Poloniex: crypto exchanges rating breakdown
Crypto exchange · reviewed against our published rubric, no affiliate links
Roughly $120m taken in 2023, a full reimbursement pledged, and no independent confirmation it was ever paid. The $100m “user protection fund” announced in 2026 has, by Poloniex’s own admission, no published trigger or coverage scope. No fiat rails at all.
How the score is built
Each criterion is scored 0–10 and weighted. The median column is the middle score across every entry in this ranking, so a row reads as a position rather than a number.
| Criterion | What we measured | Weight | Score | Category median | Rank | Weighted gap |
|---|---|---|---|---|---|---|
| Custody of funds | — | 40% | 3 | 5 | 19 of 28 | -0.80 |
| True cost of trading | 0.2412 % effective cost on a $10,000 buy · computed · 2026-07-14 · source0.2 % published taker fee · published · 2026-07-14 · source0.2539 % effective cost on a $100,000 buy · computed · 2026-07-14 | 16% | 5 | 6 | 20 of 28 | -0.16 |
| Liquidity and execution | 0.0144 % BTC spread · measured · 2026-07-1433.5034 BTC depth within 0.1% of best ask · measured · 2026-07-14110.4202 BTC depth within 0.5% of best ask · measured · 2026-07-14 | 11% | 7 | 6 | 9 of 28 | +0.11 |
| Assets and networks | — | 9% | 7 | 6.5 | 11 of 28 | +0.04 |
| Fiat on/off ramp | — | 11% | 1 | 5.5 | 22 of 28 | -0.49 |
| KYC and access | — | 8% | 8 | 6 | 2 of 28 | +0.16 |
| Product, API and docs | 588 ms API response latency · measured · 2026-07-14 | 5% | 5 | 5.5 | 15 of 28 | -0.03 |
Measured 14 July 2026 · weights and method · decided by custody of funds, worth -0.80 points against the median
Custody of funds: 3/10
Proof-of-reserves: does it exist, who attests it, does it include liabilities (a PoR without liabilities is close to meaningless), how often. Insurance fund: size, is the address public, and has it ever actually paid out. Hack history — and above all whether users were made whole. Licences by jurisdiction, and the enforcement record behind them. Every claim here is sourced to a primary document: a regulator’s register, a court filing, or the venue’s own published proof.
Scored 3 of 10 against a category median of 5, which places it 19th of 28 among centralised exchanges on this criterion. At a 40% weight that is 0.80 points below the median contribution of the weighted total. The best score in the category is 9, the worst 1.
Monthly, Merkle-based, liabilities included, with open-source verification tools — and no named auditor anywhere in it. Poloniex builds the tree and checks its own homework. A $100m “user protection fund” announced in April 2026 — whose coverage scope, trigger mechanism and structure Poloniex says will be “disclosed in subsequent announcements”. No wallet addresses, no attestation. A fund whose rules are not published cannot be relied on, so we do not count it as theft protection.
True cost of trading: 5/10
Measured by us, not read off a fee page. We walk the live order book and fill $1,000 / $10,000 / $100,000 of BTC/USDT, then add the venue’s published taker fee. That sum — fee + spread + realised slippage — is the effective cost. Separately: the markup on network withdrawal fees, and the hidden spread inside “convert” / “buy in one click” flows.
Scored 5 of 10 against a category median of 6, which places it 20th of 28 among centralised exchanges on this criterion. At a 16% weight that is 0.16 points below the median contribution of the weighted total. The best score in the category is 10, the worst 1.
Liquidity and execution: 7/10
Order-book depth within ±0.1% and ±0.5% of mid, measured from the live book. Uptime over 12 months from the status page. Behaviour under stress: were there outages on days the market moved more than 5%.
Scored 7 of 10 against a category median of 6, which places it 9th of 28 among centralised exchanges on this criterion. At a 11% weight that is 0.11 points above the median contribution of the weighted total. The best score in the category is 10, the worst 1.
Assets and networks: 7/10
Number of pairs, adjusted for quality: the share of listings delisted within a year. Which networks are actually supported for deposit and withdrawal — not merely “supports USDT”.
Scored 7 of 10 against a category median of 6.5, which places it 11th of 28 among centralised exchanges on this criterion. At a 9% weight that is 0.04 points above the median contribution of the weighted total. The best score in the category is 10, the worst 1.
884 spot markets, fetched live from its own API
Fiat on/off ramp: 1/10
Which methods are actually available per country, their fees, and their limits per verification tier — read from the venue’s published terms and cited. Where a venue does not publish this, that opacity is itself the finding, and it scores accordingly.
Scored 1 of 10 against a category median of 5.5, which places it 22nd of 28 among centralised exchanges on this criterion. At a 11% weight that is 0.49 points below the median contribution of the weighted total. The best score in the category is 10, the worst 1.
None at all. There is no fiat deposit rail and no fiat withdrawal, in any currency — only crypto in, and a third-party card processor if you want to buy.
KYC and access: 8/10
Verification tiers and their limits, what is genuinely usable without verification, and the country deny-list — from the venue’s published policy, cited. A venue that will not tell you your withdrawal ceiling before you sign up is marked down for it.
Scored 8 of 10 against a category median of 6, which places it 2nd of 28 among centralised exchanges on this criterion. At a 8% weight that is 0.16 points above the median contribution of the weighted total. The best score in the category is 9, the worst 1.
Published clearly and generously: $10,000/day withdrawals with no ID at all (rising to $50,000 with 2FA), and $500,000/day once verified. United States: The US and all its territories are a Restricted Territory. Poloniex settled with OFAC in 2023 for about $7.6m over sanctions violations. European Union: None — absent from the ESMA register. No CASP authorisation after the MiCA transition closed on 1 July 2026.
Product, API and docs: 5/10
API documentation quality, whether rate limits are documented, whether a public status page with uptime history exists, and the API response latency we measured ourselves while pulling the order book.
Scored 5 of 10 against a category median of 5.5, which places it 15th of 28 among centralised exchanges on this criterion. At a 5% weight that is 0.03 points below the median contribution of the weighted total. The best score in the category is 9, the worst 4.
Documented API and rate limits. No status page — the domain does not even resolve.
Incidents priced into this score
November 2023: hot wallets drained of roughly $100–125m. Withdrawals were suspended and resumed at the end of that month. We found no confirmation that affected users were made whole. [source]
Its nearest neighbours in this ranking
| # | Entry | Custody of funds | How it differs |
|---|---|---|---|
| 21 | HTX | 3 | Level on custody of funds; the gap is elsewhere. |
| 22 | Bitfinex | 3 | Level on custody of funds; the gap is elsewhere. |
| 24 | Independent Reserve | 6 | Ahead by 3 on custody of funds. |
| 25 | XT.com | 2 | Behind by 1 on custody of funds. |
Sources
Questions about this score
Were Poloniex users repaid after the 2023 hack?
+
Unconfirmed. Hot wallets were drained of roughly $100–125m in November 2023, withdrawals were suspended and then resumed at the end of that month, which is consistent with the shortfall being covered — but no confirmation that affected users were made whole has ever been published or independently verified. Resumed withdrawals are evidence of liquidity, not of compensation.
Why is Poloniex restricted in the United States?
+
It settled with OFAC in 2023 for about $7.6m over sanctions violations, and the US and all its territories are now a Restricted Territory in its own terms. The FCA followed with a consumer warning in December 2023 for promoting financial services without permission.
How good is Poloniex's proof of reserves?
+
The machinery is decent and the signature is missing: monthly, Merkle-based, liabilities included, with open-source verification tools — and no named auditor anywhere in it. Poloniex builds the tree and checks its own homework, which for a venue with its regulatory and incident record is the weakest place to be asking for trust.