An exchange balance looks like ownership of a specific quantity of an asset. In most cases it is an entry in the exchange's own ledger, which is a materially different thing.
Internal records replace on-chain movement
When two customers trade on the same platform, nothing is recorded on any blockchain. The exchange simply debits one internal balance and credits another in its own database.
This is why trading on an exchange is instant and free of network fees while a withdrawal is neither. Only the withdrawal is an actual blockchain transaction.
The arrangement is efficient, but it means the customer holds a claim against the exchange rather than direct control of an asset for as long as the balance stays on the platform.
Assets are pooled, not segregated
Exchanges typically combine customer holdings into shared wallets rather than maintaining an address per customer, because managing millions of individual addresses would be costly and operationally fragile.
Pooling means no particular coins correspond to any particular customer. The platform's records, not the chain, determine who is owed what, and those records exist only inside the company.
Whether pooled assets are legally the customer's property or part of the company's estate depends on jurisdiction and on how the terms of service are written, and that distinction becomes decisive in an insolvency.
Hot and cold storage split the risk
A portion of holdings sits in wallets connected to the internet so withdrawals can be processed automatically, and that portion is the part exposed to remote compromise.
The remainder is held offline with keys that require physical access and multiple approvals to use. Moving assets out of cold storage is deliberately slow, which is why large withdrawals sometimes queue.
The balance between the two is a business decision. More in cold storage means better security and slower service, and platforms differ substantially in where they set it.
Proof of reserves shows only one side
Publishing wallet addresses demonstrates that assets exist, but existence alone says nothing about what the platform owes against them.
A meaningful attestation pairs verified holdings with verified customer liabilities, and the liability side is the harder half because it depends on internal records an outsider cannot observe directly.
Borrowed assets can also be moved in temporarily to satisfy a snapshot, which is why the timing and continuity of these checks matter as much as their existence.
Self-custody moves the risk rather than removing it
Holding assets in a personal wallet eliminates exposure to a platform failing, since the keys are controlled directly and no intermediary can restrict access.
It replaces that with the risk of losing the keys, and there is no recovery process. A lost seed phrase is permanent in a way that a forgotten password on a platform is not.
Neither arrangement is inherently safer; each concentrates risk in a different place, and the appropriate choice depends on which failure a holder is better positioned to prevent.