wallets, then Overview.
Step 2: Under Account, select Proof of Reserves to open the My Proof of Reserves page.
Step 3: Click Details, then Verify Now, and follow the on-screen check against the published Merkle root.
Step 4 (optional): Re-run the check yourself with MEXC's open-source Merkle verification code on GitHub.

A proof of reserves is a snapshot of four assets rather than a full financial audit, so it does not show liabilities outside those assets or what happens between reports.

For how MEXC's reporting compares with other exchanges' reserve reports, see our proof of reserves comparison.

You can open the current report, and your own record, before you deposit anything.

Guardian Fund: 100 Million USDT Plus 2,000 BTC for Platform-Side Incidents

MEXC launched its Guardian Fund in June 2025 with $100 million to compensate users if MEXC's own systems are breached, suffer a critical vulnerability or face a large-scale targeted hack.

MEXC said on October 1, 2026 that the fund now holds 100 million USDT and 2,000 BTC, and it plans to grow the fund to $500 million over the two years from May 2026.

The fund is a corporate commitment, not a statutory compensation scheme, and claims go through a manual eligibility assessment.

MEXC's published scope for the fund covers failures on MEXC's side and does not list trading losses or account takeovers.

For what protection funds across exchanges cover, and the losses they leave out, see our protection fund comparison.

You can check the fund's balances yourself on public blockchain explorers:

USDT reserve: Ethereum address 0x469AfE803C54A36674C55231489Cf4b61da8c1bC, which held about 101.6 million USDT on October 8, 2026.
BTC reserve: two Bitcoin addresses holding 1,000 BTC each, 1MDVjZdX8QD212pT8Z8EMP7DuFQHKqN3mx and 19KYQDpyssRUtpfa4pfAWiNQLeysThd1us.

Futures Insurance Fund: What It Covers and What It Doesn't

MEXC keeps a separate insurance fund for its futures market.

When a liquidated position closes at a worse price than its margin can cover, the fund absorbs the shortfall, which reduces how often profitable traders are hit by auto-deleveraging.

MEXC said the fund held about 798 million USDT in mid-September 2026, and the current balance for each contract is shown on the futures insurance fund page.

The fund protects the futures market as a whole rather than any single trader, so a liquidation is still a loss for the person whose position was closed.

Is MEXC Regulated? Licensing Status and Regulator Notices

MEXC's User Agreement excludes users in the United States, the United Kingdom, Canada and several other jurisdictions, and MEXC is not authorized in the UK or under the EU's MiCA rules.

Several regulators have published notices saying MEXC offered services in their markets without local authorization:

Regulator	Date	What the notice says
UK Financial Conduct Authority (FCA)	March 22, 2024	Warning list entry: MEXC is not authorized, so UK users would have no Financial Ombudsman Service or FSCS protection
Hong Kong Securities and Futures Commission (SFC)	March 15, 2024	Added to the alert list of suspicious virtual asset trading platforms targeting Hong Kong investors
Germany's BaFin	October 17, 2023	Consumer warning about financial services offered on mexc.com without authorization
Netherlands AFM, listed by ESMA	Decision of September 16, 2025, published September 24, 2025	Crypto-asset services offered without a MiCA license; MEXC appears on ESMA's register of non-compliant entities
Japan Financial Services Agency (FSA)	March 2023 and November 2024	Warnings to an overseas operator conducting crypto-asset exchange business without registration
Seychelles Financial Services Authority	May 26, 2026	Enforcement action against the company it identifies as operating MEXC, for virtual asset services without a license
Dubai Virtual Assets Regulatory Authority (VARA)	June 22, 2026	Fine and cease-and-desist order for serving Dubai customers without a license; VARA said the entity cooperated

Notices checked on October 8, 2026 on each regulator's website.

France's AMF and Belgium's FSMA have also taken action against MEXC in their markets.

None of these notices says MEXC lost or misused customer funds.

They matter for a practical reason: in those markets you have no local regulator to escalate a complaint to and no compensation scheme behind your account.

MEXC is also winding down services for users in the Netherlands, with offboarding scheduled to finish by October 31, 2026.

For how regulators across Southeast Asia treat MEXC and nine other platforms, see our regional exchange guide.

Has MEXC Ever Been Hacked? MEXC's Incident Record

No breach of MEXC's exchange wallets has been publicly reported since MEXC launched in 2018, and MEXC does not appear in our crypto exchange hacks database.

That describes the past rather than guaranteeing the future, which is why the reserve reports and fund wallets above matter more than a clean record.

The most widely reported dispute came in 2025, when a trader said MEXC had frozen about $3.1 million in his account since July.

On October 31, 2025, MEXC's Chief Strategy Officer apologized publicly and said the funds had been released.

MEXC has said that account restrictions are never imposed because a trader is profitable.

In September 2026, MEXC's CEO said the exchange had fully compensated a user who lost about $340,000 after an attacker gained control of the account and moved funds through an API key that remained on it.

What MEXC's Protections Cover, and What They Don't

MEXC's protections are built for failures on the platform's side, such as a breach of its systems or a futures liquidation gap, and the proof of reserves shows each month whether user assets are fully backed.

They are not built for losses that start in your own account or your own trades.

Holding funds on any exchange is a trade-off: you rely on its custody instead of your own keys, and in return you get audited reserves, backstop funds and a support team.

Cold storage, real-time monitoring and two-factor authentication reduce the chance that an outsider reaches user funds, though no setup removes that risk entirely.

Three backstops sit behind those layers: reserves above 100% on all four audited assets, a Guardian Fund of 100 million USDT and 2,000 BTC, and a futures insurance fund of about 798 million USDT.

What MEXC's protections do not cover:

Losses from phishing, malware, or a password or API key that leaks on your side.
Trading losses, including liquidations of your own futures positions.
Funds you send to a wrong address or network, which may not be recoverable.
Legal recourse in markets where MEXC is not authorized, such as the US, the UK and the EU.

Who MEXC Suits, and Who Should Look Elsewhere

MEXC suits traders outside restricted markets who want its range of listings and low trading fees, and who are comfortable relying on audited reserves and public fund wallets instead of a local license.

If that is you, open an account, switch on the controls above and check your own Merkle record after the next monthly report before moving larger sums.

For fees, products and the one catch we found, read our full MEXC review.

Look elsewhere if you live in the US, the UK or the EU, if you need a custodian covered by a statutory compensation scheme, or if a possible risk-control review on your account is unacceptable to you.

Our honest comparison of MEXC alternatives and our ranking of the best crypto exchanges in 2026 cover the main options.

The MEXC View

This MEXC exchange safety review is published by MEXC itself, so read it as the company's own account, checked against the reports, wallets and regulator notices linked above.

We think the strongest evidence is the part you can verify without trusting us: the monthly Hacken report, your own Merkle record and the fund wallets on public explorers.

We also think the regulator notices are a fair reason for caution, and we list the main ones here rather than leave you to find them elsewhere.

Our review methodology, including how we handle the conflict of an exchange reviewing exchanges, is published in full.

FAQ

Is MEXC legit?

Yes, MEXC has operated since 2018 and publishes a monthly proof of reserves audited by Hacken, plus public wallets for its Guardian Fund.

It is not authorized in the US, the UK or the EU, and several regulators have issued notices about it.

Is MEXC regulated?

No, MEXC is not authorized in the UK or under the EU's MiCA rules, and it does not accept users from the US.

The UK FCA, the Dutch AFM, the Seychelles FSA and Dubai's VARA are among the regulators that have published notices about it.

Has MEXC ever been hacked?

No breach of MEXC's exchange wallets has been publicly reported since 2018.

Individual accounts can still be taken over, and in September 2026 MEXC fully compensated one user who lost about $340,000 that way.

Does MEXC have proof of reserves?

Yes, Hacken audits it monthly, and the September 2026 report showed BTC covered at 297% and USDT at 119%.

You can confirm your own balance on the MEXC Proof of Reserves page.

What does the MEXC Guardian Fund cover?

It is built to compensate users if MEXC's own systems are breached, and it holds 100 million USDT and 2,000 BTC.

It is a corporate commitment, not a statutory scheme, and its published scope does not include trading losses.

Is MEXC safe for US users?

MEXC does not accept users from the United States, so US residents should use a platform authorized in the US.

Can MEXC freeze my account?

Yes, MEXC can restrict an account during a risk-control or verification review.

In the best-known case, a $3.1 million freeze in 2025, MEXC apologized publicly and released the funds.

Is the MEXC app safe?

The official app uses the same account protections as the website, including 2FA, an anti-phishing code and withdrawal whitelisting.

Download it only through official MEXC app links, because fake MEXC apps and impersonated support accounts circulate online.

Risk Warning and Regional Notice

Perpetual futures and leverage amplify both gains and losses, and positions can be liquidated for the full margin amount.

Proof of reserves, protection funds and insurance funds reduce specific risks, but none of them guarantees the value of your holdings or the future solvency of any exchange.

This article is informational for readers in the United States, the United Kingdom, and Australia, where the platforms discussed may not be available or authorised.

In the EU and EEA, MEXC is not authorized under the Markets in Crypto-Assets Regulation (MiCA).

The Dutch regulator AFM has placed MEXC on its register of non-compliant entities, which ESMA republishes, and readers in those regions should factor this status into any decision.

In a May 26, 2026 press release, the Seychelles Financial Services Authority said the company it identifies as operating the MEXC platform does not hold a licence under its Virtual Asset Service Providers Act, 2024, that it is initiating enforcement measures, and that the public should exercise caution when dealing with the platform.

In a June 22, 2026 notice of fines, Dubai's Virtual Assets Regulatory Authority said the entity operating as MEXC had served customers in Dubai without a licence from 2022 to April 2026 and onboarded users without meeting UAE know-your-customer requirements, and that it cooperated, complied with cease-and-desist orders and intends to seek a licence.

Nothing here is investment advice, and fees, leverage tiers, and availability change, so confirm current terms on each platform's official pages before trading.

Bottom Line: Is MEXC Safe to Use?

MEXC is safe in the ways an exchange can prove publicly: audited monthly reserves, cold storage for most assets, public fund wallets and no reported breach of its exchange wallets.

Its weak point is licensing rather than custody: in markets where MEXC is not authorized, you have no local regulator or compensation scheme behind your account.

If MEXC operates in your country, the sensible order is to open an account, switch on the security controls and check your own Merkle record before moving serious money.

Open a MEXC account if the platform is available where you live, then run the checks above before your first deposit.

Recommended reading:

MEXC Review 2026: fees, products and the one catch, scored against our published methodology.
Crypto Exchanges with Proof of Reserves: how MEXC's monthly Hacken reports compare with other exchanges' reserve proofs.
Crypto Exchange Protection Funds Compared: what protection funds cover, and the losses they leave out.
Crypto Exchange Hacks: The Complete Record: every major exchange breach on record, and how much users got back.

Disclaimer: This material does not provide advice on investment, taxation, law, finance, accounting, consulting, or any other related services, nor is it advice on buying, selling, or holding any assets. MEXC Learn provides information for reference only and does not constitute any investment advice. Please ensure that you fully understand the risks involved and invest cautiously. All investment behaviors of users are not related to this site.